Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.mft
File:                     4qSQ41rZxh_VM04qHoVtgX0XMMI.mft (raw, json)
Hash identifier:          V+HTS1NtWCrzUSGskDaJJ3kIphAptLY0uUJjl9hfYTY=
Subject key identifier:   90:0A:FC:94:2E:E0:3B:33:9E:39:F5:1D:31:9F:3F:65:8A:A1:DE:4A
Authority key identifier: E2:A4:90:E3:5A:D9:C6:1F:D5:33:4E:2A:1E:85:6D:81:7D:17:30:C2
Certificate issuer:       /CN=e2a490e35ad9c61fd5334e2a1e856d817d1730c2
Certificate serial:       01901DEB1280964CC4ADCB9A00B261507E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qSQ41rZxh_VM04qHoVtgX0XMMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.mft
Manifest number:          04D1
Signing time:             Sat 15 Jun 2024 22:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:03 +0000
Files and hashes:         1: 4qSQ41rZxh_VM04qHoVtgX0XMMI.crl (hash: VU5OuDJHitP0mZWigxOMc4Zu3ETQWE2SDShfudjuj+8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4qSQ41rZxh_VM04qHoVtgX0XMMI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:12:80:96:4c:c4:ad:cb:9a:00:b2:61:50:7e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a490e35ad9c61fd5334e2a1e856d817d1730c2
        Validity
            Not Before: Jun 15 22:01:03 2024 GMT
            Not After : Jun 16 22:01:03 2024 GMT
        Subject: CN=900afc942ee03b339e39f51d319f3f658aa1de4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:c2:8e:e2:f6:26:21:c0:95:6d:f4:29:6d:
                    bb:01:58:35:49:e7:71:ff:23:34:07:a8:89:e8:8b:
                    d0:30:7a:13:81:31:a3:49:d3:23:fa:ba:bc:2e:ce:
                    c2:e4:a7:ea:9f:81:e3:17:4d:24:be:62:28:38:89:
                    56:b1:59:d3:a3:1c:d5:bc:b1:f0:d1:df:ac:4e:01:
                    d7:4c:96:ad:fe:17:1a:79:f0:b3:c9:bc:dd:64:cf:
                    ad:13:eb:8d:67:6b:bd:93:09:a0:96:1a:b0:40:a1:
                    92:18:77:4a:d0:db:d7:ff:af:e8:0b:06:80:63:a0:
                    1f:62:3c:a4:dd:bb:1f:96:6d:99:57:07:78:57:e6:
                    ed:84:74:b4:73:9d:fd:dc:22:6b:d4:dd:98:68:ac:
                    22:b2:73:20:68:58:c4:d6:7d:f5:ab:0c:de:e2:d6:
                    19:48:56:76:c0:32:66:ba:c8:a7:e5:c8:75:fc:0e:
                    1b:5a:3f:ea:bc:52:7f:83:63:9b:ab:6c:c4:b0:25:
                    b4:32:e7:93:91:b7:bd:24:d8:d6:ac:b8:89:2f:38:
                    80:09:6f:ee:39:96:59:de:7f:13:26:79:fc:f9:38:
                    9c:a9:c5:fa:58:24:2f:48:d6:da:cc:c0:e9:34:d7:
                    dc:dc:23:c4:fb:dd:5f:de:c8:92:cd:4e:49:dc:6d:
                    6e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0A:FC:94:2E:E0:3B:33:9E:39:F5:1D:31:9F:3F:65:8A:A1:DE:4A
            X509v3 Authority Key Identifier:
                keyid:E2:A4:90:E3:5A:D9:C6:1F:D5:33:4E:2A:1E:85:6D:81:7D:17:30:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qSQ41rZxh_VM04qHoVtgX0XMMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:99:c6:d7:c2:c0:68:7e:de:c0:1f:f6:ab:77:6d:38:18:e0:
         b6:c6:90:be:b8:7b:ca:69:75:21:27:33:2c:7f:21:c2:9f:f6:
         8d:4f:e0:ba:5c:cf:ef:28:cd:ef:82:ac:07:96:f1:16:ad:14:
         f8:19:3c:39:75:21:f0:9e:1c:3f:34:01:81:d5:46:ac:6e:85:
         71:c0:d7:ee:cf:65:2c:51:24:b1:9d:aa:e6:ff:eb:91:c6:3b:
         85:38:72:1c:9c:74:b0:2e:fb:28:62:8c:96:34:54:28:67:2f:
         81:0a:36:15:28:f3:f9:0c:0c:b5:cd:86:df:05:67:3a:69:2e:
         d3:64:b9:63:93:a4:ac:4d:fa:8d:ef:db:66:12:be:b5:9a:0a:
         70:a0:b5:4b:b1:86:4a:eb:cd:bd:0a:73:1b:1a:9a:31:df:12:
         1a:41:87:54:bd:d3:82:d5:48:9a:da:7c:8d:e7:0e:c0:d0:94:
         ba:84:d7:5b:46:72:59:04:9c:5c:11:7b:99:17:8c:bc:be:1a:
         4c:e6:d7:0d:11:93:b9:5c:d4:5d:96:04:4c:47:cb:c0:02:47:
         26:e9:78:e7:12:1a:b0:d5:c1:a8:f0:06:86:0d:a1:d0:55:ab:
         06:67:11:68:78:91:bd:25:4d:bb:27:df:11:d4:61:cf:fd:7a:
         9d:a8:78:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:21:09 2024 by rpki-client on console-ams.rpki-client.org