Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File:                     5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier:          YtVpAybBEbjpR+l191K/2yTDLbm/KSvbxkUKEwNVbA0=
Subject key identifier:   6F:E9:7E:98:46:CF:F4:5A:60:7A:50:08:73:45:F5:AB:DD:92:B6:42
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer:       /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial:       01901DED0A1225F4E90B53B5545ECD989D4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 22:03:12 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:12 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:12 +0000
Files and hashes:         1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: 3Z6dP54C1eA6lv71tUkpql/UDNdq9DH3NGOrokibVyo=)
                          2: RCrTEPZTCU8Pso24HrOUSnlWM5U.roa (hash: n4J3k0WKddiNPKQ40+B0Z7+zJSHNSYsn/HCl2akhYas=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:0a:12:25:f4:e9:0b:53:b5:54:5e:cd:98:9d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
        Validity
            Not Before: Jun 15 22:03:12 2024 GMT
            Not After : Jun 16 22:03:12 2024 GMT
        Subject: CN=6fe97e9846cff45a607a50087345f5abdd92b642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:67:b2:80:e0:67:22:d4:57:a6:dc:cd:06:
                    93:cd:33:bc:b2:1b:a2:7a:45:4d:17:79:a9:25:36:
                    44:20:f2:df:8f:8b:4c:6d:f7:ef:f0:6a:0c:cb:66:
                    e6:2a:21:b4:ac:b5:48:8d:2a:c0:ba:9b:3d:d3:97:
                    a7:9a:ac:09:d2:82:a6:f1:09:7c:a0:d2:4a:a6:32:
                    17:dd:59:ca:d3:21:6d:68:7c:21:de:ff:00:ae:72:
                    aa:e7:37:a2:f6:ab:c7:49:70:ae:92:19:bc:22:8c:
                    ce:82:f4:b7:cd:6b:fc:40:56:12:28:2a:60:bf:6e:
                    3d:f8:29:9a:c7:be:51:59:bb:b9:ca:4b:11:a7:5c:
                    db:de:3f:3c:44:0c:a8:da:ef:d8:78:61:53:c3:00:
                    e9:8e:5d:b1:c5:ae:bd:be:8f:c6:9c:5f:36:f2:bc:
                    b0:a2:5f:f6:23:74:7e:64:85:4c:9c:b3:90:0c:8f:
                    1d:10:40:f8:58:42:02:30:ff:74:18:23:26:76:8d:
                    e5:1c:a8:c4:75:ad:b9:4d:56:69:a9:10:b0:ac:34:
                    a0:88:19:66:29:41:55:ea:70:af:ff:03:1b:af:8a:
                    54:a6:e2:c0:b3:15:10:1e:fc:9d:ff:2a:4a:fd:a6:
                    36:d7:a0:11:d4:e6:42:af:64:95:ba:f3:f5:31:36:
                    2a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E9:7E:98:46:CF:F4:5A:60:7A:50:08:73:45:F5:AB:DD:92:B6:42
            X509v3 Authority Key Identifier:
                keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d6:75:2b:39:76:c3:34:8d:a6:2f:a9:cf:b4:47:d4:11:db:
         fd:6e:1c:f0:61:da:cb:8c:03:7f:92:01:56:d8:02:06:53:d5:
         88:b0:94:2d:37:4c:8b:61:ac:00:5f:b1:5d:b9:09:f2:68:3b:
         78:82:35:35:51:4a:e1:b8:f3:80:c6:fa:b6:fa:59:83:b0:1e:
         64:35:35:e0:44:e4:09:bc:8d:14:75:b3:69:41:52:19:e1:9b:
         8a:7d:a1:09:4a:6a:6b:e3:ea:45:6d:10:44:16:5b:61:0f:2c:
         bc:57:c9:24:39:94:cd:47:1e:ae:59:aa:f2:97:15:89:78:ac:
         32:9e:80:b4:19:23:2f:1a:8b:09:61:8d:a7:3c:12:8b:b1:8b:
         6e:58:13:11:88:34:35:14:57:c6:71:74:38:bd:37:21:f2:20:
         fe:d0:49:c9:69:3b:61:34:b8:47:2d:da:79:e4:fa:2a:c5:d8:
         8a:23:20:6c:6a:06:d6:d2:1e:ea:b5:65:fe:34:3b:89:21:38:
         c5:28:2f:3b:73:e3:a3:95:b2:68:2f:f5:f1:43:3a:68:21:9e:
         27:68:ff:14:de:8a:6c:21:0f:88:69:fd:02:b4:91:41:ba:0f:
         62:3a:5f:19:20:43:3d:9c:01:68:f9:7f:5d:a3:84:1a:85:5d:
         28:9c:c6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:57:54 2024 by rpki-client on console-fra.rpki-client.org