Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
File:                     TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json)
Hash identifier:          1XmVGJHMRG2yIwMHz6fqLSNesZj5Jte9Rc3hbdimhp0=
Subject key identifier:   92:BD:8B:94:FF:9E:08:6A:19:19:60:F7:FF:D6:73:1B:A8:C5:4D:7D
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Certificate issuer:       /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial:       01901E58E25D36E1AD2C22B86FD238DC5254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
Manifest number:          0D1A
Signing time:             Sun 16 Jun 2024 00:00:59 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:59 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:59 +0000
Files and hashes:         1: 3XHwmwXSsJUX4CfzKCIGEfXMV68.roa (hash: L8hCBUplhds6UPIaVacTIz/9O6G6RCMK9tqnxchcjB8=)
                          2: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: YWHdX/jlqhyCtJ6/88VpQ2dg5scC5QsBpfeDgzEZukw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:e2:5d:36:e1:ad:2c:22:b8:6f:d2:38:dc:52:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
        Validity
            Not Before: Jun 16 00:00:59 2024 GMT
            Not After : Jun 17 00:00:59 2024 GMT
        Subject: CN=92bd8b94ff9e086a191960f7ffd6731ba8c54d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:b7:37:77:8d:ff:ac:17:6b:46:7f:54:d4:
                    44:53:e1:ca:c0:77:a6:40:b8:3c:95:bd:31:90:cd:
                    17:b6:ab:30:77:90:4f:c9:66:2c:74:0d:76:8e:d2:
                    3c:00:ab:6c:af:58:5e:60:42:bb:8b:b3:fd:af:46:
                    ee:8f:f6:e6:63:ea:c0:11:b3:c5:52:b1:b6:ba:6a:
                    9a:d8:79:3d:d5:9f:53:ec:58:dd:2a:26:b1:6a:ce:
                    2a:29:ca:f0:8a:49:e3:dc:d7:9f:5a:75:a2:f8:57:
                    16:c8:dd:77:3a:e3:27:12:39:de:4a:86:d1:78:f9:
                    21:26:a9:63:7a:24:3c:fd:dc:02:61:82:41:68:f1:
                    24:f2:6d:80:27:2e:3c:e2:08:e4:db:d4:db:0a:de:
                    0c:1a:9b:58:39:2f:12:7f:4c:32:92:20:26:94:30:
                    02:8d:de:02:68:a8:96:c8:fc:0a:ef:88:63:b6:7f:
                    9d:38:f0:ea:3b:36:7b:3d:5c:6e:d0:9e:8b:9b:ff:
                    00:59:7a:29:03:f2:bd:f2:36:da:12:15:b9:c1:12:
                    30:d5:8d:cd:d0:29:84:d8:2c:d8:a9:c2:cc:af:3e:
                    61:ea:bb:5b:83:99:60:f8:ed:0b:e1:31:e2:d8:22:
                    28:4c:c5:fc:b5:6a:db:d8:fc:7a:6f:88:02:80:65:
                    89:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BD:8B:94:FF:9E:08:6A:19:19:60:F7:FF:D6:73:1B:A8:C5:4D:7D
            X509v3 Authority Key Identifier:
                keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:14:8e:89:05:d9:ab:39:57:82:c3:e0:18:d4:2c:f1:3d:2b:
         08:1f:8b:ce:2c:1d:f2:bd:a3:d7:0d:50:69:15:9e:28:29:fe:
         3f:56:a7:10:a3:e4:94:f2:37:43:9a:1c:8c:23:15:14:ed:8e:
         2e:df:fd:d8:61:71:c5:a7:6d:97:38:7a:f7:3c:63:23:27:2b:
         f1:90:8e:58:bc:6a:70:51:8c:67:4f:5c:73:0b:47:21:c4:1f:
         a9:e2:e2:46:30:b1:41:d5:da:24:4a:1d:b8:e2:86:2f:68:18:
         7a:eb:80:fe:bf:12:37:a4:28:6f:56:83:d7:fd:06:f7:3d:a5:
         d3:64:53:0d:ee:07:25:50:ef:f9:09:7d:eb:30:d4:1b:61:2c:
         6e:cf:80:dc:98:d4:52:42:5c:47:4b:6c:83:da:d1:a6:0b:69:
         36:14:00:0e:19:1d:93:dd:1d:d7:cc:7f:1e:34:01:35:f6:05:
         44:ce:47:c9:ed:2a:85:75:48:a3:e9:41:4a:28:a1:e8:d7:ed:
         ee:cd:92:07:82:7e:77:81:99:61:18:58:1e:18:a2:20:51:29:
         21:ef:0f:3d:38:7a:e5:2e:6d:83:83:32:be:8c:02:2d:55:42:
         6a:e1:29:2f:02:e4:d5:80:58:05:72:c2:1b:32:76:8a:48:05:
         fb:3b:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:33 2024 by rpki-client on console-ams.rpki-client.org