Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
File:                     IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft (raw, json)
Hash identifier:          4RMQaPBl94TGFHfrchABXT4dWG5ud0zDbRL8TW0Ax7A=
Subject key identifier:   F7:6F:26:3A:95:E3:F4:35:27:AC:A6:E3:B6:E9:BF:5D:90:49:17:BD
Authority key identifier: 20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54
Certificate issuer:       /CN=2046367390224a07684d7977f9165a0950f03d54
Certificate serial:       01901BFEE96742F9BAA9AEBC50868ECF656D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
Manifest number:          0ED1
Signing time:             Sat 15 Jun 2024 13:03:29 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:29 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:29 +0000
Files and hashes:         1: IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl (hash: 0+aN1O3yqBmqs2hYGfpyPuVDgHoIGZMwbqsobyUBzes=)
                          2: XReKLjcHleNrYhFK5A95AuWjxts.roa (hash: fe8DFRQwzgQhJ93WFlmkdP8VS7b3/UQqCaKgEhEt/Ro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:e9:67:42:f9:ba:a9:ae:bc:50:86:8e:cf:65:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2046367390224a07684d7977f9165a0950f03d54
        Validity
            Not Before: Jun 15 13:03:29 2024 GMT
            Not After : Jun 16 13:03:29 2024 GMT
        Subject: CN=f76f263a95e3f43527aca6e3b6e9bf5d904917bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:8c:95:30:e5:21:c6:e4:52:35:4d:09:d2:
                    4c:e5:85:bd:e8:9b:68:7b:07:16:5b:91:e9:01:d1:
                    8b:c4:55:70:67:a1:c9:ac:7d:81:f2:1f:ed:88:b7:
                    53:e3:cd:a1:2c:10:01:44:bc:0c:3f:81:ad:ba:72:
                    85:92:b8:bc:2c:04:a8:5f:38:d5:93:28:ca:de:d0:
                    f3:bc:a2:82:c5:32:2a:cd:c7:fa:84:1a:d3:0c:48:
                    45:6c:71:6b:33:5c:47:47:b9:6f:f7:dd:a7:7d:d0:
                    84:85:6a:3a:e7:54:97:8d:d2:48:34:8e:a4:6d:70:
                    ad:25:12:d7:59:1e:ed:53:ca:db:5f:c5:a4:7d:6b:
                    7b:c7:c8:5e:b2:fa:e0:ae:4a:a0:1b:45:41:f4:5d:
                    91:2e:4d:8c:14:19:99:f2:15:fa:c8:9b:2e:0a:3f:
                    23:f0:0c:97:56:e0:68:d0:17:97:45:3c:22:bb:e3:
                    c8:bf:47:b1:9f:ae:d3:58:84:9e:b0:5f:3c:65:19:
                    ac:0f:74:8e:5d:4f:e4:44:60:0e:e6:a6:d6:c8:12:
                    ba:e7:83:fe:ce:b6:da:2d:56:e5:d1:29:b8:9d:d0:
                    68:c7:c7:e6:cb:f9:51:e0:1f:96:10:57:db:c9:4e:
                    c8:23:2d:ad:2a:e9:60:29:5f:1e:52:8a:9f:ce:09:
                    02:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6F:26:3A:95:E3:F4:35:27:AC:A6:E3:B6:E9:BF:5D:90:49:17:BD
            X509v3 Authority Key Identifier:
                keyid:20:46:36:73:90:22:4A:07:68:4D:79:77:F9:16:5A:09:50:F0:3D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/f86013-fe1d-41be-afe8-c8fc6163942b/1/IEY2c5AiSgdoTXl3-RZaCVDwPVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:46:cf:f6:f5:72:fb:6a:1f:14:9e:e0:a3:a4:b7:79:bd:f1:
         57:1b:3b:ff:41:58:b4:45:c4:8b:55:b1:07:1b:2a:ac:0b:79:
         78:95:fc:bc:55:da:96:40:ad:d2:c1:5d:be:10:a8:64:fb:26:
         f1:24:ad:1a:25:df:03:14:c3:20:87:3d:9c:e8:bd:66:17:ba:
         09:a9:77:55:57:50:44:e1:72:f9:93:f7:0b:52:3b:73:b9:5d:
         eb:bd:d3:4f:27:8d:b6:96:1b:e2:34:80:ce:76:e8:13:13:b4:
         ae:c1:de:66:d8:72:06:26:5f:d3:09:52:2f:d9:27:f3:de:9b:
         2d:c7:c1:66:ef:c3:d8:2c:2f:61:ea:7d:ea:d3:0b:2c:7c:62:
         49:af:7e:3f:1f:ef:3c:5c:a7:b0:83:62:e2:94:fe:e0:34:5f:
         fc:fd:af:f6:2e:c4:9c:4e:5e:f9:7f:53:cd:d1:1c:23:54:ff:
         1a:9a:6b:05:98:c6:5a:4f:0a:b1:7d:3f:cc:11:ec:63:6d:2c:
         74:53:45:b9:31:bc:3a:7f:19:05:95:02:94:44:cf:68:d4:a7:
         94:4e:c0:e3:3b:5f:c2:4c:9e:f4:cc:fe:5f:f2:10:01:dd:59:
         91:43:8e:8f:d6:59:19:d6:9c:96:5c:a8:0e:83:e8:09:d3:87:
         84:96:26:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:46:31 2024 by rpki-client on console-ams.rpki-client.org