Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File:                     4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier:          clrBQwZgKg7Y1rPecuz1ma+uE1i5igRgWtmck1gqzpk=
Subject key identifier:   0F:70:A1:54:72:81:6B:35:3C:DC:32:4A:DD:5C:9D:39:38:2D:96:27
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer:       /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial:       01901DED28026293886C5D2D9A94B37D9517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number:          0AED
Signing time:             Sat 15 Jun 2024 22:03:19 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:19 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:19 +0000
Files and hashes:         1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: Gc2OyRbI61cHdYl3MPXOq1RAPbx1TOnlcM+tTdh9kkA=)
                          2: wQ8lKiM-P3Cl5D066iucEUjsiQk.roa (hash: swJBKwGrDpp+RPL+AhUpmfuC+tf/QNWqv2Lroz0GeOo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:28:02:62:93:88:6c:5d:2d:9a:94:b3:7d:95:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
        Validity
            Not Before: Jun 15 22:03:19 2024 GMT
            Not After : Jun 16 22:03:19 2024 GMT
        Subject: CN=0f70a15472816b353cdc324add5c9d39382d9627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:3c:fe:a6:94:29:29:09:4e:a1:6a:5b:67:
                    f4:35:40:df:44:60:e3:e9:db:34:53:00:78:ca:34:
                    5b:e0:58:d4:9f:a2:e2:39:b4:08:77:f1:95:46:ab:
                    6d:ee:35:18:91:21:b2:83:37:d9:ce:74:5d:98:98:
                    99:d5:29:9c:75:67:4e:d5:9a:d0:ef:22:a3:f7:af:
                    bc:c7:5e:bf:82:48:33:a3:98:06:61:da:68:7d:66:
                    63:1c:86:c7:dc:63:08:c3:d1:de:2d:cb:6a:cc:80:
                    85:2f:7f:6b:23:de:fd:41:83:a4:48:55:95:8b:12:
                    dd:21:31:97:ef:2a:06:6e:8a:f7:d8:47:60:ae:44:
                    53:6a:1d:09:a8:eb:04:be:fd:4f:63:13:1b:a2:a5:
                    44:76:81:2d:2d:18:da:02:c2:ed:42:d3:36:b0:47:
                    cc:7f:87:5c:61:9b:a7:cb:04:15:6c:dd:a5:4a:74:
                    6e:8c:b0:7f:0e:06:45:d3:e5:38:96:fd:d2:67:4d:
                    60:f0:90:bd:36:7d:8a:0a:6b:2c:20:7e:5e:8d:5f:
                    aa:fd:a9:c6:77:60:37:93:20:a2:11:53:9f:75:2c:
                    36:24:9c:d9:3c:8f:95:69:92:e4:6e:43:7e:a0:2d:
                    d9:51:78:47:74:0f:3d:ab:39:6e:8b:82:06:7f:66:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:70:A1:54:72:81:6B:35:3C:DC:32:4A:DD:5C:9D:39:38:2D:96:27
            X509v3 Authority Key Identifier:
                keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:21:46:e8:1c:d6:db:fc:70:41:b6:0b:11:bf:34:3b:07:d5:
         b5:10:06:83:23:c3:2d:ec:f3:7b:75:20:e9:74:61:48:8a:ef:
         4e:26:ae:a9:0d:70:74:3f:5d:92:18:86:ee:28:65:e9:07:bc:
         b0:29:10:f9:bc:a0:62:b7:ca:7a:3c:b6:d0:5f:a5:9b:19:ce:
         66:eb:e8:f3:99:63:9f:fc:8b:a4:0c:ce:97:e6:f9:73:fd:0c:
         20:59:e3:9c:a8:e9:8a:71:55:2e:87:16:d8:91:05:35:39:83:
         32:a1:0d:25:68:6d:a4:0e:ef:b8:06:90:f1:76:f3:3a:84:64:
         74:4e:ee:4f:2a:a9:ae:79:8d:a4:f6:0e:90:7e:dc:02:b0:a1:
         9e:a2:6f:29:6d:8e:d8:08:f0:3e:fb:1a:45:de:e3:0b:b5:27:
         6e:d0:9c:2e:14:f4:20:16:bf:58:3b:10:53:0e:a8:a0:a3:e4:
         63:c9:b4:cd:77:c8:25:2c:fc:5d:dc:4a:03:1d:3e:09:ef:25:
         29:a3:95:16:b2:71:fd:8c:32:fd:6a:5d:d6:db:01:9d:9b:55:
         5c:46:ef:11:b1:45:6e:c9:5e:dd:9e:ac:16:4f:ed:68:fc:cd:
         cb:47:64:cd:96:44:a6:4a:8e:04:25:b2:09:32:62:62:28:99:
         84:d0:a2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:59 2024 by rpki-client on console-ams.rpki-client.org