Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File:                     vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier:          UGqVribCOFHUyvlnYlyFH3pkbHSn/k4P4rQjGFz4aUM=
Subject key identifier:   12:44:38:32:CB:40:CD:30:EC:88:16:A5:92:EB:8E:90:5A:28:56:8C
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer:       /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial:       01901DEC668578844ACA783650803FFA8FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:02:30 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:30 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:30 +0000
Files and hashes:         1: jQpNU0aHJZfPBtWmRx6lmX7H1ms.roa (hash: oBShq/otjz2CXrG1GqoY8ab09ZxZWZR8xiqYTSuC9RM=)
                          2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: V6M8Z5rpjmHwX+/rsVoK7QMAzWNsY26tPk7gpAVe57k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:66:85:78:84:4a:ca:78:36:50:80:3f:fa:8f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
        Validity
            Not Before: Jun 15 22:02:30 2024 GMT
            Not After : Jun 16 22:02:30 2024 GMT
        Subject: CN=12443832cb40cd30ec8816a592eb8e905a28568c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:96:e5:60:ab:13:bf:51:90:ce:54:2a:3a:90:
                    77:82:a3:83:95:13:1f:d6:c3:36:97:ac:2a:f2:ac:
                    b8:75:60:b7:da:fa:09:02:12:f7:33:1e:22:a9:05:
                    cf:50:22:4e:63:be:ca:b8:a3:05:9a:8c:90:52:48:
                    4b:10:89:5f:c7:20:69:f4:4a:a7:a9:41:d3:4e:2a:
                    cf:df:28:02:13:bd:ac:9d:b7:6d:c0:9d:21:4c:8e:
                    d8:ae:a3:ab:b3:31:86:73:e7:a2:21:65:3f:aa:46:
                    8a:f4:32:27:83:0b:6e:ae:59:f4:12:d9:ed:1c:e0:
                    7b:52:8b:e2:e1:eb:01:fb:8a:3a:db:91:98:db:a8:
                    75:63:f1:40:9c:b1:d3:04:50:50:ef:92:fb:2e:1d:
                    05:6a:ff:f8:37:72:45:54:9d:db:a4:9d:9f:b9:2b:
                    f0:94:a0:d2:8d:3d:fa:e3:c5:eb:77:dd:21:05:78:
                    3a:1b:02:fa:b2:f4:d2:20:6a:51:34:65:94:df:16:
                    8d:61:3b:34:54:8e:89:73:74:b4:c7:ad:db:88:e4:
                    39:fb:8c:c9:86:27:30:58:0e:d2:3c:13:6f:bd:6e:
                    d6:49:22:d7:4b:14:34:e7:3d:ee:57:fc:46:af:3f:
                    b6:92:8d:51:b1:b8:b3:c7:4c:43:fa:b7:2a:5e:40:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:44:38:32:CB:40:CD:30:EC:88:16:A5:92:EB:8E:90:5A:28:56:8C
            X509v3 Authority Key Identifier:
                keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f4:b2:74:7b:b3:50:97:91:7c:26:ed:7f:d7:62:51:01:55:
         bc:73:6b:d6:e9:0a:b4:2c:27:33:7d:ff:a7:99:97:c4:f4:ff:
         51:9d:d7:80:b7:01:92:c8:9e:de:97:e6:06:5f:94:5b:ba:b3:
         e9:6e:98:2b:0a:af:f4:bf:d7:c5:7b:17:84:fc:e6:5f:27:9b:
         7c:49:89:a3:93:71:25:3f:90:80:04:e0:1f:13:ec:38:12:2a:
         99:0a:37:df:9e:bd:93:09:cc:49:21:5c:68:e4:38:c5:b2:fc:
         64:61:12:13:cc:19:2e:a9:7c:b8:d6:fc:2d:d9:ac:3d:b9:bb:
         09:67:1e:d3:85:4b:24:c3:50:6b:bf:82:fe:d0:e4:b2:c3:78:
         04:64:f3:c2:b1:53:f7:d8:35:17:0d:7b:ec:de:27:98:1b:2a:
         a9:ff:f3:72:a7:84:63:70:c0:2e:a6:f4:58:94:fa:57:0f:54:
         21:d3:8e:f5:3a:fe:5c:77:62:30:a8:da:8b:9f:94:5f:a5:1b:
         d7:da:86:0f:66:f6:4d:39:86:0a:c7:a6:a2:99:a4:13:80:6f:
         50:be:10:b3:52:e3:cf:16:87:ca:79:73:3c:96:92:7e:63:f3:
         31:5f:45:5d:a1:80:ba:e9:25:1c:b7:39:28:2f:a3:f7:74:5a:
         e8:a6:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:53:10 2024 by rpki-client on console-ams.rpki-client.org