Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File:                     INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier:          E8uFvcof0Wn2GUNWqaqa/j8q8HmUd5xqM7Ci5yyko+g=
Subject key identifier:   C1:45:31:9D:4A:71:25:ED:32:D7:8D:7A:38:33:16:84:26:47:AC:96
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer:       /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial:       0190429C091DABAEF700011F1C0A414E848C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number:          071F
Signing time:             Sun 23 Jun 2024 01:00:40 +0000
Manifest this update:     Sun 23 Jun 2024 01:00:40 +0000
Manifest next update:     Mon 24 Jun 2024 01:00:40 +0000
Files and hashes:         1: 1edC6yW53ueZauW7Qv02bcMwu28.roa (hash: IAOi3SELH8GOcgNEiEpYRVlf6baZwL8pA06tH+zUSaM=)
                          2: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: isKQZI1QXgIcC0qPZcYaXx1IC08Q6zpGpP0ZaZC6iVc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:9c:09:1d:ab:ae:f7:00:01:1f:1c:0a:41:4e:84:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
        Validity
            Not Before: Jun 23 01:00:40 2024 GMT
            Not After : Jun 24 01:00:40 2024 GMT
        Subject: CN=c145319d4a7125ed32d78d7a383316842647ac96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d6:00:28:29:b4:e5:43:06:7d:96:72:95:27:
                    f3:f2:f5:0b:ad:05:21:91:72:7f:64:4e:0c:34:84:
                    b0:42:1a:44:ae:09:ba:85:79:c9:49:30:35:c4:e1:
                    37:ae:b2:fe:5a:cf:37:f5:ac:b5:18:08:be:29:b8:
                    44:9b:d6:c3:d8:c2:03:fd:e5:03:6e:9a:0e:c9:ed:
                    d6:01:9d:d2:24:7d:ea:a0:cf:40:2d:32:7c:9b:63:
                    95:fe:7e:fd:96:a9:60:c2:9f:4e:f1:5c:ad:e3:f3:
                    22:2f:e6:be:1c:ad:4e:55:e2:94:a2:82:cb:4d:00:
                    48:0f:73:20:cc:3a:30:f1:89:14:0c:b0:47:98:0a:
                    55:15:c8:84:55:8f:51:7c:ab:87:56:96:c7:04:69:
                    fa:6a:13:e5:1e:92:a3:4d:bf:8d:53:61:b1:4e:57:
                    66:09:e8:ff:33:8b:70:8a:be:61:7e:27:34:5e:05:
                    ad:5a:b2:fb:62:68:2b:84:a8:96:dd:c8:c0:d3:2a:
                    4c:8b:74:b2:d4:3f:7c:dd:bd:bc:bb:a6:61:92:ac:
                    97:0d:99:3c:e4:60:b2:56:48:45:56:12:18:24:70:
                    bd:34:ca:70:45:36:51:d5:16:e8:64:f8:32:75:01:
                    0b:b2:77:1b:21:4c:13:84:a2:22:d6:91:00:ad:23:
                    85:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:45:31:9D:4A:71:25:ED:32:D7:8D:7A:38:33:16:84:26:47:AC:96
            X509v3 Authority Key Identifier:
                keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:33:73:da:fa:28:65:30:2b:d4:66:e9:e4:42:2b:46:5b:2c:
         b0:d7:a0:9f:ed:4b:37:56:2f:b4:90:5f:44:da:2a:d6:dc:4e:
         97:82:d6:76:55:25:b8:6f:fe:41:3f:4a:f1:21:ea:14:0c:2b:
         92:c0:96:df:e6:57:38:1a:f3:32:8c:79:88:1b:f6:94:2e:18:
         24:9e:7f:2c:b6:72:ba:47:6c:88:08:be:b4:e9:c9:43:f0:4a:
         ef:77:31:68:86:dc:37:fa:cd:33:60:08:91:68:cc:f9:aa:41:
         c7:b6:74:81:05:97:3d:4e:3a:bb:25:d4:66:8d:ac:8e:14:7b:
         e9:5e:3c:07:0e:b2:a6:d5:68:d7:d4:cc:4d:5f:56:7c:62:9a:
         f5:e4:6e:40:a3:95:13:ad:b8:18:89:89:93:cd:9f:ec:2b:51:
         18:6c:a2:33:44:08:c7:12:39:66:cc:87:05:d1:fc:5e:06:19:
         b2:6a:7b:ff:3d:83:81:2e:1f:49:15:81:6f:8a:fd:f4:4b:b4:
         04:64:25:60:44:1c:bc:01:92:4c:8a:ce:74:66:9c:cc:90:70:
         59:d4:ce:a7:2f:f5:f5:ca:a4:78:56:e3:76:07:67:5b:8d:1b:
         26:54:d2:62:0e:29:ac:4c:ab:ea:e6:aa:52:c2:e1:f4:3d:c2:
         43:a4:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:19:23 2024 by rpki-client on console-fra.rpki-client.org