Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
File:                     2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft (raw, json)
Hash identifier:          Lfx+vxjq4rgiwvIlWfxri6HptFOYTsjpKg/4EfOlFFQ=
Subject key identifier:   0A:F3:10:B7:93:C6:4E:F9:31:E6:04:D1:59:44:9F:12:EA:D4:34:46
Authority key identifier: D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2
Certificate issuer:       /CN=d9ad0d738c7af0359a0630365416440d01985ba2
Certificate serial:       01901DEBA01DEFC4091138CE9633F94F39A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
Manifest number:          04E4
Signing time:             Sat 15 Jun 2024 22:01:39 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:39 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:39 +0000
Files and hashes:         1: 2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl (hash: nOwCNqNnaFY2J8JIX/E7/n4PNglXr0WV1Bit9NHtzgQ=)
                          2: U8pwIecwqorSeXk_mzc57g3zCb0.roa (hash: rfxCPVTnIhL1ZrRMuFDH5zMC+/TouQ1Hqyesgw9ieAQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:a0:1d:ef:c4:09:11:38:ce:96:33:f9:4f:39:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ad0d738c7af0359a0630365416440d01985ba2
        Validity
            Not Before: Jun 15 22:01:39 2024 GMT
            Not After : Jun 16 22:01:39 2024 GMT
        Subject: CN=0af310b793c64ef931e604d159449f12ead43446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9f:a5:3c:16:d9:5a:b5:f1:57:de:d2:87:f3:
                    71:f0:db:56:0a:1c:07:54:00:5d:d2:09:16:5b:c0:
                    a2:58:9a:be:b6:74:ce:46:bd:b4:95:78:fe:a2:c8:
                    6d:90:3b:39:af:f7:8c:b8:5a:c3:da:d8:ce:ef:7a:
                    a2:7e:37:98:1b:bd:96:69:a6:55:67:7f:6a:fe:77:
                    1d:6e:08:9f:0f:f7:a9:5c:b2:8d:a2:f0:c8:32:fd:
                    70:62:72:f9:ad:e9:e6:5e:6f:72:9f:9f:26:81:d0:
                    43:d0:62:bd:d9:06:46:c4:d4:11:57:f2:7a:0e:bf:
                    91:de:b0:84:de:aa:95:90:a2:98:90:06:a4:7f:26:
                    4f:21:65:a0:a2:14:fb:e1:59:b4:97:da:3f:03:b3:
                    0c:19:7a:15:bd:6e:c8:d3:0f:b7:b6:0f:4e:bd:4d:
                    a5:fb:ef:f0:60:bb:75:2a:42:15:73:07:e9:65:1f:
                    e3:10:4b:2a:7e:fc:3e:02:55:ee:de:a2:a4:a1:02:
                    22:8c:a1:d4:79:b0:f3:07:06:72:e0:6a:e9:2c:d6:
                    27:a1:a3:72:58:21:e1:04:af:90:94:25:d9:85:03:
                    03:71:ba:d1:ff:ec:00:f8:20:42:d5:22:ca:31:9a:
                    1e:05:82:f1:11:e8:e9:39:a9:d1:0e:40:33:3d:9d:
                    da:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F3:10:B7:93:C6:4E:F9:31:E6:04:D1:59:44:9F:12:EA:D4:34:46
            X509v3 Authority Key Identifier:
                keyid:D9:AD:0D:73:8C:7A:F0:35:9A:06:30:36:54:16:44:0D:01:98:5B:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Nc4x68DWaBjA2VBZEDQGYW6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0dd80b-c5b4-4e6c-ba2e-b137cfb37463/1/2a0Nc4x68DWaBjA2VBZEDQGYW6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:28:54:68:3c:bf:b0:fc:c8:df:9e:07:07:30:51:23:f7:0d:
         a8:65:e9:74:94:3c:e9:5a:0a:cc:77:78:f6:d4:34:7d:78:5a:
         25:c1:9a:b8:97:56:47:22:d3:d6:df:70:83:b7:5f:5e:b9:ee:
         07:a4:81:1c:27:21:43:aa:80:fc:4c:ee:9a:5f:18:08:01:29:
         03:5e:f2:d9:61:19:18:83:c0:c2:89:a5:63:c6:40:13:0f:5c:
         b6:a7:bd:5e:9d:1f:12:a8:d6:75:5f:d9:1e:c6:b0:93:67:56:
         b3:4a:14:c8:4f:b9:a0:6d:33:12:72:37:d0:91:dd:2e:fc:a7:
         e7:59:e2:9f:0c:3c:9b:15:9f:13:45:66:91:f1:81:5e:37:d2:
         4b:52:fa:62:ac:9c:33:4d:c6:b4:6d:09:95:96:74:25:49:93:
         b2:9b:3c:05:92:8c:ef:d5:58:e6:51:80:95:af:45:91:d1:25:
         98:ec:8b:ad:ea:e1:01:f4:45:b8:2b:fe:94:68:c5:42:3d:0d:
         eb:5c:e7:cc:31:8d:74:6c:16:5d:bb:b9:c0:8c:82:3f:96:66:
         c7:8f:97:48:30:ce:4d:8b:32:e1:ea:3d:f3:05:20:5a:bd:d0:
         12:25:84:75:ca:ef:8d:a1:d2:12:15:ed:b3:99:7d:21:72:bf:
         9f:fc:4e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:50:39 2024 by rpki-client on console-ams.rpki-client.org