Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
File:                     SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft (raw, json)
Hash identifier:          Lvu7S1jfugaGIS59ofYto3FkczZkYrAYxRPNT1McKSg=
Subject key identifier:   30:F8:9A:44:10:08:CD:4B:D2:ED:12:A0:0D:8F:79:29:E6:B0:34:5A
Authority key identifier: 4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D
Certificate issuer:       /CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
Certificate serial:       0190448B0CDDB540F59A19C75EC755E5C8FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
Manifest number:          032B
Signing time:             Sun 23 Jun 2024 10:01:21 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:21 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:21 +0000
Files and hashes:         1: SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl (hash: PHte9pUY8sC7x5kJtSKmSY1vBVU1pexK2+oPNqMvRQs=)
                          2: fin-FPx7gtJ_AHUcUDyY7FSZJ3M.roa (hash: qMdwXCBDRjXBRfxCjcZSuBmRmeczR+hQZBT5reiqAIE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:0c:dd:b5:40:f5:9a:19:c7:5e:c7:55:e5:c8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
        Validity
            Not Before: Jun 23 10:01:21 2024 GMT
            Not After : Jun 24 10:01:21 2024 GMT
        Subject: CN=30f89a441008cd4bd2ed12a00d8f7929e6b0345a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:9a:b8:9e:99:21:77:99:3b:72:c5:be:1e:
                    38:cb:4e:18:57:d1:73:5e:2b:85:7d:43:54:59:71:
                    60:7a:50:87:ea:2e:9b:b4:b5:39:3d:3e:63:04:db:
                    fb:c7:3d:7d:1e:b6:0a:58:2b:d1:6b:2f:20:66:bd:
                    65:6f:7f:06:2b:91:58:4b:57:ad:e4:25:7b:5f:7e:
                    5a:25:a9:7d:8b:1f:68:7a:f3:36:3f:0c:9a:7f:46:
                    bc:84:d4:69:7f:d6:82:dd:63:cd:e8:dc:2f:84:15:
                    c1:69:4a:32:7b:6e:3e:cb:75:90:9c:20:b5:1e:7d:
                    54:2f:4f:32:e7:e8:eb:1c:2c:52:a7:20:c3:cb:f3:
                    45:27:01:10:9d:e9:de:b5:eb:d3:a9:68:cd:84:22:
                    25:b7:47:32:e9:e6:22:1a:f7:1b:b1:05:6a:77:57:
                    44:f3:e4:73:78:0c:4f:e6:65:16:48:56:88:f2:91:
                    bf:08:ea:f4:f1:f7:cd:60:ee:b2:12:3e:53:72:39:
                    3a:21:ab:4f:44:30:2f:36:14:4e:23:33:2f:9b:90:
                    56:d0:3a:c9:40:4c:46:1f:8c:90:ce:c3:7d:2a:c7:
                    6f:b2:70:7d:fb:22:88:18:3a:a5:10:f3:70:8d:5f:
                    50:ca:0b:d5:0d:9a:bc:3a:0b:bc:82:a6:47:d1:38:
                    e4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F8:9A:44:10:08:CD:4B:D2:ED:12:A0:0D:8F:79:29:E6:B0:34:5A
            X509v3 Authority Key Identifier:
                keyid:4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8b:c9:c7:bb:76:5e:a6:6f:2e:92:61:97:34:d9:ec:8a:23:
         48:48:0c:a4:fd:83:94:31:c0:f1:d1:34:9f:6e:eb:8c:6b:b5:
         01:2a:e8:2c:c5:a2:58:08:7e:59:b2:ad:c5:26:69:9f:90:bd:
         b2:77:0a:91:6f:fb:24:c9:30:4a:42:29:c5:d6:f3:ea:e4:81:
         f7:71:0a:0e:44:92:3c:8f:bb:0a:52:bd:6d:d0:a8:df:21:22:
         90:cd:91:c6:6a:7f:40:05:c1:82:ac:d8:ed:bb:55:f2:30:5c:
         c6:80:e4:5f:0b:03:ce:75:52:18:46:f6:6e:af:6a:8a:82:0f:
         99:fd:ac:9c:1e:65:ea:ef:17:c3:f9:48:03:9d:ea:8d:06:9e:
         de:80:f9:e6:60:06:97:69:b5:88:77:dc:83:0b:5f:29:59:d1:
         db:8d:b7:41:f7:aa:be:21:fa:e1:1d:43:f6:39:b4:39:27:54:
         9f:53:c7:06:74:fe:cb:ad:d2:0b:cc:83:d5:dc:0f:6f:ee:49:
         b7:3f:36:40:6d:7e:59:d8:1e:c3:f9:80:04:96:fa:37:ce:d9:
         86:5d:a9:b1:16:8b:ab:82:34:a1:7c:0e:a1:14:cf:64:66:84:
         3f:4c:50:66:8f:41:1d:6b:67:69:01:7f:bb:57:8b:7a:3e:fe:
         d4:a1:88:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:02:00 2024 by rpki-client on console-fra.rpki-client.org