Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft
File:                     m5baKyu6VqAZuAS3zQDlFDcJd6U.mft (raw, json)
Hash identifier:          jOEHiOEHWlwxKVFidLybAyrBn5UvcV0erQFxqZo3b9k=
Subject key identifier:   C2:2E:0D:3B:2C:FE:C0:97:D6:FA:25:80:EA:B2:3D:82:6C:AB:F0:82
Authority key identifier: 9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5
Certificate issuer:       /CN=9b96da2b2bba56a019b804b7cd00e514370977a5
Certificate serial:       01904152CCBC24079AF2A70B011A147F024A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft
Manifest number:          0463
Signing time:             Sat 22 Jun 2024 19:01:03 +0000
Manifest this update:     Sat 22 Jun 2024 19:01:03 +0000
Manifest next update:     Sun 23 Jun 2024 19:01:03 +0000
Files and hashes:         1: M_9hdRL7V-BsKRjo2UDxxRfYAeY.roa (hash: xXDPfnmgQBj9wb0/IHG7zEUaXvoc2FKejACXF5xKnBs=)
                          2: m5baKyu6VqAZuAS3zQDlFDcJd6U.crl (hash: 4ukR7l4MNeGb9eHETL8l/c0WFoD3Hk6NRS68pAryEmU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:cc:bc:24:07:9a:f2:a7:0b:01:1a:14:7f:02:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b96da2b2bba56a019b804b7cd00e514370977a5
        Validity
            Not Before: Jun 22 19:01:03 2024 GMT
            Not After : Jun 23 19:01:03 2024 GMT
        Subject: CN=c22e0d3b2cfec097d6fa2580eab23d826cabf082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:08:ef:a4:17:e6:f7:ae:c0:c3:05:e0:a0:fa:
                    cd:ac:bb:85:b0:21:3a:dc:37:8b:e4:6c:50:14:b9:
                    46:64:c1:15:16:62:14:17:3c:6e:5d:29:08:82:27:
                    95:02:41:b2:f0:65:d0:f0:7b:1a:8d:79:a4:b1:2b:
                    c6:8c:eb:7c:92:39:d7:ca:e2:92:6e:3c:5e:29:0e:
                    71:01:0b:55:bc:e5:95:47:7d:92:ed:65:b1:7e:d3:
                    ca:39:54:f9:e0:c9:a6:bd:d8:a4:c0:2d:af:3e:13:
                    69:f3:50:3c:4a:b8:61:4a:69:9c:32:f8:5a:92:d7:
                    62:10:d6:71:2a:30:a3:9e:90:b7:b1:d5:76:2e:df:
                    70:c0:4e:48:40:ed:40:09:e5:e4:37:91:9d:15:b7:
                    e3:2f:8e:2b:56:f9:34:d4:f9:cb:a0:cd:0b:ba:c8:
                    d9:e4:56:e4:01:23:ab:ef:9b:03:ce:84:63:f1:ac:
                    c5:53:d1:9d:57:2c:1a:4b:7f:9d:b2:76:a6:6f:b3:
                    ce:3c:b0:83:ef:9d:78:26:b2:c2:9b:13:cb:60:e6:
                    eb:d6:d6:c1:81:e9:81:9a:dd:8c:a4:52:58:78:c8:
                    46:2d:25:39:94:93:29:de:05:38:a3:a4:d4:44:d6:
                    ba:e9:e6:02:0e:dc:69:da:cf:41:c9:bd:e5:d4:c9:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2E:0D:3B:2C:FE:C0:97:D6:FA:25:80:EA:B2:3D:82:6C:AB:F0:82
            X509v3 Authority Key Identifier:
                keyid:9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f4:cf:55:87:77:42:ef:ea:a9:b4:a2:29:ed:75:b4:ac:0d:
         b4:cc:92:7c:5a:c2:33:69:9a:aa:43:63:f7:e6:bd:bf:09:55:
         f8:24:22:fd:e5:45:7f:75:3e:2d:19:91:77:e6:37:cd:9e:6a:
         33:bf:83:bc:de:7c:3c:19:42:89:f7:76:82:b5:45:80:33:25:
         ea:9b:cd:54:55:43:c5:d5:f4:ec:71:5f:b7:5c:4c:f2:b3:ec:
         b4:84:af:a9:3f:44:80:de:d2:47:17:db:68:12:cd:ab:a7:75:
         fb:dd:57:bb:35:e9:76:03:bf:e8:f3:95:4a:a1:bc:6e:4a:11:
         87:0b:e9:fa:bd:1b:27:69:36:60:ce:ab:0b:bc:09:a0:c6:1b:
         f3:81:28:9a:c1:dc:2d:7a:13:ec:4d:a2:ab:c6:ee:2a:74:2b:
         4d:2a:68:bf:68:ee:a3:2b:e8:e5:d3:ef:4e:77:d8:b6:f2:c0:
         11:8d:f3:8a:b6:3a:da:5b:e7:b0:70:8d:e2:6e:3b:13:64:d3:
         4a:65:4a:a7:9f:6c:de:f4:a2:90:71:a1:9e:b4:04:d2:d4:01:
         83:a4:ad:00:de:3a:b4:f5:d3:98:05:1e:26:6f:80:b1:05:d4:
         66:3f:ae:f6:48:5d:49:ab:ad:2d:0a:a9:7c:25:d9:32:5d:f7:
         48:4e:4f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:39:07 2024 by rpki-client on console-ams.rpki-client.org