Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File:                     X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier:          lMLHj1UdU1IYP25iFp6sHMiILQQfJRxX0BRdSsPU3d0=
Subject key identifier:   DB:F3:43:58:22:93:78:ED:48:8A:D1:43:55:9D:97:F9:89:EF:D6:83
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer:       /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial:       019040AECE04B77E4F77A2656D30EEF2E584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number:          093D
Signing time:             Sat 22 Jun 2024 16:01:56 +0000
Manifest this update:     Sat 22 Jun 2024 16:01:56 +0000
Manifest next update:     Sun 23 Jun 2024 16:01:56 +0000
Files and hashes:         1: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: y/0GV5K2Qd7rQYY60qpnhHfx+ac2X80ncH+8lB12p90=)
                          2: bOJzDMqKqShfaTOJiOaelBhsCIc.roa (hash: Xt+b0oOsHxg14nEYCOzwKzBf9Z7MP/w1ZxOrCnt9+II=)
                          3: pQ9z_x6VQi3iq3xCCFkCd4MdU6w.roa (hash: SesKYIjM/epcmHh0P4TTYJt08VHK9TB10fEp8QAvttM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:ce:04:b7:7e:4f:77:a2:65:6d:30:ee:f2:e5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
        Validity
            Not Before: Jun 22 16:01:56 2024 GMT
            Not After : Jun 23 16:01:56 2024 GMT
        Subject: CN=dbf34358229378ed488ad143559d97f989efd683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:24:7b:a7:15:8b:13:4a:ca:0e:d1:46:46:c6:
                    52:21:96:f5:1f:e2:5e:af:73:f7:63:d6:1f:56:c1:
                    91:fb:a9:23:18:30:f5:24:29:c1:1c:5d:0c:8d:58:
                    8d:d1:d2:02:19:36:94:55:73:8c:d9:3d:73:db:f1:
                    0d:1b:ce:71:96:ae:ad:07:7f:34:d5:4e:ec:49:76:
                    9c:69:ad:21:b3:e5:e8:cd:97:a1:bf:80:97:8e:53:
                    23:9a:b2:90:87:d9:92:bc:69:76:4d:49:ae:31:65:
                    f5:64:3c:4f:31:ff:38:81:b7:17:99:30:0a:bd:60:
                    59:d3:6b:91:ac:c0:d8:43:a9:b5:38:d2:3f:db:17:
                    fa:a5:b7:0e:b6:a8:b4:0d:3e:04:a9:1e:f9:24:e2:
                    40:fd:35:6d:e0:90:fa:ad:e8:28:8c:1a:c4:13:76:
                    6e:ea:f5:f1:11:29:ed:1c:c5:66:15:80:4a:06:83:
                    e5:f8:2a:24:20:a4:cc:b3:43:ea:4a:50:ea:2d:d8:
                    8b:84:b1:c5:c1:3a:e9:1e:ba:41:67:75:95:b6:a4:
                    58:24:66:a9:03:d7:22:23:89:80:6b:5a:da:94:74:
                    64:31:59:56:29:1c:e5:f6:59:24:b1:13:e2:eb:01:
                    97:ca:05:27:0c:e2:b4:18:28:00:ea:f6:fd:36:4a:
                    ad:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F3:43:58:22:93:78:ED:48:8A:D1:43:55:9D:97:F9:89:EF:D6:83
            X509v3 Authority Key Identifier:
                keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:12:84:eb:ac:4f:c5:bf:8c:ae:e4:71:44:3a:b6:af:77:b6:
         f7:55:eb:36:d2:74:c2:6d:bb:cb:22:07:15:e8:86:6d:9e:29:
         1f:8c:ab:ea:c1:99:64:13:63:a7:1e:59:52:8b:5e:8e:14:66:
         49:99:83:94:7a:37:19:50:fd:39:ff:7a:21:cc:ce:69:9c:6a:
         aa:f8:8d:ed:af:ff:79:42:a9:d7:8e:07:e4:f4:69:80:28:8c:
         71:7f:89:f6:ed:39:fb:09:e4:d9:ca:bf:ee:14:37:28:d2:4f:
         45:14:95:ad:25:4b:de:a0:cd:f3:a5:87:4e:85:44:5b:d6:2c:
         47:00:38:fb:ca:f6:3d:fa:3c:28:5a:80:67:90:8a:b1:37:e4:
         1b:28:15:e8:c8:da:0f:48:89:99:43:e7:3d:05:cd:b1:05:09:
         21:de:8b:93:5f:92:42:6b:e1:2f:17:2f:1e:12:aa:cd:99:34:
         2e:27:a9:4d:60:b6:9a:bc:42:a9:7e:64:af:e7:c2:65:c4:7d:
         87:ad:d8:62:05:e0:3f:ee:f0:da:ec:f4:18:70:af:5b:f8:e3:
         2c:09:15:07:fd:2a:0b:02:1a:26:69:99:18:7f:26:82:04:d2:
         77:29:db:5d:df:d8:0d:b0:84:eb:9d:f2:a9:c2:04:53:c5:2f:
         75:2e:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:09:32 2024 by rpki-client on console-ams.rpki-client.org