Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File:                     4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier:          yl9Xmb2SRRYH7xc05venId6BCiRRKykhYy/kDu6gT6k=
Subject key identifier:   E6:90:AC:4C:67:73:4F:17:00:8B:CA:58:0C:E5:63:97:8A:12:89:DD
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer:       /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial:       0190245B0AEB8304CBEA47EAE0CC9C1A9DE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number:          0A36
Signing time:             Mon 17 Jun 2024 04:01:04 +0000
Manifest this update:     Mon 17 Jun 2024 04:01:04 +0000
Manifest next update:     Tue 18 Jun 2024 04:01:04 +0000
Files and hashes:         1: 0GPVJ08zRt3_JDJPWJ3FSPLiBcs.roa (hash: RdUyjJY96WG8x6Qa6Vgbx7gsHdSd5j0VsnsQbRexs54=)
                          2: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: a7SPevqMRnd50ZpTfzhOeziMtA1rRQwFPYN8T0EQqbE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:24:5b:0a:eb:83:04:cb:ea:47:ea:e0:cc:9c:1a:9d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
        Validity
            Not Before: Jun 17 04:01:04 2024 GMT
            Not After : Jun 18 04:01:04 2024 GMT
        Subject: CN=e690ac4c67734f17008bca580ce563978a1289dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:a3:eb:d1:13:f8:29:6d:28:f8:dd:76:93:
                    90:c8:db:14:60:15:23:ab:bb:40:17:17:6a:18:a8:
                    39:3e:c4:ae:91:6f:0f:7b:76:25:c2:2f:d8:4d:ce:
                    ed:2f:ee:0e:96:07:ba:91:f7:49:1c:e1:86:64:5a:
                    00:e0:6f:ad:7a:7b:c8:c4:e9:e2:b8:08:ea:48:56:
                    7e:4a:46:ea:3b:6f:40:fc:57:44:3a:8d:80:0b:07:
                    2b:98:53:d2:a2:65:94:1e:46:4a:a3:7d:fa:97:80:
                    2f:e9:a7:40:fa:71:17:f7:f2:f3:32:2d:53:8c:ac:
                    55:fa:61:cd:4e:db:36:9c:2f:c0:8f:5e:5c:e2:4e:
                    3a:6d:8c:6d:2a:eb:f1:84:c7:4d:35:0a:b9:4d:90:
                    d2:aa:33:c6:24:5e:c9:bd:d4:26:18:cf:42:8c:91:
                    dd:5e:4c:6f:fa:29:91:f2:a4:eb:8c:a3:b3:09:c8:
                    5d:30:cd:ab:bc:4e:f2:cf:23:02:58:77:97:5f:6d:
                    74:d6:a3:f2:1f:37:4a:4c:03:54:24:8b:fd:66:9e:
                    f9:99:24:ee:0c:b0:ab:80:5f:c3:3b:c3:88:d0:1f:
                    8d:53:63:ee:96:d6:7e:e6:f5:9f:c2:97:69:fb:b9:
                    81:b2:e7:1e:cb:c2:f7:ae:17:92:c2:b9:6d:e4:e4:
                    a1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:90:AC:4C:67:73:4F:17:00:8B:CA:58:0C:E5:63:97:8A:12:89:DD
            X509v3 Authority Key Identifier:
                keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b5:bd:a3:af:c2:c4:5c:63:03:31:d5:66:f8:fd:b8:d9:61:
         31:7a:4b:d8:8d:01:d4:2f:0f:27:86:c3:14:6c:d3:94:63:9a:
         be:3f:70:b0:5d:0c:ce:77:6f:23:cf:41:09:3f:ae:b1:32:6e:
         15:8c:09:d8:f2:83:88:cf:db:61:16:4a:ad:c1:81:70:4b:fc:
         39:4a:aa:54:30:cb:70:a7:9c:62:68:0e:7b:94:f2:ee:c9:86:
         e4:9a:ed:30:b2:1a:94:c1:fd:55:ea:40:dd:77:2a:48:f9:97:
         cd:fd:7e:cd:5d:10:0f:19:65:c3:9c:09:b5:c0:62:a4:26:ad:
         bc:14:1d:56:43:dc:e8:dd:4c:d8:a7:6d:10:59:b1:5d:4b:ef:
         d2:4e:d4:74:5f:da:be:4c:4b:39:a1:b8:43:a9:b4:81:f3:06:
         d4:33:6f:df:59:d2:b6:27:35:15:9c:ca:2d:06:ed:9f:1a:62:
         b6:d1:52:89:5b:7d:e1:d1:ab:43:ce:9c:c8:e5:7e:52:25:24:
         15:a1:a6:29:bd:41:89:49:cd:63:b9:bb:12:c8:18:da:90:36:
         a5:8f:07:f0:fd:32:6b:f4:e6:da:5b:d9:54:d9:32:62:e6:97:
         11:26:f0:89:6c:73:bb:78:7e:07:ca:e3:c1:7e:95:59:59:ea:
         a1:fd:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:48:26 2024 by rpki-client on console-fra.rpki-client.org