Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
File:                     4SOGDiDNss_fLO-zdToVuCKCkmY.mft (raw, json)
Hash identifier:          pdxQ22KiMseC5o3eUs5L+BNkh+5iv8Iy0GdNnJDcZTs=
Subject key identifier:   B8:BD:24:90:93:6B:8B:16:A1:E4:89:CB:12:DC:8D:3C:21:3C:89:06
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Certificate issuer:       /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial:       0190516AEC337BFA58B4FB16AFC514A0D236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
Manifest number:          11F1
Signing time:             Tue 25 Jun 2024 22:01:20 +0000
Manifest this update:     Tue 25 Jun 2024 22:01:20 +0000
Manifest next update:     Wed 26 Jun 2024 22:01:20 +0000
Files and hashes:         1: 1BrWLjMvPfJ2AAXv763ygqbgkNQ.roa (hash: RBpqMimqIz4ZBKTkjLflHVRdiRdhH3HJalJW30rdclU=)
                          2: 4SOGDiDNss_fLO-zdToVuCKCkmY.crl (hash: 5CWBvTdPCrascTiPrHXelYckw0d7ssn9t89d1euZF94=)
                          3: BWAsIGJEpLVLDtKYeaXWznv-iOc.roa (hash: FqELSwJld3MSg1PxbnRipjb9AwgzKvBf48ayxp5q6VE=)
                          4: RjascPD0zPAwUbwk3QjD1SleLBw.roa (hash: X8HhjVonSal3MfpUQqbKhJFGCqJte+fIILhotZZr7cc=)
                          5: TSXSVHFmL7CGXrTM7gYDthqn5AI.roa (hash: 5mvvA7w07lXcfQVDvAEx789mi5qEtvdM6b9LSV5zlts=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:51:6a:ec:33:7b:fa:58:b4:fb:16:af:c5:14:a0:d2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
        Validity
            Not Before: Jun 25 22:01:20 2024 GMT
            Not After : Jun 26 22:01:20 2024 GMT
        Subject: CN=b8bd2490936b8b16a1e489cb12dc8d3c213c8906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:5c:d4:07:8d:ba:e6:58:6c:81:9e:66:0c:
                    37:1e:4b:c0:f3:96:95:1c:bb:c4:8e:5c:7d:db:57:
                    b2:63:8c:ce:03:fa:05:8d:ff:94:6b:c2:bc:af:ac:
                    05:c2:83:39:5a:65:7e:b8:fe:5e:c9:9f:11:d6:0f:
                    28:1b:29:8d:60:35:20:98:1e:6f:2c:94:20:38:08:
                    2a:00:0e:de:8a:a8:c3:fe:c1:53:c8:f1:2d:9c:25:
                    18:31:23:40:d4:4e:d4:b0:a5:2d:b5:73:97:c5:1a:
                    c1:c8:1e:86:7e:f1:84:0a:40:54:62:c1:2d:7e:f8:
                    19:1d:00:24:b1:ac:ac:67:6d:08:99:2a:ed:1c:cc:
                    7f:c4:89:7c:7a:08:b7:2d:ac:57:36:ed:99:2f:d7:
                    36:bc:51:72:1d:7e:47:aa:0b:9a:c7:08:46:9f:56:
                    47:45:3a:b1:c0:4d:25:09:b9:dd:e9:fa:df:85:49:
                    ef:d4:ec:f8:3d:2d:a9:c1:bf:90:85:95:a9:c5:80:
                    e7:86:34:d6:ad:d0:f6:71:1c:ef:fe:3a:95:b7:08:
                    d6:bf:a0:cf:23:d0:bd:68:37:3f:66:90:0e:00:e6:
                    77:46:2e:26:37:cd:8b:86:40:ed:05:3a:db:0d:ce:
                    27:09:4f:1f:50:91:5d:a1:27:c8:49:d2:d2:7e:86:
                    83:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BD:24:90:93:6B:8B:16:A1:E4:89:CB:12:DC:8D:3C:21:3C:89:06
            X509v3 Authority Key Identifier:
                keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a4:35:96:64:28:cc:7f:14:ad:b4:cf:70:60:1a:30:f5:c8:
         ba:1a:9a:32:60:41:eb:af:e5:c1:9d:48:a3:c5:db:ef:d2:c6:
         42:35:f5:c2:34:6f:23:de:3e:7d:14:5c:54:98:42:78:45:4b:
         0d:60:48:46:f8:09:0b:2e:45:78:81:3f:9b:88:0f:3f:17:7e:
         9e:2a:74:08:7d:09:a5:f5:35:3f:5e:6d:33:a1:ed:ef:ae:62:
         dd:b9:2c:36:74:62:a0:e5:37:5b:94:a7:48:1a:d6:49:a1:c2:
         01:6f:ef:69:9d:ff:04:92:22:82:bb:6b:9a:b4:9c:22:93:44:
         2e:4d:b0:7e:2c:41:ed:f6:28:78:c6:3b:f7:06:fd:61:f3:33:
         6b:a4:5a:b3:d0:9c:84:62:b8:64:a8:52:bb:1c:b7:aa:12:be:
         46:88:4c:ba:e1:f2:d0:2a:5c:f9:21:90:3b:ff:8e:ea:b2:8c:
         e4:3e:28:9c:bb:54:e0:6c:1c:88:a6:93:59:3f:2e:f8:08:d0:
         1b:67:72:ce:d6:00:68:1b:14:41:23:f8:17:44:09:a9:38:3f:
         a7:dc:fa:15:36:2e:64:57:70:8a:6c:ad:89:75:31:7c:f2:62:
         77:05:d7:16:3b:f8:35:ab:d5:45:5c:5c:e0:bf:a7:3c:90:56:
         2d:ce:8d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:39:02 2024 by rpki-client on console-fra.rpki-client.org