Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
File:                     4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json)
Hash identifier:          x+9NYfgc2jcy5SQSmYZFThahJfmFP1zL1S+qhMKC4Bc=
Subject key identifier:   5A:8A:45:C8:8F:FE:F2:B4:EB:DB:ED:D3:83:C6:FF:11:A3:1A:D9:68
Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
Certificate issuer:       /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Certificate serial:       018FD71BE26FEA10F9862BCDBF64453531AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
Manifest number:          11A2
Signing time:             Sun 02 Jun 2024 04:01:19 +0000
Manifest this update:     Sun 02 Jun 2024 04:01:19 +0000
Manifest next update:     Mon 03 Jun 2024 04:01:19 +0000
Files and hashes:         1: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: YFYkr2+FTPs7z0HdOSJyGwvl/CyjkNmw5MMrTZH45no=)
                          2: u50_wKG1fyOwHvWkzRwzICXpDWg.roa (hash: CZdrB6w1qzmX5lmOiy7eRx/Bep2giQy9ZtJiJEeI0F0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d7:1b:e2:6f:ea:10:f9:86:2b:cd:bf:64:45:35:31:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
        Validity
            Not Before: Jun  2 04:01:19 2024 GMT
            Not After : Jun  3 04:01:19 2024 GMT
        Subject: CN=5a8a45c88ffef2b4ebdbedd383c6ff11a31ad968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:dd:09:d2:75:bf:a8:38:03:e1:3b:19:79:
                    13:21:84:c9:c8:90:2e:29:ab:f8:e0:b2:5b:95:b7:
                    0e:94:d7:44:76:a6:3f:17:ff:da:59:02:90:35:40:
                    78:7d:95:32:c8:33:6d:f5:b2:4d:ad:bf:e2:0f:5f:
                    63:16:d9:6c:d4:64:5a:b7:85:e6:9d:3e:43:41:9a:
                    bb:17:24:58:8a:37:a6:7a:85:78:11:90:f0:23:67:
                    10:2c:bc:d0:a6:d6:63:9f:3e:35:61:f7:c2:ab:07:
                    05:3a:72:77:d2:93:08:bf:ea:e1:c1:c4:fe:1f:2a:
                    9d:02:24:39:47:b9:90:3c:99:a9:b1:09:ef:62:92:
                    7e:bb:94:bf:d4:00:37:a2:e0:93:36:bf:47:1f:b8:
                    ad:61:79:e5:0a:ce:25:04:aa:34:2e:a8:ab:3b:c4:
                    4f:14:14:df:01:89:e6:f6:d3:c2:80:2d:1c:f7:ef:
                    6b:7c:81:3a:26:eb:83:ee:98:55:d0:70:50:42:65:
                    5f:26:af:f0:ff:1f:16:5e:90:9a:ad:2b:1f:3b:cf:
                    15:0f:cd:4e:1e:55:f5:ae:51:74:78:02:ce:84:2d:
                    39:ae:1f:d1:8b:c3:a0:7a:1a:c4:c4:7a:a9:f4:dc:
                    f6:ad:8c:51:d1:be:fd:f9:60:cc:b3:dc:2b:51:ab:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8A:45:C8:8F:FE:F2:B4:EB:DB:ED:D3:83:C6:FF:11:A3:1A:D9:68
            X509v3 Authority Key Identifier:
                keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:6e:20:ad:48:7b:ee:12:20:09:ed:f4:35:7d:03:2d:0b:ad:
         15:0b:b6:54:7a:44:e0:b4:66:93:33:b3:04:1d:74:77:e7:c5:
         3c:cf:30:e3:a1:34:03:51:37:8b:d3:22:35:0b:7e:26:41:f9:
         57:05:99:ea:7f:44:2c:22:85:62:e6:58:10:00:40:2f:94:b9:
         9f:36:cf:25:85:8f:6c:3a:aa:07:e0:12:26:91:84:c7:4a:e9:
         b7:09:c3:d5:05:c3:ff:73:cd:dc:83:f6:b5:24:f3:0f:07:30:
         b1:ca:39:64:98:1d:c2:b9:1a:a4:c4:25:ad:49:8b:27:32:3b:
         b0:86:87:43:85:ce:b3:34:33:bd:bd:f1:b8:c4:d4:b1:4c:21:
         ec:b1:a0:be:24:81:09:30:b4:c1:75:c8:95:57:a4:56:22:a3:
         8c:90:0c:05:8b:cb:51:61:d5:12:25:53:e1:3d:43:16:4c:a9:
         fd:9a:ba:e5:6d:97:36:67:7f:e2:02:77:19:7f:fe:85:d4:9c:
         ad:98:c1:91:09:bf:87:85:0a:a4:f1:27:82:34:9c:9d:2f:76:
         3b:50:d3:f0:ae:e4:7a:6d:6a:6f:03:c8:c9:2e:bb:d3:20:7d:
         99:45:34:32:51:74:f3:53:ae:37:58:32:32:4e:54:6e:c2:96:
         25:65:de:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 06:35:28 2024 by rpki-client on console-ams.rpki-client.org