Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
File:                     4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft (raw, json)
Hash identifier:          OJBVfeMnaaKC0uQRcrv2f2wTlMLst50VbcZZdRxNrnE=
Subject key identifier:   F5:61:E3:C2:4D:11:73:EC:A5:E2:C4:53:5A:A0:E0:48:67:12:04:67
Authority key identifier: E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
Certificate issuer:       /CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Certificate serial:       019023B761B045974ECA5F5AE48AA116E59F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
Manifest number:          0DD1
Signing time:             Mon 17 Jun 2024 01:02:18 +0000
Manifest this update:     Mon 17 Jun 2024 01:02:18 +0000
Manifest next update:     Tue 18 Jun 2024 01:02:18 +0000
Files and hashes:         1: 4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl (hash: dnA7Jx7rY9sYnPLRcumqzyjG03vZouTw9dgWKR4K2kA=)
                          2: WOYBekp5MRtoG_94HCxBCuZJQPs.roa (hash: u9W2spYWYDvpDs1bBT3vZ5k+YurRMuspKBHHIdJsyvM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:23:b7:61:b0:45:97:4e:ca:5f:5a:e4:8a:a1:16:e5:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
        Validity
            Not Before: Jun 17 01:02:18 2024 GMT
            Not After : Jun 18 01:02:18 2024 GMT
        Subject: CN=f561e3c24d1173eca5e2c4535aa0e04867120467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8d:0e:69:0b:2e:c7:28:27:0e:aa:14:4b:fa:
                    bc:29:80:c9:00:8f:9a:dd:78:a1:29:d8:c7:28:d6:
                    fb:76:8d:3b:f8:18:f8:4f:25:c1:78:32:98:cd:90:
                    b9:d5:c3:e4:8e:e0:79:10:52:29:9c:93:41:b4:fd:
                    ca:1a:d9:78:07:6e:13:ba:f9:b4:f7:34:19:b3:d9:
                    27:5a:e6:5e:a5:6a:e2:5b:39:2f:1e:81:1d:21:3a:
                    13:e8:14:ed:bd:03:a7:03:a4:1f:ec:84:c6:14:12:
                    67:6a:2c:16:90:97:c4:ba:cb:62:bb:1b:ce:c1:0f:
                    c0:ed:cf:a7:40:94:bf:a8:c4:65:d0:6c:32:27:6b:
                    01:d3:60:43:d1:88:0c:74:ab:46:9f:ad:3b:60:1c:
                    64:ad:b1:18:0a:52:1f:f0:45:25:59:29:cc:50:fc:
                    35:a2:6f:c5:9c:c6:53:33:da:a0:60:ca:14:1d:a3:
                    eb:05:0b:fc:1e:41:d7:6f:4f:cc:68:13:d9:aa:c5:
                    3d:96:62:07:c3:3d:7a:9c:f2:08:d9:9d:e8:c1:8a:
                    fb:8a:c9:5b:0a:19:14:76:16:4d:40:e9:7f:22:d6:
                    3b:83:97:13:bd:e3:c1:60:5e:f3:35:11:fc:1d:fd:
                    85:11:29:6b:9d:52:d5:81:cf:6a:ca:7e:8e:bd:8c:
                    6c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:61:E3:C2:4D:11:73:EC:A5:E2:C4:53:5A:A0:E0:48:67:12:04:67
            X509v3 Authority Key Identifier:
                keyid:E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:e9:5e:fa:f1:89:3a:55:9a:f6:45:ec:6f:28:a1:91:e6:79:
         28:fd:8a:d8:12:56:62:c6:19:9e:94:af:8e:ad:d2:02:d0:76:
         41:33:69:55:75:4d:13:50:71:d9:e4:57:70:9c:01:da:ae:1d:
         1f:4d:fd:77:06:ad:08:56:fc:44:c6:b5:3a:dc:19:24:e1:b2:
         59:dc:03:a8:c5:80:b0:79:9a:23:b4:e5:5e:47:c5:6f:4a:f0:
         2c:04:80:fa:ce:c5:48:32:4a:6f:d1:e4:b8:70:06:a6:6d:7e:
         2d:d3:1d:8d:4e:dc:d1:aa:a9:fa:0b:42:57:ca:b1:f4:c0:26:
         5c:14:8c:59:9d:57:9c:69:20:70:d6:df:76:ab:80:1e:72:58:
         86:90:1d:36:85:56:32:98:db:1f:5d:c4:00:ee:b6:26:c7:14:
         53:54:07:d9:9b:68:fd:75:6d:01:eb:74:69:37:b9:05:dd:98:
         2b:40:9a:cd:65:64:ef:6c:eb:df:bb:d2:e0:ad:6a:d9:c0:f6:
         fc:5e:d9:4d:b8:7c:65:1c:ec:f8:79:38:28:74:b2:0e:d9:70:
         05:39:ab:20:55:6d:7a:0f:1d:9f:b9:d9:70:c9:8e:42:71:98:
         a7:53:d2:c8:76:7b:09:04:41:d1:23:5a:33:53:3b:a7:e2:92:
         4d:38:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:44:39 2024 by rpki-client on console-ams.rpki-client.org