Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
File:                     iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft (raw, json)
Hash identifier:          +28QopLLnEeU6iATluGVx9kWsM7DSoZRcPm2PFvunMw=
Subject key identifier:   46:70:1C:65:C5:68:0B:4A:C7:F3:32:73:27:B2:46:2E:E3:A0:2E:F7
Authority key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Certificate issuer:       /CN=897378126f55d96519553daa48e02e3282121644
Certificate serial:       0190674D196AE43E6DDCE173CFE8F636036F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
Manifest number:          0A46
Signing time:             Sun 30 Jun 2024 04:00:24 +0000
Manifest this update:     Sun 30 Jun 2024 04:00:24 +0000
Manifest next update:     Mon 01 Jul 2024 04:00:24 +0000
Files and hashes:         1: d_KXUTnYx9uObOAmK-MLj4TSdVY.roa (hash: eNmzT+Jy4AnZJg2DIhMiyzAjmxNLK02WYpFy4wmXIPs=)
                          2: iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl (hash: +y1j/zGRckQtO8k26rWuyeoHNqOE1K/fhVj0YNkFswE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:67:4d:19:6a:e4:3e:6d:dc:e1:73:cf:e8:f6:36:03:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=897378126f55d96519553daa48e02e3282121644
        Validity
            Not Before: Jun 30 04:00:24 2024 GMT
            Not After : Jul  1 04:00:24 2024 GMT
        Subject: CN=46701c65c5680b4ac7f3327327b2462ee3a02ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:08:eb:a8:03:57:ab:4e:5d:47:7e:9c:f8:
                    ac:47:c4:ac:9d:40:bf:67:ed:5c:8a:78:53:15:f4:
                    14:eb:60:75:98:4f:b5:26:b6:27:3f:7b:1d:8c:7f:
                    14:b9:c8:f5:37:8b:32:f2:c8:1b:55:22:f0:34:13:
                    57:a0:4e:f0:a8:1f:af:5a:cd:14:9f:61:b4:c5:50:
                    9b:dd:2a:37:9b:48:49:6b:3d:dc:fc:c3:96:f6:c6:
                    04:25:51:f1:c9:d6:25:39:72:f5:be:7f:cd:01:13:
                    2c:be:7a:1a:de:ef:90:60:41:96:8a:4e:dd:61:5a:
                    fe:20:26:1b:13:cd:e0:ec:38:36:d7:02:78:51:45:
                    66:46:f4:8a:e4:8f:e8:78:e5:a5:08:9a:b6:51:87:
                    bb:5d:5c:27:80:d4:64:ae:a8:4f:9b:65:66:1d:ce:
                    26:8c:49:f2:61:80:f3:10:66:58:f6:54:35:97:54:
                    d9:1a:82:f0:e6:7a:93:fa:54:8f:ba:04:d9:ea:97:
                    10:91:ab:8f:f6:4d:45:44:fe:1f:a3:3a:de:52:12:
                    43:0d:44:8b:f9:f3:a6:89:b0:cf:87:66:db:d4:52:
                    3b:d5:6e:0d:fb:69:a4:59:72:b8:6a:32:9d:a6:da:
                    ce:a2:e5:ac:7b:7f:18:e8:b0:6d:c6:0b:22:83:03:
                    24:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:70:1C:65:C5:68:0B:4A:C7:F3:32:73:27:B2:46:2E:E3:A0:2E:F7
            X509v3 Authority Key Identifier:
                keyid:89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:bf:82:ed:37:5b:a9:20:4b:cf:2d:1f:79:fa:e0:b7:3e:a7:
         bb:f4:ea:af:2a:76:69:7f:61:d0:36:94:0e:e3:08:9e:69:4a:
         2a:99:e7:b8:f4:f2:04:32:6b:f2:04:21:26:2a:7a:41:d6:c2:
         6d:40:55:e0:40:09:9b:70:6b:3d:97:3e:06:19:7d:9c:74:89:
         45:4c:31:b0:b2:69:b0:e8:6c:d9:65:c2:ad:42:a3:a8:4e:74:
         a4:c2:b9:fb:6f:16:d1:88:ed:44:e1:4c:36:6d:0f:cd:df:b7:
         13:db:a0:f1:61:de:25:f9:50:af:09:b7:91:3a:d4:d6:cb:99:
         80:7c:f6:97:fa:fa:4b:0e:e1:3b:d0:68:60:13:20:36:9a:84:
         56:36:24:d3:1e:fd:72:35:33:b0:6a:41:fa:da:fa:7a:0b:2c:
         45:8b:c4:e5:57:a9:8e:57:67:11:b3:f6:f1:ce:16:f5:c5:c6:
         e5:bf:80:e9:39:79:62:07:02:ea:b1:80:f3:4d:d6:b4:0e:c4:
         78:73:d3:52:78:d5:0c:97:3c:cc:c4:4d:6d:60:2b:11:91:be:
         f9:97:e8:a3:ff:2f:3d:53:ba:d9:a9:58:d2:54:c1:7a:58:15:
         5b:c8:5f:e6:4b:22:d3:23:90:65:b5:79:50:bc:69:94:e0:d4:
         92:a2:4d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 10:10:15 2024 by rpki-client on console-fra.rpki-client.org