Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File:                     XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier:          D+jMroyEGKVyFn/o0VyQJQormTq09drTL0wFdvdyJjQ=
Subject key identifier:   73:2F:5B:34:30:E2:8F:A3:7B:06:78:A9:98:26:EF:16:C3:DA:3D:DB
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer:       /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial:       01901F3504F9D1D455E8A322259922C19D17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number:          1158
Signing time:             Sun 16 Jun 2024 04:01:26 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:26 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:26 +0000
Files and hashes:         1: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: dA1oJYUIy5kfd0EucOul713yz59COkbxwPq0zj66ihE=)
                          2: qMBC587igfASXtzOcrpnDZ3bMhE.roa (hash: oHDpnoCMhLzlU7UqcVnNjKC8trPYDA6CgtsmAoAwrlQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:35:04:f9:d1:d4:55:e8:a3:22:25:99:22:c1:9d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
        Validity
            Not Before: Jun 16 04:01:26 2024 GMT
            Not After : Jun 17 04:01:26 2024 GMT
        Subject: CN=732f5b3430e28fa37b0678a99826ef16c3da3ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bc:67:9a:d5:35:7d:a1:58:a1:12:4c:58:5b:
                    74:31:22:8b:6b:f9:2c:88:bc:7f:a4:cd:ce:5b:1a:
                    16:9b:cd:6f:ca:79:24:d4:16:1d:11:c9:00:b0:56:
                    29:56:a3:be:76:47:a3:65:f3:c4:fa:57:1a:f4:2e:
                    21:15:d5:1d:65:40:e3:da:8d:7e:29:08:0c:79:c4:
                    dc:15:ef:7e:b7:dd:8d:1f:35:b9:78:af:3d:5d:53:
                    1a:81:b9:e6:01:7a:87:c9:7d:17:50:18:62:fa:d9:
                    81:59:cf:b6:78:47:4a:5d:fa:f5:ba:6c:e5:8d:2e:
                    4b:b2:96:8c:73:8b:37:19:ad:21:e6:1c:5f:ac:0f:
                    97:c6:08:7b:ff:ad:80:3f:63:fe:d3:20:f3:6d:39:
                    16:56:1f:8e:73:c8:8a:a1:05:c0:3d:e1:66:2e:db:
                    b3:46:33:26:9a:b5:07:26:e7:9f:67:42:8d:7e:6b:
                    8a:08:79:d3:bf:16:82:95:a9:43:45:d1:57:d5:4a:
                    e1:09:e5:66:7f:91:3b:dc:9f:d9:a6:a5:9a:a7:c8:
                    c5:91:08:ca:9d:dc:99:86:93:a4:51:81:a4:f7:d7:
                    53:0f:e9:ea:00:be:19:71:ab:0b:51:5e:85:8b:5f:
                    c5:6a:ee:cd:51:28:fc:c2:80:80:b2:82:1c:2f:13:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2F:5B:34:30:E2:8F:A3:7B:06:78:A9:98:26:EF:16:C3:DA:3D:DB
            X509v3 Authority Key Identifier:
                keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d2:00:69:f7:c0:23:20:d6:f9:0b:f9:8a:02:c0:64:6e:6b:
         c4:b8:0e:3d:7f:f7:4f:4d:4f:d8:5e:b4:e4:da:48:d1:42:f1:
         59:56:ab:98:83:80:2e:91:ee:ea:66:6e:9e:fb:55:d2:70:a8:
         de:6b:dd:93:d4:e4:20:0a:9d:dc:33:6d:6a:80:08:82:0c:ca:
         ca:cc:2c:83:ee:aa:d6:8b:20:9d:f4:f0:e6:a0:b5:94:f4:b2:
         00:7a:12:9f:da:0d:9b:e0:de:11:94:87:6a:b7:3d:84:16:fd:
         8d:80:be:61:96:b5:6a:34:8f:64:c3:4f:e0:b2:55:39:42:ac:
         65:3f:f4:46:c3:1f:53:e4:c5:c9:e6:9a:68:29:03:80:29:48:
         33:3b:bf:4a:ff:f5:6c:e9:ca:4a:31:cb:4a:69:32:76:2f:9a:
         60:75:29:40:a0:76:db:91:40:c6:4e:8a:03:80:03:d6:0b:74:
         06:d8:2d:78:95:32:01:cc:03:06:8d:74:0e:cb:6e:3c:57:55:
         53:2e:2c:90:66:df:84:b8:f9:b9:81:a0:d3:47:12:e7:27:5e:
         fd:d5:32:1d:76:81:26:20:9a:cc:42:bd:5b:41:4f:e8:a9:e9:
         4f:8f:b8:56:bc:5c:56:39:c4:dd:b9:3d:75:88:a2:6b:bc:db:
         2e:32:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:28:49 2024 by rpki-client on console-ams.rpki-client.org