Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File:                     xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier:          e0KX4Dy8C/O+bK6wvABWWRroRMZpxG1pJdvFQB5ERGc=
Subject key identifier:   3D:09:7C:2C:BF:ED:10:A0:C9:49:51:60:16:2D:DC:D2:AC:74:9E:4A
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer:       /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial:       01901E58AD65D8BA5CFA0B809B8103DCD1FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number:          0AEB
Signing time:             Sun 16 Jun 2024 00:00:46 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:46 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:46 +0000
Files and hashes:         1: YINxsdCwZc3ub_x2FGspy_tgnAs.roa (hash: JbutJkMYaTeGRPUO+QHR/wv0jFqczlaA74cvyWatAPM=)
                          2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: znAdWs1vZtWhoi0e9NVv+cPVj3lt6p/jlhbRsZY8bAk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:ad:65:d8:ba:5c:fa:0b:80:9b:81:03:dc:d1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
        Validity
            Not Before: Jun 16 00:00:46 2024 GMT
            Not After : Jun 17 00:00:46 2024 GMT
        Subject: CN=3d097c2cbfed10a0c9495160162ddcd2ac749e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:46:50:41:99:ce:15:18:70:c3:65:61:50:17:
                    22:21:05:1a:33:86:3b:71:1b:af:f0:57:30:bd:c9:
                    74:ad:25:08:ef:83:99:63:aa:a4:89:46:bf:92:5e:
                    4a:2e:20:85:ea:da:01:65:59:ae:87:c1:b4:b4:bc:
                    e7:15:05:4c:b4:a0:4e:63:dc:97:3a:12:55:71:af:
                    ef:35:d5:29:c8:41:41:37:3b:0a:96:83:c5:73:10:
                    78:ab:c5:8d:eb:62:be:b5:a4:fd:9e:e6:b9:9f:02:
                    4b:65:67:08:04:ea:d8:aa:8b:70:56:d5:52:00:7b:
                    72:7a:3a:00:5d:e4:35:e2:07:ee:e3:90:6b:06:c0:
                    1a:ce:fd:bd:b1:bf:34:50:cf:69:45:9e:01:75:0b:
                    72:d4:2e:e9:f8:82:f9:05:34:ce:bf:b6:e6:96:41:
                    4a:3a:64:f3:83:ab:2c:5d:b6:99:9c:95:d8:98:12:
                    a6:83:aa:5c:c9:75:40:b5:09:8e:56:e4:7c:9c:9a:
                    7c:bb:3f:07:f2:6e:eb:72:d9:ed:4f:af:12:28:c7:
                    07:1c:0a:2d:97:5d:f7:53:ca:77:71:e1:81:3f:8f:
                    45:28:63:82:a3:fc:fa:30:97:e8:cb:f8:05:48:9c:
                    96:93:f8:71:4c:0d:80:dd:0c:06:5b:81:df:90:f6:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:09:7C:2C:BF:ED:10:A0:C9:49:51:60:16:2D:DC:D2:AC:74:9E:4A
            X509v3 Authority Key Identifier:
                keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3e:b6:22:ab:04:83:0c:6e:4a:5b:7b:fc:a1:ca:c5:77:34:
         59:a0:2e:41:28:ce:70:84:28:34:de:9f:68:5d:ed:1b:c8:83:
         4b:4d:67:fe:d7:0b:ae:13:a2:58:d7:e8:9b:21:fd:65:52:37:
         7b:0e:08:f4:c3:3d:20:1e:af:38:70:57:d6:55:3d:66:6b:59:
         dc:e8:72:2b:31:a5:e1:82:16:4d:49:2a:6a:a0:2d:23:24:9a:
         cd:be:9f:04:95:b7:c3:42:39:ab:a1:d2:07:26:61:78:05:6c:
         f3:07:cc:73:ee:1f:2a:18:86:fc:ad:37:a5:41:6e:e7:0f:44:
         da:b4:ac:00:c9:37:0b:50:8e:49:50:86:ee:25:3d:0a:ba:2d:
         e8:32:de:5d:7c:54:2d:ac:ee:56:18:49:e8:47:db:f3:16:3d:
         cc:cb:00:a7:a8:29:7b:07:cd:6f:08:06:96:b2:77:52:46:0c:
         81:8c:d7:0b:77:0b:48:5e:cc:83:6f:9e:f5:77:25:7f:9b:0c:
         9b:ba:c1:c2:18:7c:c6:11:db:6f:38:bd:38:b4:45:d6:fe:c5:
         dc:db:a1:2c:50:98:0f:e0:09:24:d1:db:16:14:a7:e2:8f:b3:
         e8:8b:3a:91:72:58:1e:1e:33:cb:8e:0b:a6:9f:83:b3:70:f0:
         79:24:0d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:34:55 2024 by rpki-client on console-ams.rpki-client.org