Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
File:                     slpaQ70jhPiS0mXlWLRBHosjK1U.mft (raw, json)
Hash identifier:          tpinZ7AW00vVPTMbBVrt2NaiRy8sccsCGmFu3IgYqOM=
Subject key identifier:   61:27:A4:E5:73:D0:60:2E:95:69:94:03:9E:5C:6A:D0:9B:CB:D4:D5
Authority key identifier: B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55
Certificate issuer:       /CN=b25a5a43bd2384f892d265e558b4411e8b232b55
Certificate serial:       0190384FBDDFEF98C8212C3397CA9119F028
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
Manifest number:          11D4
Signing time:             Fri 21 Jun 2024 01:01:08 +0000
Manifest this update:     Fri 21 Jun 2024 01:01:08 +0000
Manifest next update:     Sat 22 Jun 2024 01:01:08 +0000
Files and hashes:         1: ia7WlMCtWsawTPgbi6dV170BmWo.roa (hash: zRJtMHKkRwd5YCr1iTPTlQRiomhQhgOkbyCykd1/N/A=)
                          2: slpaQ70jhPiS0mXlWLRBHosjK1U.crl (hash: 8kssOGLMeiLAYzdYqF994CNbzMEtlPJJRpNCeVMt9gY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:4f:bd:df:ef:98:c8:21:2c:33:97:ca:91:19:f0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b25a5a43bd2384f892d265e558b4411e8b232b55
        Validity
            Not Before: Jun 21 01:01:08 2024 GMT
            Not After : Jun 22 01:01:08 2024 GMT
        Subject: CN=6127a4e573d0602e956994039e5c6ad09bcbd4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:ff:05:c6:84:76:c6:97:cd:b6:f7:62:4b:
                    6d:22:8b:d7:75:83:60:e1:8d:a3:21:3a:4a:15:8e:
                    31:34:97:64:46:3c:12:b8:a7:3c:d2:1b:58:92:8f:
                    29:0b:2f:a6:6a:7e:87:d7:40:7e:73:6d:4b:e7:3c:
                    5c:45:82:be:db:5e:85:81:5c:58:c3:92:8d:12:e7:
                    8d:55:36:3e:f7:46:74:2d:81:6e:a3:73:7b:6f:7a:
                    77:19:3c:83:4c:31:2d:2a:88:ff:3f:a4:aa:c8:1c:
                    fe:70:83:1c:d6:a2:17:81:e9:0b:48:d9:da:e5:40:
                    ac:20:07:9c:3e:ac:04:8b:88:1a:65:0f:07:69:9a:
                    9c:df:86:29:ac:d4:8c:58:5b:09:5a:74:e8:30:fd:
                    08:df:cc:0a:bf:0a:30:4e:b7:53:1b:38:29:75:35:
                    4d:14:42:ee:c8:59:96:96:80:b0:8c:aa:7f:a1:1e:
                    e6:09:76:9f:1d:88:80:02:94:f0:41:a1:6d:0c:ff:
                    96:11:3c:27:51:b7:32:f4:a6:15:38:2c:54:fd:a3:
                    ea:94:96:eb:9a:3b:d6:45:cd:6b:ba:9e:2b:6f:26:
                    dd:94:4c:a6:b3:87:cb:b6:1e:00:d6:dc:30:e2:39:
                    09:51:d2:db:2e:46:b6:e0:49:61:38:81:0a:70:d1:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:27:A4:E5:73:D0:60:2E:95:69:94:03:9E:5C:6A:D0:9B:CB:D4:D5
            X509v3 Authority Key Identifier:
                keyid:B2:5A:5A:43:BD:23:84:F8:92:D2:65:E5:58:B4:41:1E:8B:23:2B:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/slpaQ70jhPiS0mXlWLRBHosjK1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/4df969-57a6-45f7-8082-5ebde8b8ce1d/1/slpaQ70jhPiS0mXlWLRBHosjK1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:53:e7:60:07:05:55:b1:b6:25:46:4c:fd:e0:ca:6a:ab:6f:
         a4:a8:fe:83:b3:ec:2d:b7:03:61:90:a5:1a:2f:1b:6e:66:22:
         46:bf:d8:e3:81:aa:ef:fa:f2:24:66:42:ae:45:36:25:47:95:
         4c:f0:49:61:04:bf:ce:e1:cb:26:12:3b:f4:77:e6:b1:92:81:
         ea:f9:a9:2b:4d:0d:2b:11:aa:be:a5:4b:13:15:7d:7d:d1:c2:
         8d:1c:6d:c5:4b:90:24:27:d7:d7:77:af:b6:ca:10:24:ab:a4:
         53:c3:f6:e4:64:a4:ff:8e:77:e8:e4:85:ff:37:0a:e6:de:68:
         2f:d7:a6:b0:55:73:b0:92:72:10:16:5f:c3:b6:38:5c:95:02:
         4b:ff:d5:3b:d7:48:59:b9:e2:37:31:4d:79:f8:cf:4b:2b:cc:
         28:c1:f9:5b:ed:8e:21:31:83:1e:fe:cb:0a:c0:8a:7b:ef:6a:
         18:a4:41:2a:a9:75:b3:0a:8b:a4:ae:9c:de:00:f8:7b:fb:a8:
         a8:f1:b5:77:3d:8f:92:f7:f4:78:55:2b:fa:97:bb:aa:34:fa:
         72:d5:3c:44:87:92:8e:0b:8e:d0:f7:1a:d8:6c:a7:5a:17:24:
         5a:67:9f:46:7e:03:f0:fb:34:0d:22:66:ad:4d:be:9b:13:5a:
         ad:64:8b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:12:11 2024 by rpki-client on console-ams.rpki-client.org