Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
File:                     aMwyXIrZdpobVNopYwX-DDZXN3U.mft (raw, json)
Hash identifier:          78J/PBUK/bjjTjBwczk4IpZrMpB85GSLyytnwQ/wNJo=
Subject key identifier:   32:E4:32:0C:68:C7:9C:1B:19:E5:B5:43:31:2E:D8:30:9A:65:6B:48
Authority key identifier: 68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75
Certificate issuer:       /CN=68cc325c8ad9769a1b54da296305fe0c36573775
Certificate serial:       01901DECDF635340667655647A0768BD9F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
Manifest number:          0505
Signing time:             Sat 15 Jun 2024 22:03:01 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:01 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:01 +0000
Files and hashes:         1: 5fLniQgziIB26DOgv3LeR2U0xtE.roa (hash: zllTuf0DPYCNnUrsnk38AzVGT0TECgFpNDOR0Vaty2c=)
                          2: OmEy79Y0i7zJlH1eawleJZpBMJU.roa (hash: 5Ez4L/le0xnpHNYvekZy8BbeVJoa1mmQ4fFJEiv29bQ=)
                          3: TFGWzMJJAor4DFQBRC3JRc7jeUo.roa (hash: aZBVERg/AQwbBvY7gUfbbTaczK2Mt9n45YPLC/aGRnM=)
                          4: U0U80ScVCsYNYydZLR0-3ybrNwk.roa (hash: rWgzWofx9ehf3jAZ1eFvpb2U9txZCuk8jMihI/Cn5YU=)
                          5: aMwyXIrZdpobVNopYwX-DDZXN3U.crl (hash: sVKZUpwjtKo0pfqq9+Pz9CW3PFoATyJ81nsphKXnNR4=)
                          6: hzB5pmwX56_ByZMLWxNfB0qu4Lg.roa (hash: tAFBPGIhkQ11PPyYxBSRWdrzwaxcEEecz63vuT668/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:df:63:53:40:66:76:55:64:7a:07:68:bd:9f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68cc325c8ad9769a1b54da296305fe0c36573775
        Validity
            Not Before: Jun 15 22:03:01 2024 GMT
            Not After : Jun 16 22:03:01 2024 GMT
        Subject: CN=32e4320c68c79c1b19e5b543312ed8309a656b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b3:04:59:81:64:ed:cd:be:0e:30:e5:fc:df:
                    75:f7:f8:66:4e:ce:1c:ff:5b:e8:80:27:06:d8:16:
                    9a:b4:83:73:7c:30:44:3d:db:c1:a0:5b:b2:e9:ae:
                    35:01:43:4e:e6:be:06:bc:b7:57:1b:40:2b:b4:12:
                    c7:7e:a8:fd:0f:04:80:60:3e:e3:4a:58:28:ec:56:
                    c8:0a:81:7f:be:86:50:8b:7b:a9:c7:58:2d:ed:6c:
                    9e:48:29:01:f2:fc:d0:14:cc:cb:da:37:ea:71:3e:
                    dc:2d:13:9f:58:45:f7:1a:28:4a:15:a4:ff:ca:5f:
                    42:49:82:58:e7:f2:c8:dc:e4:44:7d:14:b3:18:f1:
                    3b:c3:d4:b3:e2:7e:d7:96:b7:3b:84:5a:08:3c:6a:
                    07:e6:fa:15:24:f3:a7:51:b5:5e:d3:b7:54:f9:fd:
                    83:ea:94:81:d9:ee:59:27:55:af:02:9e:1a:c5:94:
                    a6:95:e0:c6:ff:c4:27:26:21:79:42:82:25:95:be:
                    9d:f4:f1:5c:a4:80:b8:bb:3d:b0:fb:4b:5f:94:a7:
                    1d:fb:03:c2:c6:3a:ce:39:35:f9:5c:dc:08:76:3a:
                    50:0f:17:c5:31:f1:64:10:fd:14:0a:29:09:71:bb:
                    38:9d:a6:ef:05:bc:a9:60:6d:c9:30:88:bf:57:06:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E4:32:0C:68:C7:9C:1B:19:E5:B5:43:31:2E:D8:30:9A:65:6B:48
            X509v3 Authority Key Identifier:
                keyid:68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:46:dc:2c:0c:d2:0c:bf:70:72:f0:21:a3:d9:a8:2f:a5:95:
         47:a3:dd:16:ed:72:2d:69:71:1b:90:44:4b:2b:3b:bd:8f:78:
         dd:1d:d3:30:1d:77:6f:a0:06:93:e3:78:ef:bf:b1:a2:e1:5d:
         34:67:b0:e9:99:2a:e5:75:e2:0e:3d:6f:50:ac:7b:ad:ed:db:
         bf:f8:54:04:e3:24:ab:b2:bd:3b:9c:cd:f9:ae:2a:d4:56:3d:
         9d:c8:00:68:f5:c1:91:34:bc:af:2d:ba:82:d3:a7:bd:77:51:
         e7:71:16:71:f8:16:13:15:51:ad:33:c7:87:94:a1:64:8a:dc:
         43:0c:be:24:aa:b7:d0:af:97:66:74:15:4d:b9:ca:4d:fd:13:
         ee:11:97:ae:1e:4a:31:e8:f6:2c:f4:08:04:81:be:4f:0c:91:
         4c:3a:05:dd:33:88:e7:41:41:d0:ab:65:74:28:d2:84:56:28:
         33:82:bd:a0:47:b1:fc:a1:2b:1f:cd:c2:af:49:7c:6a:1a:3b:
         54:10:39:7a:b4:4d:f7:78:22:bc:ba:8d:99:1f:2c:da:89:19:
         07:b7:c0:b7:c3:8c:af:b3:8d:f6:cf:09:17:f7:f2:fe:d1:94:
         15:a0:c8:2d:dd:84:31:b3:31:d9:d7:39:cb:85:52:48:9b:c7:
         34:b5:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:38:14 2024 by rpki-client on console-ams.rpki-client.org