Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
File:                     xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft (raw, json)
Hash identifier:          FWttfVnvM59+FO9FHKJI3uo6vztIOUsQVTD6v/IILw0=
Subject key identifier:   D2:12:5D:39:14:AA:A4:E1:0E:34:D0:8B:A2:74:24:3F:BA:43:5F:2F
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Certificate issuer:       /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial:       01901DEC970D4E570833430FA2F9A31EC7ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
Manifest number:          11D2
Signing time:             Sat 15 Jun 2024 22:02:42 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:42 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:42 +0000
Files and hashes:         1: 2SqBxKPH1ZIDFi9TE8B731FZ0iQ.roa (hash: iKpOfYwVeoFaHHlV2BZFQObAkEglEWvxOYRDr/f2PLY=)
                          2: 4risuUbTuuksWFjx-zBQE5xaR5s.roa (hash: h3vAbWApa2m96KBqQpcaRSI39msq/jE1tIB8zWww0kk=)
                          3: LxVBZcy6vutlSDQQxrPSRzHbu58.roa (hash: AD4XCnRZbCseqbJo/hXBbIvlGK+jqybYXiFFJrrJDwQ=)
                          4: w8CaOlH7Xo7qopAjpYLVPrxtweY.roa (hash: 8RhXFdjZbbFYL9T6NaQy9tHI+r+zw6LX5vygVNTQ7cI=)
                          5: xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl (hash: HOIzYslIIDmBfaScDPs2gKqDiJPq90tt3sIZTHtE+gY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:97:0d:4e:57:08:33:43:0f:a2:f9:a3:1e:c7:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
        Validity
            Not Before: Jun 15 22:02:42 2024 GMT
            Not After : Jun 16 22:02:42 2024 GMT
        Subject: CN=d2125d3914aaa4e10e34d08ba274243fba435f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:ed:51:a9:46:11:2a:1e:09:33:47:df:98:
                    54:0e:d6:0f:33:86:c0:a8:3f:f5:6e:18:31:99:3a:
                    c5:21:38:05:ea:56:04:8c:2f:d4:4f:4f:2d:fc:9a:
                    75:5b:dd:e7:a5:34:93:42:36:0e:89:e4:22:3e:df:
                    f6:c5:1a:ac:1b:87:18:f0:b0:48:f5:9e:09:e7:24:
                    06:77:59:0a:86:9f:8f:c2:38:25:69:84:d1:77:4a:
                    8b:25:f1:e8:f0:3b:9a:7d:1e:a1:24:da:ea:9e:19:
                    8a:a8:b4:0c:90:2c:89:f3:21:fd:42:81:3f:ae:0d:
                    ff:5e:6e:c1:7b:24:52:c4:d1:cc:2a:4d:32:63:3c:
                    f5:33:7f:cd:96:88:01:93:3d:94:83:7f:50:fa:e7:
                    33:3f:ba:41:fc:e2:98:f9:05:76:b9:01:84:55:8a:
                    70:e2:02:b2:e8:c0:36:a5:24:bc:d7:25:be:2d:65:
                    80:cb:3b:41:2d:da:c4:87:e8:79:0f:2c:31:70:36:
                    27:46:f1:f8:1c:cb:c8:32:2c:d1:9d:e6:77:15:6b:
                    13:36:f2:18:9a:11:41:86:29:ae:5e:6c:18:3e:93:
                    f5:f7:e2:61:2b:1f:69:44:bd:2f:f0:17:d6:d2:bf:
                    0d:a1:eb:cf:00:af:bc:b5:41:d5:33:56:d4:b3:2f:
                    ac:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:12:5D:39:14:AA:A4:E1:0E:34:D0:8B:A2:74:24:3F:BA:43:5F:2F
            X509v3 Authority Key Identifier:
                keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:63:ca:c1:f8:6a:2f:8f:b8:3c:3a:18:e3:35:2f:8c:b3:02:
         15:e8:e0:19:55:34:8d:d1:eb:35:19:31:f1:af:1f:a1:4c:79:
         d9:86:8a:8c:47:20:a1:9b:46:db:8a:dc:85:f8:e0:a8:cf:39:
         af:fe:18:4f:29:86:6b:1a:6d:ff:87:c3:72:33:1f:9b:6d:25:
         aa:e4:35:98:82:12:aa:b4:b7:e6:ee:cc:22:48:bd:51:f3:4c:
         b1:9a:b5:ea:40:15:f9:26:32:bb:fd:75:63:ff:4d:1d:56:d5:
         06:ec:11:85:44:ce:f7:a3:ad:00:a3:f3:e8:12:cd:16:d0:0a:
         dd:ec:ab:e0:90:84:d9:4e:0e:bb:16:3e:41:bb:1b:64:18:48:
         89:16:50:1d:f7:9d:f5:48:3d:b9:7c:82:e6:17:f0:a8:2a:b5:
         d9:c0:c7:0c:b8:bf:9c:38:d4:5e:00:76:de:f4:0b:5e:df:08:
         27:ca:e9:25:35:96:c9:a0:1e:5f:6d:64:b4:2b:ca:9b:57:02:
         1e:90:33:0f:d8:9c:12:8a:0a:a1:3e:0a:22:49:d0:85:42:f8:
         17:b3:c1:2d:03:59:46:d3:cd:3b:de:20:d2:29:9e:98:91:b1:
         23:1e:e3:97:10:83:09:8f:dd:a1:5d:cd:fa:26:fe:6c:fa:bb:
         55:5f:f7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:40:06 2024 by rpki-client on console-ams.rpki-client.org