Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
File:                     aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft (raw, json)
Hash identifier:          xFG+m1yXForL+sraeS0kpKYuDwDSLFadEGUmmDYdaFk=
Subject key identifier:   04:DB:EE:9D:C8:10:9A:2F:96:13:A0:C7:5C:D4:F6:58:98:C6:FA:2F
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Certificate issuer:       /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial:       01901DED56C6ABB3DDA7C4CF7A9CFA347346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:03:31 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:31 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:31 +0000
Files and hashes:         1: Ke3fPbyPoP0iliEO-Uxm5ka7GR4.roa (hash: 71+dNE7DDYN9SsbzDneRhpVvS2KJwnBuE4cfmD8jMKg=)
                          2: aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl (hash: tGcarnkqtP9SJcmoG8cxcKtyz7cSYd7dQipjEdEB3aU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:56:c6:ab:b3:dd:a7:c4:cf:7a:9c:fa:34:73:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
        Validity
            Not Before: Jun 15 22:03:31 2024 GMT
            Not After : Jun 16 22:03:31 2024 GMT
        Subject: CN=04dbee9dc8109a2f9613a0c75cd4f65898c6fa2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:99:8c:c6:21:25:e2:17:10:74:eb:63:07:f4:
                    fa:7b:fb:75:0f:b3:53:3e:db:2d:16:37:81:fd:14:
                    1a:dd:3a:5e:9d:40:d8:47:d5:01:0a:ff:a2:b5:45:
                    07:4a:42:41:97:90:cf:07:17:1b:91:35:45:d2:d4:
                    b9:ce:97:75:b0:b9:1b:34:6f:01:a7:d3:09:3d:4b:
                    b1:8d:ae:6d:14:0b:7a:a4:5f:49:bd:56:b8:1f:5c:
                    2e:d5:07:8f:34:ec:ba:77:7e:ff:30:c2:63:04:0d:
                    80:f3:bd:1e:d7:86:b7:85:f6:1e:b3:fb:d5:e2:96:
                    8b:57:85:5c:e4:83:72:a6:f6:28:9b:a5:52:84:f7:
                    07:10:8d:b8:3f:f5:66:33:73:87:97:61:4f:db:a1:
                    13:9f:b5:93:d3:2d:89:f9:63:88:fb:79:14:35:e8:
                    87:94:26:56:70:be:d8:98:e7:ad:51:b6:5d:3c:7a:
                    70:dc:b3:4f:0c:d3:d9:87:f2:d2:28:44:a3:67:22:
                    9a:39:f5:31:bf:7d:78:29:1a:15:5a:32:fe:6c:f5:
                    74:ad:8b:44:a0:8e:b6:04:7e:37:c1:0d:9d:54:40:
                    f3:29:77:f5:78:9d:66:67:67:58:ee:ba:de:33:f6:
                    e1:cb:38:8e:09:fd:6f:7a:9c:2d:58:22:f8:40:f3:
                    b4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DB:EE:9D:C8:10:9A:2F:96:13:A0:C7:5C:D4:F6:58:98:C6:FA:2F
            X509v3 Authority Key Identifier:
                keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:e5:e3:c6:05:6e:28:b2:82:49:d0:5b:43:bf:26:44:45:
         1e:e5:32:f6:c2:72:cf:54:3a:3a:02:cd:90:9c:a1:df:54:13:
         89:31:56:c8:a3:96:98:1a:16:64:aa:a8:c5:e7:64:59:ea:e6:
         ea:7c:93:6b:d5:ef:f2:05:39:e8:e4:45:fe:3d:a4:f0:7c:aa:
         cf:45:33:68:d2:af:79:57:0a:de:23:68:8e:d8:44:78:7f:33:
         86:8b:cb:e3:60:1a:c9:6b:20:bb:30:77:29:e4:b6:bf:b6:8e:
         1b:06:2e:04:9f:3f:10:2e:d5:b2:c0:61:19:7c:5a:1c:d5:7f:
         04:d7:6e:d0:9d:e4:e2:32:21:d7:af:cc:60:e8:a3:7d:ea:d7:
         bc:5a:f3:d8:0f:5d:90:80:c9:cf:ee:38:f1:67:da:4f:20:2a:
         74:18:c7:73:05:6b:71:62:46:8c:87:64:74:e4:bb:d8:4f:d0:
         42:d2:c9:92:bf:d7:8e:24:23:7f:4c:fa:0e:03:00:a7:77:53:
         b4:40:7b:8a:42:24:ff:1f:36:5b:e3:65:9a:83:05:47:6f:47:
         ed:61:b6:09:ed:52:a8:fc:85:6e:7b:a6:5e:1b:60:e5:8b:cd:
         b5:f3:ac:9b:e0:20:97:05:56:81:c7:bc:ce:00:bc:c3:e0:a0:
         98:bf:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:33 2024 by rpki-client on console-ams.rpki-client.org