Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File:                     are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier:          A0cSdyPNccDVOgy77KW5W/j7Trk+uBU4AjvnHklyFkM=
Subject key identifier:   5F:8A:F5:E9:96:2E:DE:93:31:C4:1C:F4:A8:41:93:DF:6D:E9:20:8A
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer:       /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial:       01901EC6C3969600A47FF6072D5B0B98FAAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 02:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:00 +0000
Files and hashes:         1: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: WK4CsSLTPQ/vsGr7SRZJLfO6L23OMETXmnSkIYvBY3o=)
                          2: cVdwFsU1ZlJRuc4Mz5-Z3Bt0Ta4.roa (hash: MFQ9TBe00ccrnmLZLoFFUNMUWQhWL/h62hchYWezCyU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:c3:96:96:00:a4:7f:f6:07:2d:5b:0b:98:fa:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
        Validity
            Not Before: Jun 16 02:01:00 2024 GMT
            Not After : Jun 17 02:01:00 2024 GMT
        Subject: CN=5f8af5e9962ede9331c41cf4a84193df6de9208a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:2b:94:72:6d:a6:d5:16:aa:2e:e0:f2:f3:
                    3d:df:56:6f:52:9b:58:b3:22:16:b3:2d:af:20:21:
                    11:f4:ff:79:26:32:92:e4:7f:29:2c:0f:60:d2:b3:
                    aa:d7:18:87:fb:2c:cc:93:a8:1b:68:8e:44:40:c9:
                    eb:40:e9:ca:37:eb:31:4b:fd:ff:e2:d9:85:23:dc:
                    80:0d:e7:00:c0:eb:70:e2:2b:cb:b8:9d:e4:04:94:
                    df:ef:68:2f:1a:95:1a:06:17:0a:5e:6b:d4:37:2f:
                    e5:c6:a8:f2:d0:2a:61:62:2d:cd:ef:05:18:a1:9b:
                    3d:c5:6a:97:98:2b:58:4a:9b:ce:70:04:15:39:ea:
                    bf:26:22:30:28:2c:f0:68:e4:e1:0e:20:fb:07:1c:
                    d7:28:7e:2b:f6:3d:00:e8:35:0d:74:66:dc:b9:0c:
                    cc:1e:f1:cd:02:8d:d4:10:e4:51:67:bd:6d:16:4a:
                    5b:ae:d7:c3:6c:6e:b0:99:f4:56:ae:2e:53:50:a0:
                    24:19:ab:75:87:0c:ea:21:d0:2d:d0:f3:a2:68:eb:
                    62:da:d8:7d:2f:14:d5:bf:dd:31:7c:23:a8:33:00:
                    d3:c3:9d:85:8b:d1:6c:4f:e3:a8:3e:73:d0:05:15:
                    b3:19:c7:2a:ac:16:56:02:9d:80:69:6f:42:f2:4b:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8A:F5:E9:96:2E:DE:93:31:C4:1C:F4:A8:41:93:DF:6D:E9:20:8A
            X509v3 Authority Key Identifier:
                keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2a:55:20:ae:9d:c6:69:49:33:67:26:e6:43:34:14:1f:69:
         aa:cb:22:45:2f:05:f7:6d:da:18:16:72:dd:31:34:fc:e7:78:
         6e:f7:17:57:9e:ad:23:28:4a:b7:85:4b:0c:b8:4f:11:76:65:
         39:53:b5:e1:73:ff:54:dc:00:d0:a6:75:57:47:7c:64:b9:70:
         e3:7f:01:49:e0:a3:3c:9d:7b:e2:8a:bd:73:d6:9d:65:4a:ff:
         c2:f6:ea:ee:ed:d3:9d:54:c8:15:1a:72:e4:60:f9:43:91:37:
         d9:29:45:e3:df:db:86:f1:aa:84:3e:f4:dc:29:37:6d:19:6c:
         c3:cb:02:3b:27:be:99:fe:f7:7f:0e:6b:fd:b5:c5:d4:29:a8:
         f7:8a:fb:a0:de:21:f5:74:a9:55:fd:68:f4:a9:43:cb:56:d6:
         f5:dc:19:a8:db:ab:20:ef:ce:ef:f2:59:b3:01:8b:42:5e:4b:
         32:5c:a0:85:b9:2b:66:e7:98:59:75:4b:66:62:f8:1d:cf:03:
         f7:d7:6c:e5:05:ed:08:d7:85:03:75:4a:23:87:2a:64:72:0c:
         85:05:e8:cf:05:8a:66:00:5b:fa:e1:27:2b:56:b0:56:52:87:
         f2:a9:72:97:b8:10:9e:ff:fd:92:91:10:82:77:48:07:5f:c3:
         d4:d6:15:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:46:33 2024 by rpki-client on console-ams.rpki-client.org