Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File:                     ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier:          M5LM4WdRIlBz/qe05BGoRTgVqOr4bthL5qhSOTHscQM=
Subject key identifier:   45:BE:EC:C4:B7:85:9E:9D:53:1A:16:90:BB:73:C4:70:F6:F7:3F:A6
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer:       /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial:       019045D420E5781510FE32E220F7F8CEF8EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number:          0D19
Signing time:             Sun 23 Jun 2024 16:00:48 +0000
Manifest this update:     Sun 23 Jun 2024 16:00:48 +0000
Manifest next update:     Mon 24 Jun 2024 16:00:48 +0000
Files and hashes:         1: NttUX3LRLFZ6VthT-VVGGGeursM.roa (hash: Hxu0uq2JhgKLkokEcDE1T2NyVe8Xxx3juqKvnInSklY=)
                          2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: 3Y+yNNqjAqglhaH3B9GXRbfqenfSVEWLrAXhlmAuqRI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:20:e5:78:15:10:fe:32:e2:20:f7:f8:ce:f8:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
        Validity
            Not Before: Jun 23 16:00:48 2024 GMT
            Not After : Jun 24 16:00:48 2024 GMT
        Subject: CN=45beecc4b7859e9d531a1690bb73c470f6f73fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:b1:16:52:2c:7c:95:85:26:3e:39:f7:dd:
                    11:d1:81:78:ef:c1:ef:42:89:84:a1:79:a0:fc:e2:
                    43:d4:01:5b:21:f4:2c:37:40:d0:c4:6b:65:69:45:
                    f6:3b:02:d7:aa:50:14:1a:ec:ca:c0:ef:ff:b3:bf:
                    4b:93:52:09:09:a3:9c:4a:0a:a2:87:b2:58:f8:b8:
                    36:0c:a8:dd:61:2d:38:32:0f:df:89:4f:82:42:40:
                    7b:67:01:86:27:67:d9:7f:59:38:67:31:3c:85:3f:
                    4f:40:cb:ca:c5:a5:a0:dc:93:5e:6e:f0:2d:d3:14:
                    f3:bb:46:04:08:29:e2:17:9a:37:73:99:b8:2c:3b:
                    30:ac:47:43:5e:b2:29:a8:4d:72:f4:68:ea:a3:02:
                    0b:99:bf:be:dc:db:0a:51:88:25:b6:10:99:b9:b4:
                    9a:47:58:2b:ff:44:59:e5:3b:8a:6a:4d:87:27:fd:
                    62:8d:5f:1c:ce:c6:31:4a:f5:24:27:8c:18:fe:56:
                    ac:1a:f1:91:9c:3a:57:b5:70:7a:bb:4f:26:00:0e:
                    15:34:75:82:5d:24:76:5b:78:6b:eb:a9:8f:f2:a5:
                    99:38:3e:45:51:f0:70:ef:8b:aa:f1:55:b4:a4:c3:
                    01:43:37:1b:21:88:45:e4:ed:5d:da:56:ff:1b:11:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BE:EC:C4:B7:85:9E:9D:53:1A:16:90:BB:73:C4:70:F6:F7:3F:A6
            X509v3 Authority Key Identifier:
                keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c5:2f:dc:03:9a:b4:b5:77:60:b6:c5:53:a1:2f:63:da:f4:
         dc:b1:02:fd:0c:b2:29:29:63:54:51:7b:d5:ae:06:b9:a3:c6:
         fa:ab:b4:44:c4:54:f9:25:b6:a7:9e:87:63:93:fe:b8:91:d2:
         6c:dc:70:00:ac:c7:a0:d3:63:29:bd:2e:3a:15:1e:b0:fc:28:
         6d:43:58:80:73:e3:fa:e9:e1:4c:10:20:48:d0:dc:38:9c:80:
         95:db:76:80:2c:58:8e:f3:17:82:b6:d3:a0:b0:03:7e:0b:44:
         3e:63:81:56:53:f7:12:2c:71:c9:26:bc:ab:e3:66:bf:ba:36:
         11:c9:48:5e:0f:27:7c:ac:97:e9:6b:1d:b1:fe:47:ed:9b:0d:
         65:25:4c:36:d9:c2:3c:64:d6:3d:17:8f:2e:1b:7f:3a:58:3c:
         d9:03:ad:ab:f8:2b:6b:86:9b:95:69:0e:54:31:bc:f1:de:0e:
         30:ed:e5:89:4b:1e:2d:a8:cd:2e:94:f5:fd:60:e5:e5:36:77:
         34:f8:64:61:61:63:70:ef:33:b5:6e:c5:00:7d:4c:c5:3c:cd:
         9f:92:ef:7b:bc:3b:2f:91:de:c5:ff:9c:ac:1f:1e:e9:89:5b:
         80:8e:e6:fe:21:2a:42:76:eb:2e:93:41:07:33:52:1f:09:78:
         0f:12:01:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:37:21 2024 by rpki-client on console-ams.rpki-client.org