Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
File:                     ascqc0OS9s95Kz0MPtEYIChvGfQ.mft (raw, json)
Hash identifier:          NF4GuOboi49EIXzkotBs07lcMYerCA9rvRSGC61waTc=
Subject key identifier:   95:B3:AF:44:7F:29:34:29:99:73:D4:91:C5:96:5A:B8:CC:9B:61:E8
Authority key identifier: 6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4
Certificate issuer:       /CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
Certificate serial:       01901D46194278161041136F2EA4DBCE79CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
Manifest number:          0D04
Signing time:             Sat 15 Jun 2024 19:00:51 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:51 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:51 +0000
Files and hashes:         1: NttUX3LRLFZ6VthT-VVGGGeursM.roa (hash: Hxu0uq2JhgKLkokEcDE1T2NyVe8Xxx3juqKvnInSklY=)
                          2: ascqc0OS9s95Kz0MPtEYIChvGfQ.crl (hash: 6b7nQhstz5QiaI4fZvQYqv5hp6SgH3U+gdCNEgjZXdw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:19:42:78:16:10:41:13:6f:2e:a4:db:ce:79:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac72a734392f6cf792b3d0c3ed11820286f19f4
        Validity
            Not Before: Jun 15 19:00:51 2024 GMT
            Not After : Jun 16 19:00:51 2024 GMT
        Subject: CN=95b3af447f2934299973d491c5965ab8cc9b61e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7a:ed:80:88:17:71:f3:b7:21:d7:38:1b:e0:
                    78:95:22:c1:f4:88:40:68:2c:ae:76:0f:d6:c9:d6:
                    f2:09:1a:9f:d3:51:24:4b:1b:d6:fe:25:b1:d0:91:
                    93:16:cc:0a:69:6e:ab:a5:3e:5c:15:ef:f8:32:f5:
                    a2:2f:6f:c9:26:f9:e4:54:d2:38:63:b1:de:05:73:
                    3c:d1:45:ab:50:67:17:71:e4:95:51:38:03:0b:b4:
                    11:8e:54:c2:13:0a:9c:d2:8d:2b:a7:85:4e:4d:f7:
                    ca:82:07:c2:4d:7d:b4:8c:d7:19:7a:3c:36:63:90:
                    7e:6a:6b:ab:1d:87:fa:34:63:e1:50:11:65:53:84:
                    f7:d9:d3:13:19:1c:4e:2e:15:53:81:35:df:9a:65:
                    aa:7f:25:a0:c0:91:b2:d7:cb:12:4a:f3:98:a4:82:
                    0f:6d:e5:b5:16:c3:18:8b:77:0b:ea:ed:7d:a0:80:
                    1e:fe:3d:29:41:f5:5d:73:36:f9:d6:4d:4a:b2:8b:
                    a3:78:6c:10:51:d1:aa:64:5e:45:d7:1c:dd:67:89:
                    fc:49:f9:3e:ca:1a:72:f0:66:a7:4e:11:d2:a7:62:
                    69:2c:c4:fa:bc:32:dd:1c:61:48:93:11:92:c2:85:
                    57:c5:77:7a:4b:54:f1:b2:4e:51:7c:53:2b:bc:3e:
                    ac:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B3:AF:44:7F:29:34:29:99:73:D4:91:C5:96:5A:B8:CC:9B:61:E8
            X509v3 Authority Key Identifier:
                keyid:6A:C7:2A:73:43:92:F6:CF:79:2B:3D:0C:3E:D1:18:20:28:6F:19:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ascqc0OS9s95Kz0MPtEYIChvGfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fcd516-88f5-4e48-9ab4-93df45003e7e/1/ascqc0OS9s95Kz0MPtEYIChvGfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:02:4f:78:aa:ba:7e:76:ef:fa:3b:ed:33:a8:e5:e9:b4:94:
         ae:f1:ad:0c:a5:80:ab:5d:00:76:99:e5:e4:71:82:3a:c1:27:
         23:99:7b:41:dc:92:b6:64:44:ad:73:d2:49:68:73:e3:e4:53:
         65:46:5f:9d:3c:43:3c:4d:a3:87:b0:ac:2d:f3:ec:22:a4:d9:
         64:d5:00:19:62:e3:e5:34:19:c7:ae:6a:90:fa:d7:fe:54:af:
         3f:22:32:3b:f5:5a:13:c1:9a:5f:33:67:ba:88:a9:ff:17:8d:
         e0:dc:9a:fc:38:75:66:f6:ca:4a:71:a0:d5:e3:65:21:b6:35:
         15:5a:ca:ce:89:a3:de:0c:5a:5c:e3:00:e4:98:9b:97:c8:fa:
         8e:e7:0f:01:83:64:d7:0a:fc:03:71:0c:6d:cf:0e:f3:39:a9:
         94:44:6a:bd:ae:d1:d9:e5:3a:2e:7f:c8:75:89:6b:71:2a:4d:
         ae:f7:25:93:eb:17:dd:21:0c:34:22:71:76:b1:18:df:7a:dc:
         e5:e0:07:d1:da:3f:12:6d:3a:b2:48:5c:10:df:8e:47:07:61:
         66:47:e6:a5:d4:03:e1:d0:37:d5:f4:49:b0:a9:9b:17:98:48:
         26:01:e4:c6:91:71:ee:71:cb:6b:05:66:8b:d6:f4:b4:99:5e:
         16:56:ea:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:48:28 2024 by rpki-client on console-ams.rpki-client.org