Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File:                     qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier:          GRzd60XBv3mHlbNicv6YIv8PbaHCRoUiccDDS/i3wgM=
Subject key identifier:   25:45:30:30:85:28:DB:46:AE:AE:1B:E6:E5:FC:AD:2F:FA:7C:4D:29
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer:       /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial:       01901BFE48943A0F104C0D7A546C4F508C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 13:02:47 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:47 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:47 +0000
Files and hashes:         1: GYlRvXs1Zdvb45K-HqLdD1lx0Xk.roa (hash: LsH8/524XJMJXLE/lJ03R9dmHJiOZvoqmGRDD05Za/M=)
                          2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: ZyrJj8s/yezS7IpD11L7bLsXRgZMlx6JQBL8V1BmPeQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:48:94:3a:0f:10:4c:0d:7a:54:6c:4f:50:8c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
        Validity
            Not Before: Jun 15 13:02:47 2024 GMT
            Not After : Jun 16 13:02:47 2024 GMT
        Subject: CN=254530308528db46aeae1be6e5fcad2ffa7c4d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:10:cc:bb:f3:32:00:c7:d5:e7:e8:a0:02:da:
                    7e:49:43:38:35:4d:71:f4:4a:e9:0d:b1:25:a7:51:
                    4e:5f:54:5e:8e:d4:ef:91:cc:3c:f8:da:04:39:f9:
                    2c:2d:68:11:18:24:b1:48:56:40:1e:5e:b6:d1:03:
                    96:4a:f1:b9:f9:69:a2:f7:90:03:04:e3:c5:c4:9c:
                    9e:73:f3:5b:44:d5:13:5f:7e:1f:83:df:97:ce:51:
                    e5:eb:a8:e6:4e:cf:65:bd:ba:c5:d8:08:a4:34:bd:
                    33:0b:b1:7f:53:91:a5:80:71:6a:77:03:d5:09:fa:
                    0d:7b:fa:9d:b7:b4:34:3a:c1:41:5a:23:8d:2a:14:
                    e4:ba:47:87:6b:8a:65:17:10:fa:7f:42:bf:65:7b:
                    e9:51:f7:5a:84:58:b3:94:a1:bd:be:0c:5e:79:11:
                    0b:00:33:99:66:ec:2b:65:b6:69:d0:38:bf:6b:61:
                    29:3d:14:fe:06:a7:f7:e0:51:fd:b0:dd:5e:a1:5e:
                    04:4b:a7:54:d2:4a:59:3c:cd:a5:e2:54:9b:5f:e0:
                    64:15:27:60:4f:47:db:53:ec:9b:18:5f:10:33:dc:
                    f0:ef:48:18:27:0e:37:3c:3d:89:a6:3d:3a:05:01:
                    c6:51:c0:40:c9:68:27:3b:e0:b8:e4:49:74:16:37:
                    af:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:45:30:30:85:28:DB:46:AE:AE:1B:E6:E5:FC:AD:2F:FA:7C:4D:29
            X509v3 Authority Key Identifier:
                keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a1:d0:57:33:91:a3:8f:54:34:d1:4e:1f:ef:55:7e:e8:d0:
         ce:9b:d2:2c:a3:1d:5a:50:df:a8:aa:b5:43:cd:a0:75:43:31:
         1a:b6:26:48:f8:66:34:b1:17:35:b3:66:97:2f:d0:0c:6c:85:
         94:6f:c5:f7:72:14:82:76:4d:e2:14:48:8c:91:dd:2e:86:6e:
         9f:c1:bd:4f:81:f9:bc:18:91:2e:a7:d9:a5:f7:ee:67:a0:85:
         d7:81:a5:88:69:df:d1:12:39:ce:81:ce:eb:3b:27:dd:56:86:
         88:86:8d:cf:de:60:f0:bb:e0:5b:fa:86:dd:46:42:df:36:a7:
         cf:d0:7a:4c:2a:6c:4a:7e:80:bc:f2:63:5c:58:2b:77:d0:f7:
         72:01:aa:28:70:bd:e8:c7:58:11:3c:d8:dc:9a:13:22:8a:88:
         92:64:f6:8f:6e:7e:69:08:9b:5b:bf:84:19:a8:9f:67:2a:35:
         a7:e0:a1:f2:e1:40:02:07:d1:44:27:bb:ea:46:c6:33:78:90:
         23:43:d2:6e:49:ca:d0:e6:97:3d:39:3a:8a:da:31:e1:3a:e4:
         ad:37:f7:1d:18:f8:14:52:f7:a6:e5:f8:d1:20:b2:84:d5:87:
         73:ea:fe:87:c5:eb:02:1e:49:46:02:f1:b2:d6:30:6e:60:61:
         b1:c8:d8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:28:48 2024 by rpki-client on console-ams.rpki-client.org