Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File:                     xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier:          2Wxd1Db5VUL0eO8qF03jC7lI4+X9KRr8ZLjBy4wGw/I=
Subject key identifier:   0A:80:06:95:51:E5:6E:9D:8C:09:61:55:04:4E:B8:D1:7D:15:91:B2
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer:       /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial:       018F0BAFA0147D92314ACC07BF18C7718C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number:          10CA
Signing time:             Tue 23 Apr 2024 16:00:10 +0000
Manifest this update:     Tue 23 Apr 2024 16:00:10 +0000
Manifest next update:     Wed 24 Apr 2024 16:00:10 +0000
Files and hashes:         1: llDn-ldg2lvpRN5qhqULql1vbmM.roa (hash: 77CfUuwaN+aV1vzbx3qmLcCJnM7LAq8ziCu4VXNFbVA=)
                          2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: 5DW/nfP2o8iV8mAbrlAexSyYxnfK/i/h22XOHYK+SBM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Apr 2024 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:0b:af:a0:14:7d:92:31:4a:cc:07:bf:18:c7:71:8c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
        Validity
            Not Before: Apr 23 16:00:10 2024 GMT
            Not After : Apr 24 16:00:10 2024 GMT
        Subject: CN=0a80069551e56e9d8c096155044eb8d17d1591b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:12:e2:4d:f5:22:ea:aa:74:fa:bb:0f:78:6a:
                    18:8b:6e:62:a4:28:e7:4c:4e:5f:4e:ce:f5:0e:dc:
                    da:20:57:78:fe:95:80:3c:1e:f5:48:54:66:18:a4:
                    32:ab:dc:78:7c:45:d2:18:15:ac:09:6a:68:a4:ae:
                    ba:2c:a1:40:91:19:dd:a0:a5:8f:27:22:c6:42:8d:
                    a2:6e:a8:51:a9:f5:3a:8a:08:d5:1f:6f:da:59:6d:
                    52:e6:62:4a:61:de:97:b1:c4:f4:01:03:d9:6f:4a:
                    38:35:bb:16:27:1c:b6:c1:d1:ce:95:f5:b0:7a:29:
                    55:b2:4e:de:3f:0b:cf:03:f0:48:b9:a2:13:e0:dc:
                    98:35:b6:a6:58:ff:1b:16:4e:d8:b0:bc:a3:51:5c:
                    82:5b:83:6d:25:97:bf:aa:bd:f9:ad:71:6e:58:7a:
                    fb:00:39:4a:a7:57:2c:49:ad:75:58:44:5d:19:1d:
                    74:28:c6:02:54:7a:ff:25:cd:76:15:e1:84:13:28:
                    b1:05:a0:9f:e6:9c:1b:35:69:8d:6a:2d:9d:8a:94:
                    64:2b:66:c5:af:e4:3e:6b:0d:c8:74:c0:4d:b4:03:
                    96:41:2a:e9:18:cc:f3:55:15:12:90:42:e4:ef:3e:
                    8c:c3:1e:56:7d:c2:6e:f1:95:b0:d7:8d:ca:36:a5:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:80:06:95:51:E5:6E:9D:8C:09:61:55:04:4E:B8:D1:7D:15:91:B2
            X509v3 Authority Key Identifier:
                keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a4:da:1a:96:64:b8:d2:51:31:fc:92:9a:c0:a8:a5:c0:6f:
         9f:9e:51:c4:86:08:8a:12:03:3d:9b:7c:18:ac:0a:b5:60:52:
         a6:2f:62:72:d6:9c:2a:5d:c6:10:99:7c:3b:f1:14:5f:91:11:
         fc:3a:6e:46:13:f0:d0:f5:d4:ad:d7:cd:0b:b4:f9:65:ed:aa:
         e9:91:8e:88:01:46:07:da:cb:b0:74:93:b1:39:f9:22:27:fe:
         40:0b:b9:64:1d:a7:45:5e:d1:c2:ec:87:fc:0c:61:89:3d:91:
         69:25:9f:4a:c9:69:5e:52:14:1a:c6:1f:0d:4a:55:79:52:51:
         a2:f1:8f:5a:d1:d0:9b:8b:fd:22:05:4e:23:bb:be:cf:69:b0:
         4f:a9:d6:fa:06:cc:3d:29:c4:ec:a8:38:f0:b3:42:2b:87:57:
         06:04:cc:b8:8f:be:07:ff:f0:91:16:68:c4:e8:77:bc:7f:42:
         8c:4c:1a:b1:ec:f6:f7:34:cb:43:38:f7:41:66:fd:26:00:fd:
         d9:75:ba:d2:70:72:56:1a:70:cb:48:a5:0f:b7:90:cb:ee:b8:
         8d:68:cd:27:ff:57:f4:bd:02:64:62:c8:f8:0e:b3:5f:76:3f:
         c8:17:93:de:15:1f:12:e5:8f:56:ba:3f:5f:8a:c6:46:30:82:
         73:17:4d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:57:55 2024 by rpki-client on console-ams.rpki-client.org