Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File:                     k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier:          OVwlTFCDqN4DoU3qJRkZTHjACDxdE/k10Aj6G2JQwmE=
Subject key identifier:   FC:10:B9:DB:24:26:8F:83:62:61:2C:DB:AC:B8:C6:0A:B2:26:00:0B
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer:       /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial:       01901DEB4AB271B2C562F0F17CB4386BDA3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:01:17 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:17 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:17 +0000
Files and hashes:         1: HSMZpQ1ORVrMjR0r3tbc5JVVvdI.roa (hash: 2oXZjGchLniSYyVhkEOu6HWvjJNrinf7wtCmxWn/JNY=)
                          2: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: S5Y+K2S5ImAfRZtBpvL43SfDSOaosfdB//KMP2uHos0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:4a:b2:71:b2:c5:62:f0:f1:7c:b4:38:6b:da:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
        Validity
            Not Before: Jun 15 22:01:17 2024 GMT
            Not After : Jun 16 22:01:17 2024 GMT
        Subject: CN=fc10b9db24268f8362612cdbacb8c60ab226000b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:2c:5f:0a:f3:33:72:6a:fb:66:96:b1:b2:
                    59:e7:37:b7:d0:95:0e:0b:a3:55:b0:04:6e:42:07:
                    9d:32:25:a8:33:b3:0b:fc:10:b7:bb:92:47:26:5f:
                    b0:06:19:3d:18:92:2b:11:98:84:40:20:af:9c:af:
                    79:84:89:67:b1:f4:89:62:73:5d:c5:80:92:a4:d8:
                    4f:8f:23:aa:09:71:2d:53:2c:83:8b:0d:6e:ee:f9:
                    41:63:ef:a0:6f:db:71:3a:2d:10:07:d9:8d:f4:52:
                    47:0d:0d:08:19:a2:01:70:e3:ee:32:75:e0:5a:d6:
                    4c:fe:c0:61:1f:9c:e3:e1:fb:1a:1d:a5:50:c9:44:
                    6d:32:95:62:60:f0:18:40:3a:c2:d8:9d:2b:b3:53:
                    06:ac:6d:ad:ee:52:2f:1e:0f:15:4a:98:67:7a:3f:
                    44:fb:d9:cd:0b:5e:8d:20:73:1d:b5:9e:a5:8f:5f:
                    b1:08:ae:31:fc:7b:a9:19:4b:bb:e0:23:96:99:4c:
                    b0:03:7d:27:76:82:f2:2b:db:f4:59:71:31:67:1d:
                    20:ce:37:07:bb:df:6f:36:be:d3:39:94:98:5f:65:
                    f8:22:02:ba:ac:1c:59:71:05:95:33:1c:70:83:07:
                    e3:22:9d:22:d1:e5:af:61:eb:6d:f4:2c:83:20:ae:
                    7d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:10:B9:DB:24:26:8F:83:62:61:2C:DB:AC:B8:C6:0A:B2:26:00:0B
            X509v3 Authority Key Identifier:
                keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:42:e7:a9:47:33:88:b0:82:6b:2e:59:26:63:ea:f0:27:c5:
         64:97:20:fb:b7:2d:d2:6d:b7:68:39:d8:bc:9e:7c:24:b5:6a:
         02:74:e3:fc:d6:e9:f6:9a:c1:fd:84:a8:82:95:73:ce:7e:d6:
         80:11:49:b8:d2:25:1d:fb:55:14:17:67:f0:ec:2e:59:17:19:
         b1:c8:37:c4:48:0a:23:d0:b7:bd:4b:bb:68:ba:f2:bc:a4:bb:
         4e:ee:0c:37:9f:0d:5b:8c:a2:79:63:53:b5:ee:27:0f:c5:69:
         20:da:ed:85:c8:35:35:2e:c2:d8:f1:aa:35:b4:27:2d:d2:75:
         49:7b:04:48:b1:ef:b1:1a:88:81:d0:80:41:67:7f:fe:1c:5d:
         85:b5:dd:cf:da:bd:e1:a3:ac:30:31:d2:b2:3d:cd:76:86:21:
         78:fd:04:2f:05:77:40:8e:3b:9c:fc:06:88:43:34:97:d9:9a:
         8e:b2:88:f1:06:c0:b5:2d:f6:e1:a6:d8:99:48:b9:84:40:af:
         e1:b9:de:c6:89:29:c1:d0:81:9c:ef:ce:00:a7:fc:55:0f:58:
         48:ce:53:34:b3:c4:ac:e4:11:1f:81:5f:45:b5:c5:a8:f1:21:
         4c:cf:10:0c:76:82:6a:7c:00:cf:06:36:5a:40:4e:8f:18:9b:
         0b:65:ef:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:34:54 2024 by rpki-client on console-ams.rpki-client.org