Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File:                     CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier:          baGhSqqJryQA04OgjPUJAV3YQIGtIg5nOp8qJu6vyGo=
Subject key identifier:   E7:1A:F7:20:03:82:47:73:2E:72:D8:67:14:C9:98:C2:AB:D0:96:A0
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer:       /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial:       01901CA1D7015170E7486F250D03F49B4CE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number:          0F52
Signing time:             Sat 15 Jun 2024 16:01:26 +0000
Manifest this update:     Sat 15 Jun 2024 16:01:26 +0000
Manifest next update:     Sun 16 Jun 2024 16:01:26 +0000
Files and hashes:         1: 3tE4zvO6gSzyLMFF4MXXoASLpA4.roa (hash: 3E9RDxc5PYhWnlQIdofpIArxZ74CR9sxdpQ9kRbZ6aQ=)
                          2: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: Sv/1d4F1nekp0uLCIrIXK0TdJYVXIkmkOh5dDcB5to0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:d7:01:51:70:e7:48:6f:25:0d:03:f4:9b:4c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
        Validity
            Not Before: Jun 15 16:01:26 2024 GMT
            Not After : Jun 16 16:01:26 2024 GMT
        Subject: CN=e71af720038247732e72d86714c998c2abd096a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:73:84:ac:d0:05:c1:3d:5a:12:49:ea:fd:
                    77:b4:90:2c:3f:f7:ef:bd:d2:c4:82:ae:c6:9a:14:
                    85:8d:a7:7e:53:d5:ae:e7:c4:28:a1:21:48:90:8a:
                    2b:3d:d2:21:ac:2e:67:97:2f:52:bf:3a:81:f1:f7:
                    3f:fe:50:59:0f:56:41:6f:85:c4:53:56:04:08:18:
                    a0:3f:c5:fc:e8:52:5c:0b:07:38:9f:0a:70:bd:a7:
                    d1:f1:71:52:c9:f3:3e:b0:f4:19:fe:5d:82:eb:a6:
                    d7:3e:89:28:fe:7a:11:fd:01:f7:9c:53:a5:37:e3:
                    1b:80:7e:05:b3:c9:ed:db:04:8c:b2:10:b5:7c:bf:
                    57:44:49:8b:f8:24:81:9f:69:ea:3e:bb:8b:38:6b:
                    87:98:c7:84:32:0b:4c:86:36:e5:2c:8e:b7:1d:6a:
                    4e:f8:72:32:a9:56:f1:60:be:64:c5:57:5c:1b:b9:
                    d4:f1:4d:bc:5f:ee:fe:86:65:5b:f1:f9:7e:f7:db:
                    dd:fb:3d:46:87:2b:ec:5e:30:93:ae:a9:6e:35:8d:
                    38:b7:8b:bf:2f:8b:36:0f:81:8f:1e:f2:c4:a0:36:
                    88:29:2d:cb:b2:e2:51:d9:3e:23:99:82:8e:6e:88:
                    52:56:30:50:57:04:61:07:9d:f4:e6:9e:18:1b:1a:
                    33:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1A:F7:20:03:82:47:73:2E:72:D8:67:14:C9:98:C2:AB:D0:96:A0
            X509v3 Authority Key Identifier:
                keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:a4:ad:09:44:42:ac:0e:1a:80:0a:a0:1a:98:10:60:c5:4e:
         ba:34:a9:e2:7b:7c:92:bb:31:d6:d4:1a:c0:15:39:bd:4d:26:
         8e:43:b6:78:70:ac:6d:bb:78:a5:44:ee:2c:fc:29:93:e8:db:
         5e:2a:26:5e:83:c0:03:0c:16:b3:1d:e0:6c:65:2d:49:37:46:
         c4:a2:44:61:8e:2b:91:7d:19:e5:3c:6c:c2:8a:87:a1:f3:52:
         a8:4d:db:1d:05:dd:f4:47:b9:15:dd:2d:6e:11:d6:54:78:82:
         8e:64:c0:9f:d6:46:92:22:cb:c2:93:5b:13:92:94:41:f1:45:
         c0:3f:d7:d2:82:b6:6f:87:4a:42:3d:7a:9d:3e:8d:fd:3e:ab:
         cb:35:e8:f1:08:0d:44:fb:e6:6c:80:97:49:ee:b3:7d:f4:b4:
         84:8a:5d:c5:e3:f2:69:ba:d4:d5:8a:32:89:34:8e:6f:f4:1c:
         84:9e:3b:08:6f:aa:2e:9a:9a:d8:64:f1:a2:39:69:d4:92:d0:
         79:74:39:2f:ec:08:10:ed:c2:74:a8:23:bb:8c:67:5b:e3:c2:
         30:c5:75:7d:e3:04:99:ff:25:15:d3:6f:b4:77:8c:0b:a1:8d:
         db:a2:95:09:82:f2:bf:85:2c:73:ae:a7:70:44:8b:f5:4e:03:
         b5:b2:b7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:06:30 2024 by rpki-client on console-ams.rpki-client.org