Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File:                     qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier:          wr1M2FO8E7QXfVBZBSOaxDjRS+W7qobIO3SveHMZxVQ=
Subject key identifier:   03:84:75:B0:0A:37:A1:8F:D2:26:D6:46:12:95:6C:81:8A:C1:AE:9D
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer:       /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial:       01901E9009B0B0BAE2995E249E69B28D198A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number:          0704
Signing time:             Sun 16 Jun 2024 01:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:14 +0000
Files and hashes:         1: eXiF5NvVANqeqF26ZIwLrwgVEXU.roa (hash: 8GIw/Js/AhKAFTNB+JT9BrkhUEYkaxL/HQyTIOEaRb4=)
                          2: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: leJ3hT4fWulRkrl8s+6nqCQFIKivgjxAfI2hDOuRmII=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:09:b0:b0:ba:e2:99:5e:24:9e:69:b2:8d:19:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
        Validity
            Not Before: Jun 16 01:01:14 2024 GMT
            Not After : Jun 17 01:01:14 2024 GMT
        Subject: CN=038475b00a37a18fd226d64612956c818ac1ae9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:87:5a:25:97:49:ff:3c:9e:2c:cf:bc:f2:
                    2c:ab:3f:68:33:88:57:cb:b0:5e:c4:52:de:ef:52:
                    b4:4e:24:a1:0a:30:d9:a8:23:08:92:c1:7d:9a:7c:
                    e5:22:7c:36:cd:12:d3:ba:b4:04:9f:4f:e5:58:f4:
                    ae:a5:b1:45:eb:15:3a:fb:17:e3:a3:c8:b4:19:98:
                    44:94:ac:1d:36:95:54:46:d4:80:22:cd:f2:9c:7c:
                    e1:98:c8:d1:f3:08:e4:4d:0a:93:6e:ed:d5:1b:cd:
                    05:f7:ad:77:c1:0d:fd:da:7a:32:92:f4:b9:20:41:
                    62:f5:da:8e:c6:f9:c8:76:b8:63:91:1b:1e:32:d8:
                    81:0a:fd:4b:a6:c3:f3:6d:c4:8e:28:18:43:83:75:
                    48:37:43:f2:a2:ca:3d:12:1b:35:90:0d:e7:4a:99:
                    d3:51:81:76:0e:ea:e3:54:44:5a:5d:54:79:79:fc:
                    96:63:41:2a:90:95:3d:2f:69:7f:82:dd:b6:7e:70:
                    c6:68:c3:ee:f0:43:7c:40:7c:b3:89:f1:cf:44:9b:
                    38:2b:c6:f5:9d:cc:2f:98:d2:ec:d8:e6:e9:a3:5e:
                    ec:81:ba:4a:66:f1:db:2f:0b:dc:77:d8:52:35:2e:
                    c1:99:34:b7:3d:ab:4f:05:b6:46:c2:ca:a6:23:02:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:84:75:B0:0A:37:A1:8F:D2:26:D6:46:12:95:6C:81:8A:C1:AE:9D
            X509v3 Authority Key Identifier:
                keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b9:62:01:0e:c8:77:4f:64:18:5e:69:bf:9b:14:82:e0:c4:
         3a:23:49:a3:0a:15:4e:48:d4:5c:f6:4f:1f:3a:5f:71:46:1b:
         65:00:66:4c:5a:d3:fb:18:de:36:22:53:8b:9d:d1:d7:e1:05:
         59:ac:cb:9b:8e:27:c9:f6:8a:dd:54:65:a8:33:e4:39:7e:3c:
         b5:f8:03:d5:61:e9:64:04:84:1c:28:b6:8c:72:0e:e4:14:ad:
         cc:dc:c4:2d:19:73:1e:f4:58:56:1e:78:b3:f1:04:dd:5f:35:
         19:03:f4:de:c7:d1:1a:2c:23:2a:f1:53:4c:9d:bd:63:c7:23:
         08:bc:ae:58:a7:b7:9f:4f:32:6c:79:ca:ee:75:f5:60:94:0f:
         fa:ad:13:27:b9:c3:71:5e:1c:98:c3:c4:72:52:c5:36:07:5b:
         c8:a8:7e:b3:fa:b7:09:6c:f1:b7:d3:83:c8:37:22:6e:ec:74:
         31:45:a6:2c:75:67:4d:85:91:f8:27:e8:1c:b9:4a:1c:eb:a8:
         7e:f7:33:5d:6d:89:7a:26:1d:ff:10:2f:cc:67:4a:e2:98:48:
         58:ff:80:12:d2:a2:1b:4b:9c:72:5e:9a:f1:57:a5:c2:f4:09:
         40:40:34:a6:e8:f1:60:29:cd:73:01:e8:b2:1f:52:5a:4b:aa:
         f3:b9:f0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:33 2024 by rpki-client on console-fra.rpki-client.org