Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
File:                     MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft (raw, json)
Hash identifier:          ENWAsE7FkDfqE83OjjZ0Lg8In+ay3Gx+H8wPKVO2txA=
Subject key identifier:   8D:9D:CF:13:CC:25:06:08:3A:E0:65:21:CE:93:5D:62:A4:3D:DB:2D
Authority key identifier: 32:4C:71:04:6C:54:9F:B3:C7:D4:EB:C4:CF:95:19:D0:02:E7:6D:F1
Certificate issuer:       /CN=324c71046c549fb3c7d4ebc4cf9519d002e76df1
Certificate serial:       01901DEBF0434188154C5A4A40D1C93ABF85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
Manifest number:          068E
Signing time:             Sat 15 Jun 2024 22:02:00 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:00 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:00 +0000
Files and hashes:         1: MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl (hash: FvB1SInW6gEB17E6TKhN4cj3BYCAvShG8j0nsoJ+ksU=)
                          2: hKEcLd99FcBrNxe_0u5BjBJEYFQ.roa (hash: MVj3EQm6un9jRRKIs2O74+IZ5/bIeFjGBM2NKrMzZ6k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:f0:43:41:88:15:4c:5a:4a:40:d1:c9:3a:bf:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324c71046c549fb3c7d4ebc4cf9519d002e76df1
        Validity
            Not Before: Jun 15 22:02:00 2024 GMT
            Not After : Jun 16 22:02:00 2024 GMT
        Subject: CN=8d9dcf13cc2506083ae06521ce935d62a43ddb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:c7:68:fc:b8:1d:64:cc:45:2b:d7:3f:e1:
                    af:69:ad:13:3d:b2:a7:58:87:62:92:be:0a:af:e0:
                    dc:c6:76:b1:ad:60:8f:9f:59:55:9d:60:10:7a:bc:
                    f7:3d:15:88:7a:f7:0f:7a:f4:f6:58:65:b1:b4:83:
                    f7:7c:71:c3:23:f3:56:7e:f6:ad:cb:ee:c4:f6:79:
                    33:47:2e:a2:7a:85:48:76:49:07:63:e2:08:65:18:
                    6f:e6:69:db:d1:fa:59:5c:77:b9:d7:69:d6:79:14:
                    cb:3d:b6:d4:ae:12:65:20:25:de:1a:29:d8:4a:f6:
                    f0:69:2c:b3:43:62:60:90:c2:ea:fe:bc:69:da:63:
                    f1:40:da:6f:cb:22:eb:05:2d:50:bf:d7:ba:3b:df:
                    7b:15:74:54:e1:ab:cb:4c:7c:45:77:de:1b:0a:28:
                    7b:65:cc:0c:64:19:96:30:34:53:32:8b:ef:90:d3:
                    29:74:e0:2a:30:f0:71:1e:83:3a:f4:42:79:20:ab:
                    ca:04:19:52:be:72:b6:1c:66:b6:4e:e2:66:e4:a8:
                    43:11:28:b4:ff:98:8d:6a:89:24:a4:b8:6d:a1:f0:
                    ce:0d:ae:91:7a:75:ce:ab:0e:83:69:15:40:3d:19:
                    1a:94:44:dd:92:07:cc:85:a2:43:00:c0:d9:0b:8b:
                    77:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9D:CF:13:CC:25:06:08:3A:E0:65:21:CE:93:5D:62:A4:3D:DB:2D
            X509v3 Authority Key Identifier:
                keyid:32:4C:71:04:6C:54:9F:B3:C7:D4:EB:C4:CF:95:19:D0:02:E7:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:12:41:bd:5d:17:4d:48:bd:a6:0a:19:d8:29:1f:4e:ff:60:
         c2:88:1a:90:3c:f9:1b:0c:0f:27:28:64:fb:c7:2e:4a:66:6f:
         94:c8:03:3d:53:38:7c:4a:a7:eb:b8:05:fd:3d:de:5b:bb:60:
         19:ee:fc:91:cc:a8:ac:72:a4:cf:85:3f:a0:81:30:b9:14:d2:
         88:ff:10:0d:12:90:fe:13:8d:a6:67:f6:d4:39:b5:ac:e8:da:
         1d:0a:3f:86:26:c8:5c:92:06:81:cd:fc:95:b9:58:88:18:80:
         5c:10:b5:29:b7:8e:44:ca:86:7b:22:28:b3:d0:2f:f7:71:19:
         99:1e:98:70:8d:8a:00:22:86:45:0c:24:48:36:ed:f0:02:d4:
         60:9b:df:e1:a3:cd:9a:d0:46:07:a8:ae:e5:d3:aa:d3:bc:97:
         c3:0f:58:32:3c:b9:8b:a6:42:25:51:26:24:c7:a6:12:7a:69:
         29:2e:40:3b:0d:9b:37:d0:64:20:fb:fe:a9:43:56:f5:84:ee:
         4d:8e:cb:f1:0f:af:9a:d8:47:dd:3b:ea:0b:3b:fc:10:58:65:
         e6:3e:6d:f8:27:fd:a6:e3:e2:d1:26:fe:a0:bc:f4:68:e9:ae:
         1d:2d:06:0a:a2:46:07:8b:3a:50:bf:b0:60:e7:1f:df:a0:ee:
         ca:3b:ad:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:37:12 2024 by rpki-client on console-ams.rpki-client.org