Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
File:                     MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft (raw, json)
Hash identifier:          SLv7l3IR7rO5ohlnK4t0h0IjkGw8wjphPci7QNaiuuU=
Subject key identifier:   B4:0A:09:F1:1C:1E:F8:62:23:0E:AA:45:54:E1:16:3C:7F:EB:81:37
Authority key identifier: 32:4C:71:04:6C:54:9F:B3:C7:D4:EB:C4:CF:95:19:D0:02:E7:6D:F1
Certificate issuer:       /CN=324c71046c549fb3c7d4ebc4cf9519d002e76df1
Certificate serial:       019040AFC9490E27A5E546C7FC128E053416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
Manifest number:          06A0
Signing time:             Sat 22 Jun 2024 16:03:00 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:00 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:00 +0000
Files and hashes:         1: MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl (hash: a9TwO2Ts8Miulxyu8qOtnpvAUHaS3O6YTDGBUgalkd0=)
                          2: hKEcLd99FcBrNxe_0u5BjBJEYFQ.roa (hash: MVj3EQm6un9jRRKIs2O74+IZ5/bIeFjGBM2NKrMzZ6k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:c9:49:0e:27:a5:e5:46:c7:fc:12:8e:05:34:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324c71046c549fb3c7d4ebc4cf9519d002e76df1
        Validity
            Not Before: Jun 22 16:03:00 2024 GMT
            Not After : Jun 23 16:03:00 2024 GMT
        Subject: CN=b40a09f11c1ef862230eaa4554e1163c7feb8137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:74:fd:43:4d:3c:0c:da:62:ee:f5:3d:1f:
                    86:68:69:2f:2c:f9:0b:8c:5a:ff:30:1d:77:a7:10:
                    fc:74:83:aa:8f:00:cc:b9:69:1e:f4:1b:42:7f:cf:
                    fe:b5:57:8f:ff:df:52:9b:30:91:2f:2e:80:e7:10:
                    ba:d4:98:e2:48:85:cd:60:40:38:33:5a:9a:72:e6:
                    3c:39:f7:d9:93:d9:62:8c:0a:80:7d:46:74:2c:94:
                    3d:f5:71:7b:3a:56:c5:96:48:2d:d2:d7:89:73:84:
                    c1:76:3d:09:a0:00:b4:cf:d0:51:53:45:b0:67:e7:
                    42:6b:f0:d6:01:ad:4f:b8:b3:9b:82:cf:46:98:7d:
                    34:39:67:65:6b:99:a0:37:ae:5b:39:36:39:51:72:
                    75:7a:b4:ba:f6:5e:13:b3:53:87:be:d8:91:70:9f:
                    e8:d1:b3:26:b5:b5:1f:4b:af:41:59:76:be:37:52:
                    82:77:85:b6:b0:df:6a:0a:2a:a1:e2:be:38:68:a3:
                    af:31:3d:c6:68:87:d9:a6:7d:7c:23:e8:09:c0:a9:
                    97:25:5f:c0:d9:51:80:d2:31:17:df:e6:cc:25:48:
                    e0:4d:e2:d4:16:f1:b2:af:09:86:c4:63:a9:70:57:
                    83:96:c0:72:de:4c:ee:f3:58:f8:33:12:ba:99:f2:
                    39:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0A:09:F1:1C:1E:F8:62:23:0E:AA:45:54:E1:16:3C:7F:EB:81:37
            X509v3 Authority Key Identifier:
                keyid:32:4C:71:04:6C:54:9F:B3:C7:D4:EB:C4:CF:95:19:D0:02:E7:6D:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/125b9d-2a1f-463a-965e-7cfeaf086e14/1/MkxxBGxUn7PH1OvEz5UZ0ALnbfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:91:f8:2b:fe:37:72:b8:3f:ec:5c:c8:ec:a0:96:9e:c1:38:
         50:79:43:25:1e:4c:7d:ff:a7:60:21:43:85:23:69:2f:a5:a9:
         74:b7:16:21:21:c0:73:82:b4:8e:81:6e:15:4c:db:96:8e:fe:
         f7:8d:69:d3:76:b9:fd:85:58:14:82:c1:af:40:bd:5d:01:6f:
         67:d1:6e:c9:c3:da:83:c3:1b:00:05:8a:cc:76:5a:98:56:52:
         3b:17:11:86:a3:99:6c:19:d6:1c:62:b0:fb:57:96:cf:cd:b9:
         25:29:f9:8d:3a:a7:f1:95:f6:44:c6:ef:31:6d:b9:dc:b1:2a:
         76:8a:3b:c0:d9:16:46:58:d2:8e:c2:66:cb:b7:cf:28:c1:60:
         61:ea:1c:47:f7:8a:3f:12:96:1a:67:15:8f:e8:0d:4e:73:5f:
         8b:73:7e:6b:b9:0d:db:68:a2:93:9d:d5:c4:84:1d:58:4d:33:
         aa:2b:d4:c4:9c:eb:40:1d:92:ea:dc:ff:25:c3:06:c3:2f:80:
         cf:3e:34:f6:6a:1c:d1:0e:7b:fd:d5:39:87:07:c9:3c:69:60:
         57:18:f4:19:8f:b5:ca:1f:4a:15:30:1d:f8:07:a8:01:65:0f:
         91:48:b4:8b:65:eb:24:dd:23:47:af:4c:1b:a8:8d:7e:a2:33:
         25:fe:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:31:07 2024 by rpki-client on console-ams.rpki-client.org