Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
File:                     A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft (raw, json)
Hash identifier:          p5gTV3F/A/9h+SrW8bUaQd42KDNoVlyv6Cc+7xuX9DM=
Subject key identifier:   88:12:85:0D:32:BD:D8:08:1E:46:81:7F:C3:83:BC:54:EE:33:0A:CC
Authority key identifier: 03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A
Certificate issuer:       /CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
Certificate serial:       01901DEB3A3365D78E60B2B99F68BF7BD0D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
Manifest number:          1158
Signing time:             Sat 15 Jun 2024 22:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:13 +0000
Files and hashes:         1: A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl (hash: 46fdPIoNDBTZe8UxA8sokMhaza0bmhdCbbv6sofM4vE=)
                          2: DV99HR3nbeUlN7gSoJV-LhwzS8U.roa (hash: sJ7TwcmuYJ6W/MSs4PzNKMfgua5yUA9xFPpJ+lDxOns=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:3a:33:65:d7:8e:60:b2:b9:9f:68:bf:7b:d0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03a5e95abb91d64d73b9148c0aaf59b3af3f4e6a
        Validity
            Not Before: Jun 15 22:01:13 2024 GMT
            Not After : Jun 16 22:01:13 2024 GMT
        Subject: CN=8812850d32bdd8081e46817fc383bc54ee330acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d7:a8:f1:de:aa:d0:5d:65:46:2d:fe:ae:5c:
                    03:3e:ed:70:6d:e2:8c:dc:3f:c6:43:e6:1d:db:99:
                    58:f9:fd:a8:28:ad:5e:9a:2e:d2:97:94:44:86:12:
                    af:ea:00:8d:c3:e5:5f:91:3d:88:29:30:51:5d:9a:
                    ed:bd:96:94:a2:40:ed:22:a8:d6:b8:1c:2b:99:80:
                    55:be:23:9d:a0:f3:b6:98:29:7f:27:3b:81:cf:6b:
                    3c:20:5f:d7:e8:99:42:bb:ca:08:3b:a2:88:06:07:
                    64:4c:b0:6e:84:11:b8:28:8e:1f:92:63:35:c3:b9:
                    6f:0b:75:0c:6a:d6:83:bd:ef:f3:b9:91:4e:98:ca:
                    2e:6e:cc:14:8f:a8:55:64:cf:0c:cb:26:4d:4d:ca:
                    50:9d:d9:61:a9:7e:59:89:77:e7:27:2e:f8:01:bb:
                    fd:10:dd:ac:1c:2c:d7:d5:a0:84:02:84:47:db:d3:
                    7c:c1:de:16:34:42:90:3d:43:0a:7a:1e:37:b2:df:
                    2d:8d:fd:26:18:6e:f0:3c:89:fe:8a:83:c8:f3:95:
                    a4:26:86:e1:ad:ad:36:7c:23:dc:e9:64:16:aa:04:
                    88:7f:3b:7e:84:6f:6d:2f:83:2c:a4:7b:0c:90:10:
                    f7:0b:db:d7:44:cd:a3:69:eb:78:0e:21:74:3b:04:
                    82:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:12:85:0D:32:BD:D8:08:1E:46:81:7F:C3:83:BC:54:EE:33:0A:CC
            X509v3 Authority Key Identifier:
                keyid:03:A5:E9:5A:BB:91:D6:4D:73:B9:14:8C:0A:AF:59:B3:AF:3F:4E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6XpWruR1k1zuRSMCq9Zs68_Tmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5aa284-2414-4558-beb6-7d4be068c9a5/1/A6XpWruR1k1zuRSMCq9Zs68_Tmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f6:a0:c0:76:87:e1:f0:81:9e:c9:8b:ef:aa:f5:41:bc:5c:
         fc:4b:70:72:64:7c:6e:48:ed:20:e3:a0:ee:90:08:b9:0e:36:
         eb:d7:57:aa:40:6a:33:73:b4:c7:5b:b7:6d:0c:bd:63:68:31:
         33:e7:71:17:0b:1f:7d:74:8f:1d:d7:4a:a9:73:8b:17:63:d4:
         7f:43:86:7a:7d:31:7a:fe:53:34:29:59:b6:b1:76:33:73:fa:
         c1:41:b8:50:2b:20:91:73:0b:86:d7:17:f9:13:76:f6:7b:3a:
         02:71:98:cc:fd:1d:3d:04:86:a1:0b:ae:94:3d:88:b7:6b:77:
         82:e8:75:a8:bd:93:19:ee:d3:da:66:57:89:fc:a3:9c:95:8a:
         e0:5e:14:98:67:6d:71:03:1c:8c:b7:f1:a9:f9:da:85:3e:67:
         9f:3e:60:66:7a:ff:22:32:aa:de:c4:60:53:da:80:7b:32:a9:
         8e:bd:1b:c6:e6:55:21:ed:99:60:b5:14:18:14:80:c9:75:e5:
         d1:37:6a:75:21:62:71:8c:2b:6c:df:1c:8e:ee:0f:ae:1e:7d:
         be:db:c7:9c:1c:8c:50:21:26:cc:86:12:81:90:a7:9f:47:18:
         b1:b6:6d:59:b8:90:34:ed:d9:3d:bc:60:71:ce:d4:3f:24:66:
         d2:7b:9e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:37 2024 by rpki-client on console-fra.rpki-client.org