Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
File:                     P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json)
Hash identifier:          DwLwYmn6DAMuerU9jb6o56PVhEbjfZ+HI5b4G2166sw=
Subject key identifier:   B0:3E:5A:A9:44:2E:4E:73:E5:2B:26:99:64:4F:41:DB:CE:CE:09:39
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Certificate issuer:       /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial:       01901DED3C0E62FD3248C0BFC3421C66D926
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:03:25 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:25 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:25 +0000
Files and hashes:         1: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: uiu3PMNB2fAXH/if538ADbuucu2zITTvCHzUarD3SBY=)
                          2: T5RTRdlsyKxw-dkPhgesI4422Sw.roa (hash: k10Z7HSk0cdZquKf1POAL7mEfa7RwaGHLLIUinifABU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:3c:0e:62:fd:32:48:c0:bf:c3:42:1c:66:d9:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
        Validity
            Not Before: Jun 15 22:03:25 2024 GMT
            Not After : Jun 16 22:03:25 2024 GMT
        Subject: CN=b03e5aa9442e4e73e52b2699644f41dbcece0939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e6:3b:33:a6:e3:50:f7:e2:8a:0a:bd:b6:84:
                    fd:4b:71:8c:a3:cd:26:7b:39:e0:b2:8c:86:d7:cb:
                    84:b7:d3:a5:ad:c3:6f:54:a5:e5:a6:aa:f7:0c:e9:
                    96:4b:08:f5:0f:d3:9f:80:a8:eb:7c:68:06:e1:e3:
                    22:5b:ab:a8:8e:14:6a:cb:07:3e:45:b9:06:b3:67:
                    08:78:16:c4:72:60:d4:1f:67:0a:50:b0:55:55:e1:
                    df:ca:be:7f:49:48:c1:64:fb:bb:1e:18:75:95:aa:
                    21:32:05:21:96:5e:fb:99:6e:b6:e1:ad:92:32:60:
                    ac:f1:41:15:fb:41:e8:ad:02:92:5d:98:09:31:65:
                    d8:b2:b5:52:d4:96:b1:83:26:9e:e1:cd:a6:49:17:
                    0a:95:e6:14:de:06:d3:a3:1a:a4:4d:60:b0:d3:51:
                    34:54:e6:bb:15:b1:02:46:50:76:3e:e4:f5:1f:f2:
                    a3:5f:7d:8d:cb:43:f8:cf:d6:ee:d4:cf:0f:7f:8e:
                    b0:13:03:4e:ef:80:ed:55:0c:b0:41:69:18:a7:42:
                    8c:7b:81:df:e7:a6:ed:4d:d2:68:ae:27:95:01:cb:
                    be:29:44:c8:37:3f:b1:0c:88:90:e0:34:a8:f3:32:
                    fb:0d:3a:73:6a:28:a2:67:bf:65:41:51:ab:89:6d:
                    d4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3E:5A:A9:44:2E:4E:73:E5:2B:26:99:64:4F:41:DB:CE:CE:09:39
            X509v3 Authority Key Identifier:
                keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:05:7e:b5:46:ca:38:20:b3:e5:e5:22:fc:e4:7d:a4:bc:
         15:a5:8e:0b:d8:70:21:86:ea:b6:6b:f2:f9:b0:c3:0e:a9:a6:
         32:37:3d:64:f4:e5:10:a7:b4:10:93:5e:73:68:ed:1e:72:ac:
         2b:99:11:25:ab:88:20:18:06:9a:be:61:6c:38:47:fd:f0:f9:
         99:70:b4:d3:c4:14:f6:65:1f:5d:1d:33:8e:0b:e3:60:29:d3:
         44:08:ae:b1:38:ab:2f:ab:d6:68:24:1a:4b:5b:f1:1e:62:28:
         71:8a:51:23:fa:af:55:04:77:1e:86:60:28:97:f0:80:93:b4:
         6f:06:99:1e:2d:65:af:42:3d:1f:6c:19:93:88:cc:e4:e6:d6:
         49:90:0e:0a:a9:13:aa:3f:fb:ad:a6:23:da:8d:1c:37:f5:fa:
         d0:63:d8:d6:42:78:6d:3b:5b:a3:2f:64:33:6d:cf:3b:3b:d0:
         2f:cd:68:a7:bb:16:2e:03:39:88:0e:05:a7:10:9c:7f:ca:1d:
         a9:22:03:5b:e7:30:83:82:96:24:18:e7:64:93:f4:53:09:eb:
         9b:60:00:e6:58:e8:02:5c:1c:98:0a:42:05:36:e8:f6:a0:f3:
         aa:af:15:f9:b2:6e:c2:f5:6e:a7:42:bc:ee:f3:17:5a:7a:e8:
         80:5a:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:04:12 2024 by rpki-client on console-fra.rpki-client.org