Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File:                     XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier:          Xbv+8R1EPEtxYuLyUZsBeqUYit2YIWvSHKGyNv5QQno=
Subject key identifier:   B2:9D:5D:33:5D:84:89:3D:95:E9:08:E4:54:C4:CA:F9:EF:05:74:82
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer:       /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial:       01901EFDEA2872F178DB03A4196CD900E052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number:          04E8
Signing time:             Sun 16 Jun 2024 03:01:15 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:15 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:15 +0000
Files and hashes:         1: DVvfsN-btBZU3BRetUvEV7nj7s8.roa (hash: P94DxJduTWXof5L1Lev9v+3fTkEAd+CnU/B2mfTZgKE=)
                          2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: X9YDCodlucnWzP/kOAT/KkweDHdWItSqMgbMMB9443A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:ea:28:72:f1:78:db:03:a4:19:6c:d9:00:e0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
        Validity
            Not Before: Jun 16 03:01:15 2024 GMT
            Not After : Jun 17 03:01:15 2024 GMT
        Subject: CN=b29d5d335d84893d95e908e454c4caf9ef057482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:8c:ce:ba:2b:3b:f3:d9:e6:e9:db:df:a1:
                    09:24:b0:65:d3:53:d9:a7:d3:1a:cb:95:0c:4e:20:
                    a5:2a:f3:e5:7b:0b:a7:83:24:f0:79:73:54:98:93:
                    e8:d5:17:ac:11:81:a3:97:77:82:42:9c:91:9e:32:
                    4f:19:93:31:22:50:2e:71:60:c7:32:54:61:6d:41:
                    4b:ef:cc:f9:65:de:f2:2d:b3:07:1b:32:55:ca:a4:
                    2c:a4:9b:0b:c9:05:4e:d7:a2:55:c2:ce:fd:5a:09:
                    ce:61:f3:9c:32:72:4b:5a:50:d0:9a:33:e5:9e:00:
                    1f:7a:30:b5:90:a5:9b:0a:6f:29:01:cd:2f:6f:42:
                    5b:55:a7:d8:9a:49:fc:f1:60:c0:6c:10:1f:30:4d:
                    bf:9d:b5:e2:9d:8a:b4:a6:af:8b:0c:fb:95:bd:d3:
                    83:f2:9d:ca:5f:c3:9c:63:ec:21:ce:1c:83:25:d2:
                    d0:3c:d6:c4:24:be:6a:e1:aa:91:86:b7:32:2c:8c:
                    8a:d0:87:02:06:36:4c:06:d1:88:0a:db:74:73:58:
                    f3:23:43:6b:27:99:65:8a:2e:a6:36:79:43:73:1f:
                    26:ac:34:3c:4b:a0:dc:0a:f2:30:f5:78:42:c2:e6:
                    7f:4c:f3:11:11:47:27:5c:32:c5:e5:b4:b8:b1:00:
                    70:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9D:5D:33:5D:84:89:3D:95:E9:08:E4:54:C4:CA:F9:EF:05:74:82
            X509v3 Authority Key Identifier:
                keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5d:3f:d2:1e:0d:33:bd:0d:f0:34:60:37:13:ff:43:f2:d3:
         e8:32:45:cc:3e:8d:fe:4d:d8:ac:4f:ee:49:8f:b7:65:c7:04:
         17:d5:2d:ca:87:38:33:45:6d:f4:09:c9:be:92:fa:80:78:0e:
         ae:ed:98:49:ec:c4:d0:e6:26:99:50:73:9d:7b:ed:cd:b8:aa:
         f4:7f:db:a7:1b:62:69:c9:7b:26:93:b5:a4:df:d0:c0:16:e8:
         93:e2:51:9f:12:e0:0a:58:df:0e:01:d1:26:16:11:5d:c1:68:
         1d:f1:28:f3:bb:eb:9e:4a:b4:c9:c2:52:ec:6f:07:88:d6:00:
         57:83:12:aa:5a:66:1f:47:58:24:a2:e2:78:ee:af:9b:6a:c9:
         3e:4d:dd:f8:72:41:61:31:bf:63:9e:2c:3c:44:3e:de:78:36:
         22:39:4a:ff:95:85:a4:40:d5:28:f8:52:df:22:c9:84:12:f9:
         b6:13:b6:25:51:64:b2:5d:4a:e1:fa:43:28:31:c6:96:fb:5c:
         8f:ee:be:07:24:77:6f:93:7c:0c:76:2c:d1:06:5c:13:d0:6f:
         13:32:3a:15:01:b3:c3:fb:23:36:f0:73:ac:dd:67:f8:16:e6:
         32:02:90:ad:db:e8:f7:74:00:3d:fe:60:fc:1d:ae:24:04:c5:
         0d:c5:92:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:33:37 2024 by rpki-client on console-ams.rpki-client.org