Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File:                     XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier:          1tsILZznJhI9tu2aE4fVbAtL+qmM2MSXPXtva9P7yJY=
Subject key identifier:   30:38:8B:BD:13:0A:70:95:17:E4:CF:CA:1D:42:9D:BD:1D:E9:B9:32
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer:       /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial:       01901E8F8E6C94125D14CCD93EDCEB78AF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number:          0CFB
Signing time:             Sun 16 Jun 2024 01:00:42 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:42 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:42 +0000
Files and hashes:         1: 1-MoXbYkycRx6r22NvA1fC-51OOk.roa (hash: MouAziIIVf/R3lT67whdDCFw/2js2rcCU2Tv3tLWvPg=)
                          2: VNy43vtzAuGW5P07oir-v6eIzjM.roa (hash: 1l36bgIJUN9nhddRmt8INs0C9mpYu7OP6vMtcJzJRtE=)
                          3: WQuVoewDqry9NtsEbEZfiTxUzVE.roa (hash: lC0Ft8zDlfIb6kfdfNUizzAxCsjWdzL0BjsYHVwJWGE=)
                          4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: 89bL7Qv79dsZSQBmWCtgPYPqoo2YCt7zOxZMTtIf1Z8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:8e:6c:94:12:5d:14:cc:d9:3e:dc:eb:78:af:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
        Validity
            Not Before: Jun 16 01:00:42 2024 GMT
            Not After : Jun 17 01:00:42 2024 GMT
        Subject: CN=30388bbd130a709517e4cfca1d429dbd1de9b932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:51:78:26:a8:0b:d4:e2:5d:c6:6a:f5:65:
                    d7:a2:88:cc:10:3a:f2:84:10:d8:3b:cd:d8:68:52:
                    74:58:c2:14:d6:36:3f:25:b3:62:8c:12:45:ff:78:
                    96:21:8c:e6:d9:19:76:c0:17:05:c7:51:86:13:f3:
                    47:71:81:2c:c9:f4:7e:f3:b0:4e:e7:b8:7a:0f:29:
                    80:07:cb:4e:4b:c1:db:ef:51:88:31:5d:5b:ad:74:
                    01:06:d0:14:d8:ba:34:72:34:1e:68:4f:ad:e9:e2:
                    3d:ea:19:2b:d5:c9:50:01:7c:f6:82:d5:cb:30:ca:
                    33:90:2b:d6:bc:62:66:45:db:02:02:85:a2:1e:ea:
                    37:59:87:37:a9:ab:e5:5b:30:cc:02:00:ff:1f:cc:
                    84:c0:1c:50:5c:11:db:75:ce:dc:74:60:e7:e9:6a:
                    c5:7f:1c:49:1a:a2:a8:44:5b:e0:0d:9e:f0:15:e2:
                    6e:c9:3a:b1:90:a7:3e:fb:65:16:ec:8e:c6:ab:95:
                    7e:d6:41:2f:8f:3d:22:99:92:bc:01:48:cb:e7:eb:
                    82:25:80:85:0c:f6:86:0a:4c:24:1b:71:ac:16:db:
                    04:e5:9c:ad:c3:9c:20:86:48:b4:6c:15:9f:69:ca:
                    7c:82:05:25:be:c6:ef:bd:9b:4e:17:3a:27:27:58:
                    73:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:38:8B:BD:13:0A:70:95:17:E4:CF:CA:1D:42:9D:BD:1D:E9:B9:32
            X509v3 Authority Key Identifier:
                keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:3c:59:c9:64:ac:1e:e1:1b:1c:47:6e:c7:cf:03:c0:92:
         92:70:4d:0e:40:13:96:cf:da:51:ec:a2:a4:93:b3:40:8a:de:
         78:59:4a:9c:79:92:f7:8d:a8:2c:77:f8:73:6d:e3:b7:3e:a8:
         1b:e0:4e:79:34:c5:5c:95:86:10:d7:36:1d:ac:8a:ce:75:59:
         98:52:6c:6d:79:1f:6b:68:65:c0:9a:f1:47:a1:ac:c0:f2:bc:
         fe:88:54:12:66:11:1c:e3:6d:b6:3c:07:d9:e6:c1:ed:74:ea:
         98:f4:6f:1a:33:c9:a7:13:83:16:5a:42:40:1c:d0:0a:1b:15:
         b6:58:a0:1e:27:b1:4c:3b:58:a2:17:fc:66:40:39:84:a4:47:
         0c:c9:77:ac:03:69:03:ac:c1:ec:c1:c1:10:a9:5e:6d:f9:69:
         6a:a9:c0:82:73:86:4a:9c:9e:87:66:1a:1c:24:0d:de:c0:6e:
         1a:9b:73:d2:ed:88:8f:3f:c9:4b:62:93:09:e8:73:f0:73:7e:
         f1:8e:de:0e:34:da:15:d7:51:29:1b:26:75:a8:3b:5e:e8:c4:
         12:53:f2:3e:07:f1:c7:c8:27:9e:f4:1e:61:9c:27:5d:1d:13:
         fe:a8:4f:72:84:0f:98:47:1e:90:60:3c:73:57:95:0f:0a:27:
         43:a6:1d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:29:47 2024 by rpki-client on console-ams.rpki-client.org