Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File:                     hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier:          p1zQzgW64Ah+5sGo/869sln5Hp1t6Hei0A7rvYh2ccg=
Subject key identifier:   D8:9B:F4:C0:15:E7:57:31:AF:AD:9B:A4:51:A3:8D:73:FE:EB:E6:6D
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer:       /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial:       01901C6A8E55D0910498481A3904FBBEBB64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 15:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:03 +0000
Files and hashes:         1: DpCYQ_AdrJ3PXENmRN3irWstoBo.roa (hash: +CH4AcrCDAJtmJM6OBhfkjXYvp1Nx4ffXdqoJAQ1X9A=)
                          2: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: 6REUSNzYJWVtHwt3Oo96nZUhJe1tK1ZLIOduCmLZycI=)
                          3: vwS407rgk4mTtqxJ3Wsb2NZYkS8.roa (hash: YNtFwzEzetSBzEDppTjx17TTaq6el8+eLC5sCRF+AVc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:8e:55:d0:91:04:98:48:1a:39:04:fb:be:bb:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
        Validity
            Not Before: Jun 15 15:01:03 2024 GMT
            Not After : Jun 16 15:01:03 2024 GMT
        Subject: CN=d89bf4c015e75731afad9ba451a38d73feebe66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ff:41:c6:78:dc:92:16:cf:e7:90:94:ae:f2:
                    7e:53:c1:14:bd:2a:f2:88:79:e5:71:8a:8c:53:65:
                    cf:03:fc:71:db:10:d9:fb:99:b3:cd:25:21:39:c3:
                    20:5a:30:0d:47:af:80:74:16:70:7d:7b:e7:fa:20:
                    a6:b2:83:e8:b7:83:8c:aa:5d:96:cb:b1:4e:63:ad:
                    c0:ae:27:f8:1a:34:3f:92:1f:2d:cd:54:a1:e8:0c:
                    e5:77:8c:d0:77:27:67:4c:42:a1:df:8c:42:7e:07:
                    92:b9:4d:7a:e4:69:ef:01:09:eb:d7:16:24:e8:71:
                    16:2d:36:71:2a:69:8e:16:89:5e:f6:51:1a:b7:d4:
                    8a:7a:60:44:72:6f:be:58:06:69:af:81:24:2c:28:
                    8d:1c:38:a3:94:8b:d6:4a:14:d2:8c:5e:a7:f4:cc:
                    29:d3:73:50:d1:6f:64:c9:c5:b2:be:fb:fa:2f:63:
                    4a:d1:9c:df:7b:89:f7:ee:aa:f5:65:2a:62:9a:68:
                    9c:1a:7b:50:2d:75:d3:0c:5f:35:4f:54:33:23:e2:
                    6a:5c:5b:88:28:48:2d:f0:bd:0d:c5:03:15:0b:01:
                    02:be:11:b8:2a:9e:c0:5f:6f:73:ec:f4:c3:fa:4c:
                    31:2f:7a:55:6c:aa:5d:75:4b:29:a6:ab:73:44:b6:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9B:F4:C0:15:E7:57:31:AF:AD:9B:A4:51:A3:8D:73:FE:EB:E6:6D
            X509v3 Authority Key Identifier:
                keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4d:0f:ea:84:ad:b2:8d:8a:ba:0c:1f:77:96:92:98:fb:70:
         b9:da:1e:88:99:95:21:df:7f:0a:4f:27:ae:f3:7c:99:11:ca:
         e3:02:eb:85:cf:54:0c:fa:fd:52:f2:1f:a5:9c:4c:51:96:43:
         b3:80:9b:63:d8:5e:5a:a4:c3:cf:4a:fa:0b:0d:1e:27:79:3a:
         c9:09:5e:f3:f1:f6:88:94:b7:6f:97:91:39:34:4a:eb:48:2d:
         8c:86:d2:6b:6f:9b:0a:71:ff:cf:90:20:9b:23:99:c3:b5:3b:
         27:1f:14:b1:65:a7:4f:b0:6e:0f:8f:89:c8:5f:d6:55:09:86:
         77:aa:c2:cf:79:f2:17:86:db:e4:a5:e7:95:8b:1c:b8:53:ec:
         8c:de:76:f9:01:bb:bd:7a:6f:ca:d7:9e:1a:ba:30:f1:ed:51:
         41:96:d4:1c:bf:48:50:8a:ae:15:88:af:22:26:59:7a:66:ce:
         f6:9e:cd:89:83:d5:59:ce:70:ba:30:67:ce:bb:83:19:29:06:
         d2:a6:77:e1:e4:b0:40:f6:83:d8:e1:7e:a9:80:b5:33:2b:16:
         a0:c3:53:5d:4e:fd:e5:3e:24:c5:66:a1:5b:f6:e5:6e:f1:6f:
         b2:85:d6:74:05:63:1d:cc:c6:42:07:db:8a:04:9f:3e:2a:c3:
         65:ad:e3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:55:26 2024 by rpki-client on console-fra.rpki-client.org