Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File:                     xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier:          xJmlQ+iC5h7NZPNjLurlGcLllnEutZJM7IFGiGiRzpQ=
Subject key identifier:   05:51:DC:23:23:F8:1E:01:CE:2B:6D:E7:06:E0:DA:02:6A:B7:A2:24
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer:       /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial:       019041C0E8C4B7A733ED74F114BAB5C21551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number:          11D9
Signing time:             Sat 22 Jun 2024 21:01:19 +0000
Manifest this update:     Sat 22 Jun 2024 21:01:19 +0000
Manifest next update:     Sun 23 Jun 2024 21:01:19 +0000
Files and hashes:         1: d98Fz-stE9kgCe0dVWTwZguI0Qg.roa (hash: QsOo7VDOl7r+fNK1r87Gr9x21ZhoOpl619/vMHT1ZiM=)
                          2: mJtJLlV8EmizpA2GCxJKoVPjoYY.roa (hash: Ry5V+A1V4BRKw3xwagFdQ0o7coHlJ3w+5VUzOLki8b8=)
                          3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: o3J6XUhZK3FyvKS6Gbs6ZPS4Q9rFVdYj+rE5A4Immb4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:e8:c4:b7:a7:33:ed:74:f1:14:ba:b5:c2:15:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
        Validity
            Not Before: Jun 22 21:01:19 2024 GMT
            Not After : Jun 23 21:01:19 2024 GMT
        Subject: CN=0551dc2323f81e01ce2b6de706e0da026ab7a224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e5:8f:a4:fe:02:98:f3:72:7e:8e:5b:03:89:
                    3f:0b:b6:a5:28:51:c6:7a:ed:7e:89:cf:a0:5c:81:
                    d8:b9:fa:d4:9d:ea:22:7b:5b:f4:2e:be:ed:bf:58:
                    f0:72:0d:d1:ee:9c:2d:80:19:d1:de:95:0f:52:6b:
                    04:61:01:b4:df:0c:d8:4a:a1:9a:a7:f1:cb:db:32:
                    7a:26:d4:64:d4:4a:6a:5a:23:98:ca:77:0b:4c:3e:
                    f5:36:e2:dd:9d:94:f1:28:27:43:b4:35:0a:a1:1f:
                    62:f9:03:7e:aa:97:11:fd:55:b6:74:37:d6:7b:79:
                    e8:38:a1:e4:d4:81:7a:32:68:41:c2:44:cb:d0:db:
                    1e:56:37:5e:88:45:1e:1f:86:01:a4:f2:c4:ab:44:
                    b9:93:f6:b4:19:34:20:65:18:16:74:4a:61:54:75:
                    90:61:11:83:f0:a1:9f:32:fb:ce:c9:d7:c1:71:84:
                    0a:cc:8d:d9:f1:d9:29:5a:7c:11:62:d8:92:7e:f7:
                    b9:cd:ec:6d:e2:75:a5:4f:6e:b1:ed:ab:63:02:6b:
                    7f:c4:46:0f:b8:9e:36:62:61:c0:fa:c6:24:a7:79:
                    fe:a5:04:fe:3a:80:e0:ef:92:ee:b4:6c:26:7c:20:
                    45:51:99:7d:51:4e:2b:58:6e:71:3f:cd:59:56:41:
                    86:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:51:DC:23:23:F8:1E:01:CE:2B:6D:E7:06:E0:DA:02:6A:B7:A2:24
            X509v3 Authority Key Identifier:
                keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:f6:1d:30:e7:f3:00:44:82:b4:07:4c:bc:7c:e6:5a:5e:d5:
         8a:cb:a1:1d:7d:e8:f6:24:99:a0:bd:31:73:8d:d9:7f:2b:62:
         01:aa:45:61:e0:24:da:4d:1c:c3:36:2f:d8:b1:b5:ea:d3:0e:
         58:46:cc:df:f7:32:57:db:68:8c:aa:0d:5c:a2:4f:91:ee:cb:
         94:fe:4c:d7:69:d6:8b:48:06:55:53:18:b7:88:b4:a4:67:10:
         18:5f:9e:1d:9c:88:91:7b:b8:9a:a0:3c:a2:36:30:10:24:83:
         80:84:44:1b:54:ed:8e:2c:ec:6b:eb:07:00:2d:06:a5:fb:f7:
         20:f9:95:39:59:20:02:c3:f6:b6:d6:94:59:77:fe:4e:dc:d7:
         75:54:4e:28:4d:04:26:d0:b0:63:92:dd:2d:de:f3:0c:f3:6b:
         23:cb:81:af:66:b7:76:ba:d2:08:19:a0:8a:9b:4f:2c:68:d9:
         63:7a:cb:e7:2f:a3:be:94:92:72:cb:37:99:3c:5e:e2:75:9a:
         db:ff:eb:71:00:cf:05:18:55:f6:6b:46:b4:2f:5c:72:d6:e1:
         81:82:3a:be:ae:a6:c5:d5:9c:2d:44:24:1f:e7:29:08:1c:bf:
         90:5c:e6:a6:47:2c:1c:9d:ed:c0:8a:c4:0e:41:d4:be:33:de:
         28:b1:a7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:36:43 2024 by rpki-client on console-ams.rpki-client.org