Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File:                     aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier:          C5931R+FcOtBI8c7X74zP2MSdkakkAKb96MKqZO6rb8=
Subject key identifier:   40:B4:75:F3:71:88:28:C4:F0:38:99:25:C0:6F:9F:33:AE:CD:6B:14
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer:       /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial:       01901E8F6F434EA348C5D7C2AB63B9C9DEF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number:          0632
Signing time:             Sun 16 Jun 2024 01:00:34 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:34 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:34 +0000
Files and hashes:         1: 5z0Mdc3N7HpRWB726LUfwP0jNfs.roa (hash: Zf80PG4i3EFE4I8tKUoVZ+4U1vW1n5RSbvefWWni2ag=)
                          2: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: f0LmXh9Toj5iIdq4oeQGEcbjYlcrHcllzUtcax2A2ok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:6f:43:4e:a3:48:c5:d7:c2:ab:63:b9:c9:de:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
        Validity
            Not Before: Jun 16 01:00:34 2024 GMT
            Not After : Jun 17 01:00:34 2024 GMT
        Subject: CN=40b475f3718828c4f0389925c06f9f33aecd6b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:55:71:2a:21:de:8a:c3:a5:c5:2a:69:1a:72:
                    13:66:4d:c6:50:43:11:dc:d1:78:19:36:94:cd:2e:
                    e4:ee:82:9d:17:49:8e:98:1b:c0:24:df:fa:82:ef:
                    6a:42:67:21:f8:31:79:b2:61:b6:d8:92:08:a1:68:
                    86:58:35:8d:9a:4c:0e:ae:2e:9a:90:ee:4a:1b:b2:
                    93:a7:0e:45:61:4f:78:72:c3:d8:e1:dc:06:ac:bf:
                    13:cd:c8:e2:89:06:89:71:44:c5:ee:6b:28:83:ad:
                    ad:50:0c:2b:fe:ef:ef:f9:3e:98:c0:41:d6:81:13:
                    6d:c2:af:0e:fa:67:a0:1b:cc:74:3d:41:ed:92:29:
                    72:2c:29:12:1c:bb:bd:e4:d1:f0:47:f2:fd:e7:91:
                    52:55:76:8c:bc:2b:a8:86:99:be:85:8b:40:9c:d4:
                    e7:d9:fc:65:7d:a8:3c:2e:1c:3c:c8:95:ef:e3:7f:
                    31:c7:44:21:86:21:e5:eb:c8:a8:68:4a:e1:6c:d8:
                    61:76:11:8a:07:f6:3f:70:f2:6f:7c:7c:7a:2f:d3:
                    0d:9b:67:80:c5:19:03:d2:9f:f6:59:58:64:35:16:
                    69:05:50:03:5d:e6:8a:e7:4b:ee:0d:d4:c5:67:fd:
                    d6:21:33:46:df:73:35:d9:90:ed:a8:0a:e2:c2:fe:
                    d9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B4:75:F3:71:88:28:C4:F0:38:99:25:C0:6F:9F:33:AE:CD:6B:14
            X509v3 Authority Key Identifier:
                keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1c:9a:42:4d:25:05:4f:7a:ab:ac:42:e4:07:75:c2:ea:48:
         3c:37:67:a1:61:90:7e:f2:3a:c6:40:61:87:7f:81:c7:01:da:
         e9:1c:7f:6c:bd:be:20:9a:13:0e:a2:3a:e8:f0:3e:48:54:8c:
         a7:f4:af:97:e8:6b:6a:25:0c:b3:dc:bc:ce:f5:6f:d4:b3:98:
         28:1c:5d:19:58:15:8d:7c:fd:f3:72:4f:03:63:42:f4:12:58:
         22:8c:6d:48:d5:82:89:4f:bf:a2:5e:70:78:26:f5:28:b4:87:
         84:f7:90:4d:13:d8:61:3d:b0:da:fb:a7:32:13:89:81:dd:8e:
         a9:14:b0:ff:25:fe:f6:ab:90:39:a6:73:a9:1b:b7:f2:e0:d6:
         8f:b9:65:da:c2:6f:0a:a5:05:4f:99:4d:85:1d:19:3f:bd:3e:
         92:06:fd:b6:62:41:b6:e6:fa:26:40:59:6e:a5:ce:e9:70:e8:
         94:6c:1c:d0:39:22:41:c3:c3:da:45:ef:90:e1:79:7c:b1:df:
         da:78:84:fb:27:86:a8:9f:d1:5b:32:f6:3e:7c:53:6b:b8:2b:
         bd:38:f6:27:b5:45:44:ff:23:c5:ea:00:d5:39:79:9b:d1:d5:
         9b:70:f2:aa:b4:5b:52:72:8a:66:81:f1:2a:98:b6:bf:c3:13:
         71:9b:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:05:46 2024 by rpki-client on console-ams.rpki-client.org