Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
File:                     pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json)
Hash identifier:          Zy2Ah9ZVPQexm4fLihdt6HToGIFLoRIsPRhLK0f4DEo=
Subject key identifier:   17:4E:57:5D:9D:08:44:28:A7:48:72:63:B3:82:0B:0C:26:F6:7A:F6
Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Certificate issuer:       /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Certificate serial:       01901BFD5267BF2C238754C8012BA41C3FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
Manifest number:          0813
Signing time:             Sat 15 Jun 2024 13:01:44 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:44 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:44 +0000
Files and hashes:         1: LZJEHbKL_SqRndT4DSHOsWJ5K70.roa (hash: Lvu9fV08eqS0IELcm3umw5xzHsRXh4moV0oB8qvWeDA=)
                          2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: XBJAkGao5Dl9eUVdb5DF8eH/vaXZ5BJGqIXzeMCkfNM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:52:67:bf:2c:23:87:54:c8:01:2b:a4:1c:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
        Validity
            Not Before: Jun 15 13:01:44 2024 GMT
            Not After : Jun 16 13:01:44 2024 GMT
        Subject: CN=174e575d9d084428a7487263b3820b0c26f67af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f0:ac:e8:f7:94:77:66:24:0f:b6:d8:7e:fd:
                    38:79:a7:ed:ba:b0:cf:9c:63:95:c6:7b:90:d7:b9:
                    09:0c:72:5d:3d:58:92:eb:12:12:3c:99:3c:b6:68:
                    d5:4c:d8:9f:b7:96:39:38:87:a5:79:d0:5e:6b:80:
                    db:45:11:5f:9e:c3:d5:7d:72:74:ce:87:f7:68:aa:
                    de:34:c3:1d:5d:4f:05:3b:32:d9:5b:64:01:0a:be:
                    ba:9f:62:ba:a3:26:ed:a7:e3:9c:1e:a8:94:a3:80:
                    f5:61:73:44:fb:42:e0:94:4a:ce:27:eb:f2:d1:27:
                    64:c4:df:43:84:f5:82:27:ae:88:b3:73:85:84:d6:
                    28:fa:8f:e3:ee:8f:46:d5:40:16:7e:7a:2c:fe:6e:
                    02:51:c6:ea:b5:e5:b6:fd:b1:2d:3a:60:f2:88:37:
                    a6:bb:38:55:7d:31:e2:0b:51:0b:bb:cd:a5:d2:88:
                    73:ba:a4:e2:93:35:82:6f:2e:e1:f9:b2:0c:e5:94:
                    a0:1d:50:fe:08:9a:ce:24:0d:44:3e:c4:78:71:84:
                    bc:a1:52:27:02:33:99:67:4b:57:6e:5c:0f:59:b4:
                    27:6b:32:5f:d8:ef:77:b2:ba:dc:07:a3:c9:4e:45:
                    85:4a:9a:eb:ba:64:37:71:52:28:be:fa:4d:a2:1a:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4E:57:5D:9D:08:44:28:A7:48:72:63:B3:82:0B:0C:26:F6:7A:F6
            X509v3 Authority Key Identifier:
                keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0a:2b:1d:72:67:2d:51:76:70:3c:52:3b:af:29:7f:74:72:
         38:fa:ca:0c:d6:d2:a4:ca:63:a5:d1:7a:7f:4f:b7:84:35:43:
         82:b1:f6:ae:09:47:82:ca:fc:ea:ae:2a:b1:73:8d:44:a1:2a:
         24:bc:a2:30:2b:f3:da:49:5f:e9:69:37:06:9d:07:6f:1a:33:
         f2:90:45:71:48:1a:63:d8:db:f7:72:ac:f1:80:8a:ab:aa:28:
         0a:a8:21:97:07:23:94:42:4a:0d:02:3b:05:10:ac:89:44:55:
         2e:af:63:5c:a3:d7:ac:81:54:25:55:5a:12:5c:5d:9a:98:52:
         18:c0:81:e6:a9:a7:8f:b0:1c:c8:bc:75:95:41:8f:07:8f:54:
         48:aa:43:cc:a1:ea:81:3c:1c:3c:fe:3c:29:7d:55:14:6c:01:
         5d:b0:0c:20:fe:fc:8b:56:9c:4b:f6:77:52:17:11:b3:73:b1:
         5e:26:0b:59:07:10:ab:c3:f6:4a:d7:de:19:10:a8:1a:c9:d7:
         e5:ed:11:69:5a:e3:dc:29:cf:e9:ec:76:dd:02:7d:ac:2f:76:
         55:54:66:ad:bf:d2:8a:b2:a7:90:c4:55:68:37:87:55:43:be:
         9f:7d:18:de:f6:d0:19:6c:49:3b:13:eb:3f:c4:96:b9:00:0b:
         1a:66:63:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:37:00 2024 by rpki-client on console-ams.rpki-client.org