Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
File:                     usA65sVFitKAdlulUnmAoG_sI6g.mft (raw, json)
Hash identifier:          o1KiOvNmfVHROE3KJMIwz58vvcSAguA+ZcLBZFCEwkk=
Subject key identifier:   B3:0D:B1:5A:3D:4F:32:D1:0B:C9:22:14:3B:8D:3A:34:9C:3B:30:12
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Certificate issuer:       /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial:       01901E5904CC2F3732B1F04198A62DA154DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 00:01:08 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:08 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:08 +0000
Files and hashes:         1: ngqRTFATKz4xLTvnIwtA9bay5sU.roa (hash: XELDoAGk2HMzbINiiNi3ocAxI62/Eixgc7tCWzWkCh8=)
                          2: usA65sVFitKAdlulUnmAoG_sI6g.crl (hash: s3D/bwu1fr/G8Ah7w87FAJyEm6eobGnYXFisBAkxLSM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:04:cc:2f:37:32:b1:f0:41:98:a6:2d:a1:54:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
        Validity
            Not Before: Jun 16 00:01:08 2024 GMT
            Not After : Jun 17 00:01:08 2024 GMT
        Subject: CN=b30db15a3d4f32d10bc922143b8d3a349c3b3012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:52:82:05:b7:0b:87:57:f2:ac:c8:9b:da:
                    81:92:6e:9b:01:66:d4:66:e8:eb:f7:9c:96:8e:3e:
                    af:a7:f3:48:65:d3:aa:b4:a2:5d:ee:c5:0e:28:11:
                    a2:e1:66:64:ce:2f:7d:4e:71:05:15:c4:b1:0b:09:
                    89:46:8a:51:93:38:2a:49:61:42:26:87:35:31:52:
                    80:76:0c:14:15:24:4c:dd:5c:3c:9a:7b:02:28:4e:
                    ff:65:e5:85:d7:88:bf:98:58:30:11:f6:eb:79:e9:
                    a6:80:bb:56:6c:68:57:75:a8:5d:a4:7d:62:68:91:
                    10:13:e0:5c:4c:2b:73:a9:41:df:3f:3d:c8:06:68:
                    00:ce:0d:b1:ee:98:ee:86:68:63:c5:04:bb:96:72:
                    84:4b:6e:11:bf:be:c9:eb:03:23:5e:e9:6d:d7:e1:
                    5f:92:d3:9d:8c:84:23:01:f1:0d:de:2a:66:26:1a:
                    43:20:0d:4e:be:7c:2d:05:5e:0d:80:61:62:eb:ce:
                    a9:87:89:75:1a:3e:d5:07:99:bc:b3:b5:70:e9:c8:
                    c6:da:5a:04:9e:52:76:b3:51:00:fe:a5:5d:c2:97:
                    f6:20:52:c7:78:bd:cb:0b:57:e4:e6:cc:4e:50:59:
                    2e:21:b8:60:60:70:67:63:85:05:85:ef:2a:ab:bd:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0D:B1:5A:3D:4F:32:D1:0B:C9:22:14:3B:8D:3A:34:9C:3B:30:12
            X509v3 Authority Key Identifier:
                keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:b3:34:d8:0b:48:55:40:46:cb:70:c9:ae:b2:d3:c1:3d:
         66:df:03:f8:5e:65:05:e6:f2:74:17:f8:4b:10:1c:26:0b:f8:
         6f:4c:3e:c9:5a:34:7d:14:9d:da:c7:64:b4:02:94:7e:73:4f:
         04:5c:ab:81:95:1c:5f:c1:4a:28:9c:89:fb:0b:69:1e:a2:6c:
         91:ef:16:8b:5e:7b:a0:2a:8f:1c:1b:22:44:e4:5a:6f:4c:cd:
         e9:93:ce:d8:99:b7:9a:51:07:21:57:f5:f9:59:be:4b:8b:6a:
         ea:03:56:78:83:b3:ca:6b:5d:be:8d:ff:5e:72:ae:85:a1:a7:
         83:99:62:7f:e0:37:95:7e:b5:83:b2:fb:7b:40:65:f5:5e:b4:
         4b:f2:8b:20:ed:e6:f3:d6:33:8f:a6:32:05:76:39:5b:c8:c0:
         51:61:b4:22:c4:35:7d:4f:eb:fe:ed:99:4c:24:f9:f7:92:49:
         df:f8:d8:b3:d7:56:d1:69:4c:3d:ea:ea:78:d5:4a:65:c6:46:
         65:85:d7:43:0b:9d:90:c1:1d:29:05:82:e8:23:53:50:80:68:
         36:7f:60:c9:ed:48:68:29:bb:19:65:fd:de:5f:ca:19:c1:47:
         5e:70:f0:59:a3:d6:ba:2b:b2:c5:cc:7a:44:f1:22:43:8e:69:
         82:59:e9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:07:10 2024 by rpki-client on console-ams.rpki-client.org