Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
File:                     vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft (raw, json)
Hash identifier:          XbtUNXhBFNM88H05IH33sUXIYARTc30x6zt8/5zdjws=
Subject key identifier:   54:5D:9D:55:DA:71:A9:39:93:B2:27:3E:89:A4:AA:DA:50:26:6F:2F
Authority key identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
Certificate issuer:       /CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Certificate serial:       01901D0F7814BB9237F45A59DDE0CBAD5DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
Manifest number:          0BAF
Signing time:             Sat 15 Jun 2024 18:01:11 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:11 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:11 +0000
Files and hashes:         1: PoBATvjikXbPG7MY-iHyPnUJJKE.roa (hash: 4lPGCeP+Q+1wZbo1SgRdmNURSojkiwr4EIJB4elhDrI=)
                          2: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl (hash: 9YXPdZ/aOtNkJ+0zeL4zLMqo9MvKy7bZlIk3RHGb++o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:78:14:bb:92:37:f4:5a:59:dd:e0:cb:ad:5d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
        Validity
            Not Before: Jun 15 18:01:11 2024 GMT
            Not After : Jun 16 18:01:11 2024 GMT
        Subject: CN=545d9d55da71a93993b2273e89a4aada50266f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:b9:f7:62:8b:2a:c1:8b:b4:15:ae:ff:59:
                    3c:c0:f0:07:d7:8e:27:1a:09:ca:48:49:f6:07:ac:
                    2f:6f:93:11:88:f1:58:c5:65:b3:0a:06:59:e8:20:
                    9b:2b:81:63:fa:a2:40:74:c3:e7:89:b8:06:ff:93:
                    9a:d3:1a:f4:6a:84:74:a0:cc:47:26:16:1c:ad:ec:
                    d4:03:80:f8:9e:b3:79:0e:b6:e8:dd:ba:0f:d4:e9:
                    8d:cc:21:e9:7d:52:5a:00:ed:db:47:62:6a:d0:1e:
                    eb:d1:9b:bb:7f:a6:c5:7c:8e:63:99:41:c6:9f:7f:
                    27:5b:2f:7d:a7:36:ee:64:b4:47:b9:20:eb:ce:a3:
                    77:1d:e4:f0:92:58:54:2a:5d:e2:28:50:a3:5b:09:
                    c7:e3:ac:34:97:da:1e:82:c4:bb:22:bf:e8:44:ed:
                    5b:32:0a:8c:4c:f1:28:95:23:da:0c:ab:5f:53:c6:
                    e7:cd:15:a9:04:c3:30:57:5b:e7:d1:c4:33:21:70:
                    6e:ff:ec:3b:b3:35:9a:df:a6:24:25:aa:92:9b:03:
                    7f:a9:a2:23:e8:ac:e3:2e:a9:aa:85:aa:73:2e:5f:
                    53:53:14:ce:8a:76:bb:d1:26:48:dc:4e:f4:de:8a:
                    a2:01:5f:d9:41:f8:2e:d2:52:1f:83:4a:08:14:0d:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5D:9D:55:DA:71:A9:39:93:B2:27:3E:89:A4:AA:DA:50:26:6F:2F
            X509v3 Authority Key Identifier:
                keyid:BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9f:85:ee:fc:b6:27:a5:d4:6c:11:d9:b6:04:2b:e2:db:cf:
         07:aa:c9:c1:bb:e1:22:27:f4:a7:c2:51:c4:bd:ff:ab:1d:73:
         af:cd:fe:df:00:19:46:d8:60:da:28:d1:87:d9:28:84:ad:cd:
         d7:99:21:54:65:35:38:f9:b1:b9:6b:48:14:af:56:85:e8:46:
         bc:10:bf:94:03:d3:72:bf:46:71:61:ab:8d:09:b6:92:71:89:
         98:09:44:64:dc:b9:6f:d7:3a:5a:fa:00:af:0f:af:fc:7f:5d:
         f4:a2:6c:e4:88:7a:ed:04:98:9d:f5:95:31:d9:56:a9:e1:9e:
         2f:89:10:d3:05:d9:8c:09:a0:61:0e:dc:76:12:16:79:6a:31:
         42:c7:53:ab:4c:05:48:d7:ac:57:e6:31:8f:4d:a6:8d:98:a9:
         8f:d7:4a:e3:a7:c9:c8:35:02:c8:fa:39:50:d0:d5:99:fe:1a:
         68:1f:70:a2:31:59:97:1d:44:6f:ed:28:c4:c2:3e:af:68:61:
         91:36:3c:77:e6:f4:5b:50:b3:c0:ec:91:83:ca:ff:7a:50:e3:
         0a:0e:de:e2:00:a3:a7:f4:1f:8c:f5:71:9d:f2:da:41:30:c4:
         38:6f:fc:bb:26:b7:f1:a7:fd:62:d8:a6:67:f1:31:b6:47:11:
         8f:f4:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:08:40 2024 by rpki-client on console-fra.rpki-client.org