Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File:                     afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier:          I+tuxuDiXmvyGAyeOqLlhYSY8iFkt+npIH+OrOE3PaQ=
Subject key identifier:   A4:F1:5C:74:98:50:69:8F:B7:B0:B8:13:12:EA:F8:44:1B:35:5D:E8
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer:       /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial:       01901DB3BF462AEEE3F781BD44A72D3524BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number:          0553
Signing time:             Sat 15 Jun 2024 21:00:37 +0000
Manifest this update:     Sat 15 Jun 2024 21:00:37 +0000
Manifest next update:     Sun 16 Jun 2024 21:00:37 +0000
Files and hashes:         1: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: cbp0U7UouAw43YSgA2jRLhSsnRZmSTQ1MQmNmyXO6oY=)
                          2: vWH70oIlCnt8vRyNDdgiKFTZzVQ.roa (hash: nMHI595NYdWq3JwMGJWblF1heQ1F5dc3hyZV2B2Wj6s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:b3:bf:46:2a:ee:e3:f7:81:bd:44:a7:2d:35:24:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
        Validity
            Not Before: Jun 15 21:00:37 2024 GMT
            Not After : Jun 16 21:00:37 2024 GMT
        Subject: CN=a4f15c749850698fb7b0b81312eaf8441b355de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f8:32:66:e0:8c:f8:6d:c3:15:66:70:3f:ee:
                    45:35:dd:e5:45:e8:82:04:12:c6:23:a3:71:b8:85:
                    da:bc:a5:f1:84:a5:85:75:05:82:5d:5f:ed:9a:df:
                    b0:b9:82:36:33:dd:09:a4:39:bf:b0:ed:4a:51:22:
                    eb:20:78:e7:2a:47:1e:f5:6c:18:49:5a:95:9d:f4:
                    77:85:4a:10:d4:ad:01:6e:ce:f7:46:75:9e:27:e5:
                    d9:02:e7:69:3d:45:89:df:74:fc:d4:5f:a0:32:e2:
                    cb:86:7a:32:cb:90:12:5d:a6:37:e9:e4:26:66:78:
                    62:6b:33:f9:e7:10:b5:43:fa:6d:94:b5:bd:4d:f7:
                    5c:93:8f:c1:0b:f4:49:3e:7f:55:83:b3:67:8a:5e:
                    86:40:4c:13:f2:c7:6a:32:22:74:e1:32:b7:ee:d5:
                    91:a7:6b:14:5d:0f:c0:bd:32:c8:f8:4b:fc:ff:04:
                    f6:9b:e3:48:8d:66:78:c8:0b:b9:f0:bb:5f:a8:6c:
                    23:64:94:b2:62:c6:8c:56:df:6d:83:4b:27:32:93:
                    90:f6:fd:b8:a9:bd:d3:d4:74:e5:a4:59:90:36:63:
                    66:b7:e8:4e:8a:d2:aa:0e:76:21:c8:10:68:78:0a:
                    f9:99:79:4b:8f:74:4a:bf:77:0d:50:be:da:36:da:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F1:5C:74:98:50:69:8F:B7:B0:B8:13:12:EA:F8:44:1B:35:5D:E8
            X509v3 Authority Key Identifier:
                keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:40:7c:e2:fd:ff:6f:03:15:1e:f9:31:be:3f:23:1a:25:12:
         1f:b8:c1:92:52:8c:bb:ac:87:a2:11:c6:78:88:86:eb:29:99:
         94:ec:a8:ef:f3:d5:5c:1f:74:f3:b7:70:0a:35:ec:70:05:a1:
         08:d3:13:92:63:da:3e:d8:57:e8:58:c7:07:b2:9d:a0:14:af:
         fe:6e:6a:2a:fb:94:ac:e6:71:ef:04:b2:de:e6:18:d0:db:c5:
         cd:8f:98:72:3e:42:b4:18:ad:96:1c:87:4c:b0:bb:a0:76:4a:
         aa:69:ed:33:77:78:39:98:37:ea:62:10:c1:ea:2a:7f:4c:72:
         7d:3f:a5:9c:bc:e7:ce:23:02:42:b1:d8:ca:0a:f8:bd:6a:b3:
         fb:17:f3:76:c5:c5:8e:63:12:a5:3e:ec:47:08:50:5d:26:9b:
         c3:ba:15:b6:fd:fc:eb:56:29:40:98:2b:1c:23:fa:f3:c7:1e:
         e5:84:0c:9a:e6:fc:85:fb:e4:50:61:6f:ec:f1:dd:b8:7a:f2:
         72:75:a8:56:de:df:e9:1c:7b:1f:0a:80:e2:49:ff:e0:85:49:
         bb:25:45:d8:64:db:7c:49:b8:17:55:10:e5:53:f5:aa:c5:bf:
         68:3f:2d:f3:d8:54:1f:34:bf:1d:ea:a1:4f:96:a9:3b:bc:66:
         9d:c7:65:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:09:46 2024 by rpki-client on console-ams.rpki-client.org