Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
File:                     xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft (raw, json)
Hash identifier:          LrsodJwKMaRidWF4664nZeWXdXf/+T/ITJd+Hfb/3xM=
Subject key identifier:   C1:3E:1D:9B:58:85:C2:DE:81:41:C4:0A:06:1A:B1:3F:28:43:2B:D2
Authority key identifier: C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52
Certificate issuer:       /CN=c5721737651598f56cf7195120777d7b5316f552
Certificate serial:       01901DEB0CE314648925D6E75C22DE96510E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
Manifest number:          0F28
Signing time:             Sat 15 Jun 2024 22:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:01 +0000
Files and hashes:         1: 7a77qpwJeeHMoGMx7H4Hltr43LM.roa (hash: 6lPWBqhGLKeKKMwcxRPlAd4DVLSSiCY4VtkMvpuCgiY=)
                          2: xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl (hash: JGAWO1bIe5ku4Q8W8FxXDZx2ritoX2gO/W32QZzYE6c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:0c:e3:14:64:89:25:d6:e7:5c:22:de:96:51:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5721737651598f56cf7195120777d7b5316f552
        Validity
            Not Before: Jun 15 22:01:01 2024 GMT
            Not After : Jun 16 22:01:01 2024 GMT
        Subject: CN=c13e1d9b5885c2de8141c40a061ab13f28432bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ce:d3:c3:77:f5:b8:58:f5:a6:ed:20:5a:a9:
                    ca:0d:9e:80:4a:2d:87:c5:24:2a:50:e2:72:19:c7:
                    2b:e6:fb:23:53:3d:81:92:de:73:0a:38:90:b7:75:
                    e2:63:74:e5:61:d9:b5:f7:0d:6b:ff:a2:e8:ea:8c:
                    48:02:00:a1:de:c0:80:c6:2d:73:e4:c9:5b:02:74:
                    2f:65:e7:50:7f:db:01:98:f2:bf:63:fd:4c:39:2b:
                    75:ce:dd:b4:cf:6b:06:84:3e:e7:87:92:80:d3:32:
                    78:ce:87:da:de:54:4e:fa:0f:65:ef:28:a3:3f:a0:
                    ea:3b:08:52:e8:07:89:8d:ac:81:96:80:db:2f:38:
                    16:57:9f:3c:04:a7:d3:6f:7a:26:2e:f8:31:a2:34:
                    64:b0:c7:64:2c:bf:bf:e9:7c:ce:e0:84:ca:af:d2:
                    c6:10:df:d0:20:f1:c0:31:ca:7a:a2:52:63:a5:10:
                    b4:8e:b5:95:82:57:52:5a:50:d2:fc:a1:f4:3e:1f:
                    c1:b3:b7:08:68:2f:83:3f:85:65:ce:25:f4:0c:d6:
                    bd:dd:ba:b1:d4:38:10:f9:37:7e:b7:7f:88:dc:c3:
                    9c:aa:c8:ad:d1:c5:5a:0b:8d:e4:f8:54:ab:31:f2:
                    1d:85:a5:b9:40:38:6b:97:44:aa:35:2e:7e:86:48:
                    18:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3E:1D:9B:58:85:C2:DE:81:41:C4:0A:06:1A:B1:3F:28:43:2B:D2
            X509v3 Authority Key Identifier:
                keyid:C5:72:17:37:65:15:98:F5:6C:F7:19:51:20:77:7D:7B:53:16:F5:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXIXN2UVmPVs9xlRIHd9e1MW9VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/5b43ba-8eb5-44d3-9b87-e000e3fff93e/1/xXIXN2UVmPVs9xlRIHd9e1MW9VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:94:94:79:6a:95:79:41:66:21:01:2e:68:13:45:fe:1c:65:
         45:2b:1d:ab:74:3a:93:fe:cf:8d:8b:35:f5:f2:ff:0c:d2:d1:
         5b:e9:84:47:9a:c6:52:8f:6c:c0:7c:b7:2a:04:2f:c8:5a:bb:
         8f:f1:a6:a8:8a:73:8d:4d:95:6b:39:d6:72:3b:88:bd:7e:03:
         ec:ed:51:9a:a0:78:f3:23:13:5d:7f:01:43:0f:5f:b5:cd:1d:
         99:bb:11:16:34:bc:a5:ea:7e:ea:d1:6c:43:c1:a8:50:a4:e5:
         a0:d8:be:a7:37:d7:e5:cc:eb:9d:f6:47:fd:b9:38:5e:1a:8c:
         f5:6d:82:f6:17:e0:9d:d9:0e:f7:a6:35:d8:af:98:f1:07:6d:
         1b:cc:d5:b8:66:84:45:ce:b8:b8:66:f8:b8:d1:1c:cb:a0:d1:
         a0:1f:5d:07:df:1e:2f:aa:a9:4f:1b:17:bf:79:ea:5d:bc:b3:
         5e:7b:12:93:9b:ce:fe:93:88:2d:fa:d4:60:ed:37:d8:44:ae:
         86:64:fd:a5:a4:47:86:8a:0a:46:32:5a:9e:70:a2:04:e1:0a:
         33:32:14:78:52:64:91:17:df:4c:08:55:8f:cf:97:f3:50:9d:
         aa:09:c5:65:fa:a4:68:91:d6:e9:02:41:d0:35:e6:be:00:de:
         e7:ba:c1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:00 2024 by rpki-client on console-ams.rpki-client.org