Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
File:                     aaEl4pJtOayGmYIrxXplgPX1F-k.mft (raw, json)
Hash identifier:          b2E6kGGTRUxG9+FHyoOicF2chctI5SvWYEyvr9wTcS4=
Subject key identifier:   42:11:AA:D2:78:21:45:CD:BC:59:83:2F:F3:16:42:55:ED:C2:9E:F6
Authority key identifier: 69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9
Certificate issuer:       /CN=69a125e2926d39ac8699822bc57a6580f5f517e9
Certificate serial:       01901EFD8A5998FD8D1A52BED8198EAB63FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
Manifest number:          0AF1
Signing time:             Sun 16 Jun 2024 03:00:50 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:50 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:50 +0000
Files and hashes:         1: 97a0_QOV2ptgZASjwMLnpTUxYts.roa (hash: 0YB6BLWDN6ScupxazT2I1AtY+Zzf0wX2olnpNa/Kdvk=)
                          2: aaEl4pJtOayGmYIrxXplgPX1F-k.crl (hash: 1Q9QAwksdvDK+Mz3Nqm3ODiqazN8NjMRqjQjjVxr2s4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:8a:59:98:fd:8d:1a:52:be:d8:19:8e:ab:63:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a125e2926d39ac8699822bc57a6580f5f517e9
        Validity
            Not Before: Jun 16 03:00:50 2024 GMT
            Not After : Jun 17 03:00:50 2024 GMT
        Subject: CN=4211aad2782145cdbc59832ff3164255edc29ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:80:86:22:9b:7e:92:6c:a0:2f:40:65:4d:
                    bc:81:9e:a0:73:a1:c9:95:8f:70:41:b7:5e:39:f8:
                    08:fe:af:bb:c6:d2:9f:e8:92:48:b9:3b:c1:51:08:
                    1e:c5:41:89:ad:a5:f9:b7:80:0a:7f:26:5c:74:3c:
                    3f:c2:2b:a7:82:9f:8a:98:bd:e1:07:63:94:1b:97:
                    0a:80:40:f2:82:19:51:22:a1:fc:30:cd:3d:79:ac:
                    38:9b:f6:15:ce:b2:00:13:87:66:48:42:bb:de:57:
                    34:5d:b4:64:6e:8a:53:19:48:09:93:3a:59:8f:98:
                    70:d4:eb:fd:96:92:b8:0b:c3:21:fe:89:3d:cc:be:
                    fb:26:36:79:07:71:57:38:7b:50:f1:05:fd:b6:2c:
                    d2:92:a7:aa:04:98:16:7c:5b:71:71:d1:03:e1:93:
                    cc:17:57:28:b3:8e:69:9d:e6:be:f6:16:c3:f0:46:
                    d6:54:3a:5c:45:92:87:00:4e:fb:ec:a5:6a:3d:2f:
                    0e:0b:09:3a:ec:2e:73:86:30:bf:d3:8f:b6:ba:3d:
                    e8:f8:e9:1b:54:3a:ec:68:95:4d:11:cf:36:f8:62:
                    76:ab:60:24:9e:1f:7a:a8:e8:70:72:11:66:ad:4a:
                    62:90:f0:fb:66:10:92:14:74:e2:9c:ff:19:b7:c5:
                    93:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:11:AA:D2:78:21:45:CD:BC:59:83:2F:F3:16:42:55:ED:C2:9E:F6
            X509v3 Authority Key Identifier:
                keyid:69:A1:25:E2:92:6D:39:AC:86:99:82:2B:C5:7A:65:80:F5:F5:17:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaEl4pJtOayGmYIrxXplgPX1F-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/7abb06-97e7-4fa5-ac7d-7b567c6185f9/1/aaEl4pJtOayGmYIrxXplgPX1F-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:73:5b:2b:a7:3a:68:fe:7e:8c:9e:a6:78:bd:c8:30:1e:17:
         63:a4:2d:9c:91:1d:f1:67:3c:ff:f9:5b:d4:a3:4f:43:3a:34:
         16:1d:83:99:46:00:c1:ae:da:44:e4:95:fb:54:08:4b:76:9a:
         50:74:8b:f7:31:b6:8e:be:99:8c:d9:81:87:49:db:d3:6a:51:
         de:6c:bb:9e:45:c8:3f:87:9b:13:9e:66:2d:c0:a8:a4:55:fb:
         61:77:27:67:a1:32:68:6b:64:5b:14:66:be:71:d9:7a:dd:c5:
         0a:fc:2f:a2:02:8f:4a:bb:24:d6:e7:3e:ab:e5:e9:5c:ac:f5:
         08:61:bb:72:d6:91:fc:89:7f:96:6e:4c:2f:4c:62:0c:28:fd:
         97:22:84:ef:46:33:de:46:df:d6:90:fc:53:40:bb:b6:8a:18:
         c1:ea:09:8d:26:0d:14:55:4a:bd:f5:f5:12:27:cd:39:b1:3e:
         6b:6d:6e:d8:73:4b:a0:91:ba:b6:6a:13:00:8e:c8:df:fc:43:
         52:b9:0e:0c:e1:8a:ee:d7:04:34:f8:b4:b4:fb:94:52:73:70:
         fd:40:ee:fd:e4:a8:38:08:1a:0b:35:ec:3e:f3:f8:c8:b5:22:
         70:9e:2f:4a:47:a9:45:bd:ea:96:64:8c:72:d5:3d:6e:dd:a3:
         74:40:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:48:55 2024 by rpki-client on console-fra.rpki-client.org