Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
File:                     xJqjIm6vrB530j6PzvGJADhAA8c.mft (raw, json)
Hash identifier:          mtU+lm2FmwXBJc2skjwwWGrAOxBRE/K6DwDpTFzcna4=
Subject key identifier:   D9:F4:4B:5C:60:CC:78:F0:8C:A5:17:05:2B:1A:3A:AD:D8:83:4E:43
Authority key identifier: C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7
Certificate issuer:       /CN=c49aa3226eafac1e77d23e8fcef18900384003c7
Certificate serial:       01901CD85D62B616E62C9C283E6437803FA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
Manifest number:          0DDD
Signing time:             Sat 15 Jun 2024 17:00:59 +0000
Manifest this update:     Sat 15 Jun 2024 17:00:59 +0000
Manifest next update:     Sun 16 Jun 2024 17:00:59 +0000
Files and hashes:         1: 2qk-AERxd_MjuwP354At_Q3g1M4.roa (hash: J+KB5f0lgJRwjPvi/68LkauuhVyPpQv59620nnRemHg=)
                          2: xJqjIm6vrB530j6PzvGJADhAA8c.crl (hash: ULVrMKkb1fpKBZ08cgTviKgQz/RQt5wLWXBjs662xsY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:5d:62:b6:16:e6:2c:9c:28:3e:64:37:80:3f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49aa3226eafac1e77d23e8fcef18900384003c7
        Validity
            Not Before: Jun 15 17:00:59 2024 GMT
            Not After : Jun 16 17:00:59 2024 GMT
        Subject: CN=d9f44b5c60cc78f08ca517052b1a3aadd8834e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:ba:f7:7f:5a:3b:9f:e3:b4:a0:9e:04:40:
                    56:44:d4:18:60:09:c6:0b:82:82:15:06:ea:f7:1f:
                    f3:ca:fb:0b:22:1f:ec:18:a6:42:43:92:23:d1:8c:
                    90:88:9e:50:50:6e:74:65:0f:1d:26:1c:8a:26:ac:
                    59:69:5c:51:6d:39:f5:57:ff:fd:5f:50:59:16:e7:
                    71:99:74:a8:1e:8b:04:28:84:61:84:84:c0:f2:f5:
                    2d:b4:7f:5e:2d:86:e3:84:76:b9:5a:63:d5:78:00:
                    a6:b9:37:a4:2b:64:2e:08:5f:db:cc:05:be:4c:a1:
                    be:28:04:f0:ac:b7:c9:99:0b:b3:05:58:39:7a:49:
                    9a:9f:f9:d7:af:11:2e:a5:5d:99:d4:92:c7:fa:43:
                    d2:9d:09:22:38:63:8e:a4:ae:65:30:ae:da:4d:56:
                    1c:61:dc:ce:33:f8:fd:d6:f2:0a:3a:b4:e4:1e:92:
                    b4:05:a1:99:ba:c3:e2:02:1b:05:90:87:25:80:53:
                    15:67:5a:a7:56:04:30:9f:19:7f:e1:8a:60:69:61:
                    38:1e:9b:22:98:e0:11:be:12:fe:0f:08:a0:3f:9d:
                    47:10:91:8f:b9:fc:be:5b:82:f9:26:77:1c:92:08:
                    10:f9:8b:0c:3c:15:3c:bb:ec:9a:ee:11:93:5a:ca:
                    c0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F4:4B:5C:60:CC:78:F0:8C:A5:17:05:2B:1A:3A:AD:D8:83:4E:43
            X509v3 Authority Key Identifier:
                keyid:C4:9A:A3:22:6E:AF:AC:1E:77:D2:3E:8F:CE:F1:89:00:38:40:03:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJqjIm6vrB530j6PzvGJADhAA8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/08d018-e709-47fc-9b9e-a8fcac86b64e/1/xJqjIm6vrB530j6PzvGJADhAA8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:ad:04:5c:05:d9:dc:03:9b:3f:aa:0d:f8:2d:eb:88:b2:c2:
         e1:ba:df:05:f8:68:83:63:f2:93:59:f2:22:c0:e0:bd:51:aa:
         f0:ca:f6:04:c6:b7:09:52:fe:3b:a2:86:ee:17:86:da:3a:13:
         56:1a:48:36:b8:40:c2:6b:1e:aa:7a:c5:72:22:34:11:a5:7f:
         53:7f:33:2a:05:39:70:37:b2:92:3a:8c:f4:7d:25:59:18:a7:
         1e:45:b5:02:b4:08:4f:38:43:66:e1:05:65:9a:2e:ed:02:2f:
         b8:5c:e7:a0:48:53:09:ec:7e:89:9e:f0:02:d3:b1:4e:e6:08:
         0a:db:a1:33:6f:ca:6a:68:12:73:0f:06:ff:b8:ee:24:55:42:
         ca:f2:c9:49:1f:48:68:e0:4b:b9:a5:6c:fb:5e:64:72:1e:29:
         e4:c9:b8:dc:fc:e1:bc:82:2a:3b:ee:ad:31:49:08:8b:96:20:
         d9:8a:d0:d9:a4:33:67:0c:7e:72:91:56:94:e7:37:43:02:b1:
         b8:28:3f:ae:a0:61:9b:e8:29:13:c6:2e:58:c4:0f:32:09:b0:
         32:0c:0e:81:94:70:b6:b6:78:6c:b5:a7:de:0a:c4:8e:78:b0:
         5a:b4:7e:ba:d6:d4:bc:b1:73:7a:12:59:c4:6f:6f:17:43:5e:
         f8:4d:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:24:39 2024 by rpki-client on console-ams.rpki-client.org