Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
File:                     xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json)
Hash identifier:          ScSbnH0bVApl2F6AI0iu8nXCihyiLKX7VX8Qo4Ph3Ss=
Subject key identifier:   0C:06:46:04:7C:9F:18:65:ED:0A:6B:9E:96:DF:87:EA:F4:42:BC:26
Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0
Certificate issuer:       /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
Certificate serial:       01901EFD7331269CB6F7EFD151EE19B8127C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
Manifest number:          111D
Signing time:             Sun 16 Jun 2024 03:00:44 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:44 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:44 +0000
Files and hashes:         1: CqVgDGZmgsEBbW-wqmP5QberYcc.roa (hash: 7DY9XMenscZEGzseyQ6PgKTmM7Y7DSQsZWjhM0KzQ1Q=)
                          2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: AyPb5izzkLKa4P1ji3uJ7BKZ4dDTIcxxApQRA6i98m0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:73:31:26:9c:b6:f7:ef:d1:51:ee:19:b8:12:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0
        Validity
            Not Before: Jun 16 03:00:44 2024 GMT
            Not After : Jun 17 03:00:44 2024 GMT
        Subject: CN=0c0646047c9f1865ed0a6b9e96df87eaf442bc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:87:97:15:4f:b4:28:64:09:9b:cd:c8:5b:86:
                    96:dd:e0:97:78:7c:61:bf:cf:1c:de:23:2b:ca:fe:
                    ae:ab:01:85:f8:55:22:fa:df:1c:fc:9f:bd:53:aa:
                    44:69:4d:bb:cb:ca:eb:72:ac:e6:da:4c:7d:47:80:
                    5c:1a:3a:d3:0e:0b:c8:43:4a:10:d5:7d:01:00:32:
                    84:a2:42:c6:3b:61:44:5a:7d:5c:ef:19:e5:a3:98:
                    b0:7d:8e:1e:6a:af:5b:f5:e6:64:21:1f:89:d1:b3:
                    07:34:6d:06:81:a8:82:14:e9:9a:eb:27:d7:e8:20:
                    58:cc:49:f6:f0:15:bc:4f:f0:a7:f2:96:8b:77:cf:
                    88:89:65:e2:95:ea:e9:ec:17:c8:fe:6f:6e:97:db:
                    65:da:11:05:18:42:b7:66:96:f7:42:90:37:63:5a:
                    91:dc:c7:ab:f1:13:c2:6e:39:fe:23:44:83:c0:21:
                    ba:01:20:37:fa:4b:11:7e:36:cf:ec:6a:90:2c:6e:
                    27:18:e1:34:53:1e:f0:7e:27:4d:5a:12:ad:59:4f:
                    1a:4f:0c:74:09:ff:15:88:d2:96:c0:6a:6b:74:aa:
                    d4:59:a2:95:91:a5:7d:3a:a0:7a:45:b0:84:8d:17:
                    8a:85:de:ae:95:f1:e8:dd:42:a7:d8:c8:f0:82:14:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:06:46:04:7C:9F:18:65:ED:0A:6B:9E:96:DF:87:EA:F4:42:BC:26
            X509v3 Authority Key Identifier:
                keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:7c:34:04:25:84:cc:12:3f:5c:74:b7:d7:10:a2:fc:4a:e7:
         02:b7:d3:50:ed:35:3d:d4:81:94:22:c7:08:06:1b:98:15:ed:
         54:d8:ad:0c:19:81:76:86:67:06:f8:38:0e:ef:ce:6e:1f:85:
         91:a3:39:97:a8:7e:24:ff:1b:0b:e1:70:1f:27:c0:53:92:9b:
         71:42:48:9f:bc:d8:b1:9e:b5:60:26:d8:81:5d:f0:86:b3:f1:
         64:ef:5d:9b:86:99:01:c2:b1:fa:f9:b4:9b:42:72:a8:39:a2:
         57:1c:81:f6:5f:fa:5b:43:9b:65:be:df:4d:60:92:ce:30:d4:
         0a:b5:dd:6a:36:e6:01:62:43:a1:3e:30:01:a9:e9:d5:8f:2e:
         a9:a2:0c:e9:0b:0f:c6:2d:b0:af:75:d9:70:56:2a:e7:59:85:
         f9:75:58:13:d6:bd:ec:12:b2:f2:96:a3:b6:03:52:36:0c:23:
         84:9e:d8:2d:19:76:ed:f8:d7:32:ad:02:39:67:89:92:7c:e1:
         4e:83:2a:d9:6c:a7:47:b1:6d:6a:f4:3d:a2:81:b0:59:ba:33:
         38:dd:d3:1c:b5:65:37:83:16:1c:d5:08:96:55:8b:03:f0:a1:
         ea:3f:a1:9f:f5:f5:4c:0e:aa:7c:34:e4:ae:81:85:41:56:f3:
         22:86:bb:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:37:11 2024 by rpki-client on console-ams.rpki-client.org