Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft
File:                     XHkaG6CbnU01jvBare1_DoXogbY.mft (raw, json)
Hash identifier:          1NI7x6bUx3MFugsN+xV7zqgXI5Fpo3l438GOzUcMIAk=
Subject key identifier:   4B:9C:6E:CB:03:A3:11:F5:94:57:8D:CE:BE:D3:96:9D:A7:EF:14:C1
Authority key identifier: 5C:79:1A:1B:A0:9B:9D:4D:35:8E:F0:5A:AD:ED:7F:0E:85:E8:81:B6
Certificate issuer:       /CN=5c791a1ba09b9d4d358ef05aaded7f0e85e881b6
Certificate serial:       01901E5933FBFB3B9ED11AAFA9120FEC5793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft
Manifest number:          0702
Signing time:             Sun 16 Jun 2024 00:01:20 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:20 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:20 +0000
Files and hashes:         1: XHkaG6CbnU01jvBare1_DoXogbY.crl (hash: GUdX86RZrBZTZ+H4BbRfRY/ykCw4DinKu/j+aXgxGWU=)
                          2: sz2P-SxUUCWW9YivRyhCNlZQhtg.roa (hash: H5+tDQKBXhPR9K/0kCNp3/JYblbOqJXLArptublX1VQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:33:fb:fb:3b:9e:d1:1a:af:a9:12:0f:ec:57:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c791a1ba09b9d4d358ef05aaded7f0e85e881b6
        Validity
            Not Before: Jun 16 00:01:20 2024 GMT
            Not After : Jun 17 00:01:20 2024 GMT
        Subject: CN=4b9c6ecb03a311f594578dcebed3969da7ef14c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a6:d4:5f:5b:3c:85:ca:ba:09:9c:7c:50:35:
                    81:d7:e8:a3:b6:52:e6:7a:6f:44:aa:12:5c:f4:fe:
                    d1:61:52:6d:07:31:8c:eb:80:5b:68:0c:06:36:70:
                    7f:ec:d1:6b:6e:e1:05:31:0a:a0:c3:ea:71:ec:be:
                    cd:f3:e8:86:c6:1a:86:58:d1:38:b7:96:60:e6:a3:
                    61:ac:0e:41:9b:80:0a:a1:34:29:d7:23:8b:5d:c2:
                    83:02:84:6f:a5:15:83:33:1a:d6:7f:cb:40:38:f0:
                    bb:40:75:ae:25:79:5a:8d:a3:9f:4c:aa:bd:11:32:
                    87:25:44:76:9b:90:ba:1c:d8:2c:11:f8:f6:eb:e3:
                    60:cb:cb:5d:08:c6:c9:06:cd:65:06:c6:ea:67:f9:
                    1b:a6:31:12:fe:b9:a4:11:da:a4:5b:f2:d4:97:51:
                    bf:fe:98:15:98:e8:f9:f7:3f:d2:9c:d6:6c:4c:de:
                    bf:96:d2:05:b8:3f:0e:e0:6a:62:16:fc:df:20:3d:
                    c6:25:05:5f:c6:32:ef:31:fd:0f:33:a7:ec:0b:19:
                    c5:7f:c2:71:b3:59:63:55:59:23:c2:fd:db:3a:98:
                    1c:06:d3:7e:98:6a:5d:34:f4:98:16:2b:61:2d:d6:
                    fa:36:ee:b8:cc:45:cb:da:30:0d:3f:2d:72:69:f5:
                    a8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9C:6E:CB:03:A3:11:F5:94:57:8D:CE:BE:D3:96:9D:A7:EF:14:C1
            X509v3 Authority Key Identifier:
                keyid:5C:79:1A:1B:A0:9B:9D:4D:35:8E:F0:5A:AD:ED:7F:0E:85:E8:81:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHkaG6CbnU01jvBare1_DoXogbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a27a03-f645-462b-94e7-66c5ae8a36b4/1/XHkaG6CbnU01jvBare1_DoXogbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:da:a6:b3:9f:dd:70:91:b3:d6:5c:c1:d2:84:0f:17:18:d7:
         46:e2:46:5c:d0:ff:52:2b:02:12:4a:6e:f0:c0:07:44:3f:e4:
         57:d5:4b:1e:f2:00:cb:c7:c7:44:21:e3:d9:00:57:4b:c8:b6:
         5d:ca:bf:db:bf:73:ac:46:d7:a0:57:ed:0a:bb:df:d7:18:e3:
         63:8f:25:2d:25:63:be:fc:28:08:02:3f:c2:84:30:61:eb:73:
         17:eb:8c:75:2a:b3:b1:2f:c5:be:e1:e4:05:45:4f:0e:f5:8e:
         fb:2f:03:f1:ca:56:32:8d:ae:2b:fe:ac:de:72:55:f2:08:a9:
         a8:aa:b7:7a:ab:57:3a:d2:2e:f0:e5:90:ed:e2:a3:99:75:ed:
         4e:ea:16:56:96:44:c6:22:25:40:db:7e:0f:21:fa:5e:72:12:
         27:18:7f:8b:11:62:35:6f:77:98:c8:46:9d:ac:1c:7e:38:13:
         85:2a:2f:8d:17:51:24:d3:cd:d7:fa:55:6a:2c:69:cb:c4:72:
         48:32:0e:5b:be:8e:42:3e:03:81:17:c8:3d:8b:08:8a:1a:79:
         87:35:a1:a2:21:cf:8d:f3:68:d7:68:8a:64:c7:8f:b1:f9:46:
         78:87:e5:0c:5f:6a:cc:fe:70:84:df:29:81:0e:01:fa:aa:82:
         b8:1b:a7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:03:17 2024 by rpki-client on console-ams.rpki-client.org