Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
File:                     AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft (raw, json)
Hash identifier:          nEzAcoTrzcxmpQUlWapehxswcCssYGwD2G38ai2SSp0=
Subject key identifier:   AA:4A:13:B9:38:44:C9:A6:79:31:B4:8C:97:84:CA:7B:C8:B3:49:D8
Authority key identifier: 01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F
Certificate issuer:       /CN=01538851167b4e3d6f64d53797b08cb41371870f
Certificate serial:       01901DEB1B7F8546F3EDB45DB43FDE2BF046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:01:05 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:05 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:05 +0000
Files and hashes:         1: AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl (hash: M3FL/9HAqSjGx+CFNqETKsZ59ntWobTbTHfX8EYfONc=)
                          2: udY2sbJt-uRqMVg-0S1_W1YwP3A.roa (hash: TutDCwnsEl0pUQ6XDxvpjMnfDS+Vt48gzzvIA4uZ5Wo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:1b:7f:85:46:f3:ed:b4:5d:b4:3f:de:2b:f0:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01538851167b4e3d6f64d53797b08cb41371870f
        Validity
            Not Before: Jun 15 22:01:05 2024 GMT
            Not After : Jun 16 22:01:05 2024 GMT
        Subject: CN=aa4a13b93844c9a67931b48c9784ca7bc8b349d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ba:0a:8f:e2:d0:1c:69:af:f7:4b:4b:e2:b0:
                    31:92:04:fe:b1:1b:7f:85:92:75:a5:26:34:e0:2e:
                    10:8f:64:7d:7f:37:7f:36:65:91:ab:d3:7f:23:1f:
                    75:71:4e:0a:ae:3f:fb:38:b7:d6:c8:90:7e:83:80:
                    88:df:9a:d6:dc:0e:dc:5e:b0:87:db:e9:7b:58:0d:
                    45:c8:9e:06:e0:9c:c3:53:69:d6:74:37:e5:13:f8:
                    ca:64:ab:d1:bf:47:d8:e5:b1:a9:5d:8a:49:b9:ca:
                    3c:75:1a:fc:53:e7:3d:f2:23:4f:56:df:b9:b3:1e:
                    85:18:94:40:84:30:3e:3e:3c:c5:45:3c:d6:c0:fb:
                    6f:66:2d:da:87:e4:e9:88:6d:38:1c:e1:c0:bd:a9:
                    62:39:4f:a9:12:b0:de:a3:35:ce:fd:57:a5:83:2e:
                    09:fa:08:00:da:96:82:b4:30:0d:7e:38:15:ee:50:
                    5f:ac:d3:87:81:71:79:6a:f8:18:66:c6:34:2b:06:
                    89:07:6e:d3:91:f9:60:1b:63:f4:53:e5:55:6a:8b:
                    f6:07:b0:db:37:2d:76:6c:eb:ec:32:91:e9:d9:0a:
                    f4:3a:33:f0:a7:f1:49:2d:b5:2f:72:46:02:1a:69:
                    fa:e0:6c:23:e9:6c:64:8c:ff:6e:b1:3a:c4:71:da:
                    90:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4A:13:B9:38:44:C9:A6:79:31:B4:8C:97:84:CA:7B:C8:B3:49:D8
            X509v3 Authority Key Identifier:
                keyid:01:53:88:51:16:7B:4E:3D:6F:64:D5:37:97:B0:8C:B4:13:71:87:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bf4263-ffae-42d7-be0f-6295b854df86/1/AVOIURZ7Tj1vZNU3l7CMtBNxhw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7f:c3:dd:95:d0:da:8d:1a:74:82:7f:a8:4c:4b:18:8c:ff:
         d9:c8:2b:ba:01:cd:ac:c3:50:da:56:04:ab:08:1e:5d:30:a3:
         d7:cf:63:84:a9:31:b3:0d:68:a2:d5:29:9f:c4:17:e5:e7:38:
         46:89:55:d8:31:0a:6c:e3:f4:65:cb:e7:b3:84:f2:b7:6a:c9:
         3f:27:6b:60:1b:f6:c7:f6:91:da:02:84:9c:f0:38:63:1f:82:
         49:b4:25:8a:0a:3d:39:8a:8e:3d:23:9c:32:e9:bb:82:0c:13:
         5f:67:ec:45:6d:fc:f4:58:61:35:0a:94:c4:03:6a:99:f0:3b:
         29:fd:70:f4:d1:a5:66:be:a5:b7:bd:06:aa:c3:01:39:00:f4:
         05:6f:56:4f:c3:9b:2c:c4:3e:ac:b3:26:ba:59:07:fa:0b:d9:
         9d:72:e6:62:c6:59:2c:06:4d:3d:26:c9:85:7e:3d:42:f7:20:
         87:e4:60:6f:77:28:5c:52:27:70:64:44:4b:1c:24:c3:5a:83:
         ec:a2:18:a5:51:ef:e9:a7:e3:fa:b0:eb:94:1d:b3:4a:15:92:
         66:bd:3b:56:b9:ba:bd:b0:11:d0:c5:6e:90:b0:df:56:36:28:
         e9:3d:dd:d5:f5:de:de:63:63:a7:22:20:87:86:62:d8:77:dd:
         29:6e:1f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:57:28 2024 by rpki-client on console-fra.rpki-client.org