Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
File:                     p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json)
Hash identifier:          w2FckN0wGvIr4yo59CFf9trUq2osCq3oApUDvR0siUo=
Subject key identifier:   72:D0:6C:8F:26:E0:7C:88:73:1B:DD:82:D0:88:A9:1C:2D:55:7C:70
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Certificate issuer:       /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial:       01901DEB5795CFF7DAB1ED793D267235B58C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
Manifest number:          07CD
Signing time:             Sat 15 Jun 2024 22:01:20 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:20 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:20 +0000
Files and hashes:         1: D07VjmMyzkYoWm_olsV-PPp0OGE.roa (hash: wWwEjWUWbCIIfo7474Ie2Tyd9w6XZOY0eWu5Npof9TE=)
                          2: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: FjvK8rbIxA//8cZ6DKGnZc5/a6t0jHtq2XtVvseSH6c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:57:95:cf:f7:da:b1:ed:79:3d:26:72:35:b5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
        Validity
            Not Before: Jun 15 22:01:20 2024 GMT
            Not After : Jun 16 22:01:20 2024 GMT
        Subject: CN=72d06c8f26e07c88731bdd82d088a91c2d557c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d1:5a:85:f9:20:0f:40:6c:c7:94:e9:ba:46:
                    b4:10:03:69:a2:e0:87:38:01:54:f4:b0:09:ee:48:
                    07:72:c6:5a:c2:ce:fc:0f:c3:60:07:e0:30:93:d4:
                    26:c9:13:62:2d:6a:71:12:5c:d6:05:8e:d7:75:7c:
                    41:d6:80:01:38:ce:93:1d:cb:c7:9c:6d:a9:7b:73:
                    6e:62:4e:a6:12:c0:67:0a:1b:bf:7c:d6:73:76:98:
                    bc:ec:4c:70:7d:07:42:b9:59:44:c8:5b:a0:d6:3b:
                    89:a5:47:21:f1:56:7b:08:c3:10:a1:33:c6:26:a3:
                    15:02:5d:1f:e2:4b:6c:87:7f:bc:a1:43:63:52:43:
                    b3:e6:ea:79:5b:15:c7:48:1a:b2:1c:56:8e:7a:7c:
                    34:39:df:8f:fe:cb:31:2b:9e:ff:3b:fb:bf:cb:94:
                    74:08:bc:1b:06:de:d5:64:d6:3f:76:eb:83:c6:ee:
                    e6:8c:f8:52:0a:ed:f5:38:27:75:f6:c1:cd:e9:14:
                    71:2b:ae:e2:d5:8d:e2:3a:2e:7d:e0:c6:e1:36:62:
                    e4:ee:6c:be:fe:40:65:0d:bd:c7:3c:44:89:fc:cc:
                    22:4b:bd:e5:b5:49:5d:df:a2:27:36:ec:a8:c8:d3:
                    60:50:89:9d:19:d7:2f:c3:ac:36:99:cd:44:14:52:
                    05:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D0:6C:8F:26:E0:7C:88:73:1B:DD:82:D0:88:A9:1C:2D:55:7C:70
            X509v3 Authority Key Identifier:
                keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:2f:40:02:fb:58:47:52:40:f2:f1:2c:c6:a9:d4:8e:16:9f:
         52:27:b7:de:8c:e1:87:18:e8:18:90:55:1f:af:0d:18:4e:56:
         61:38:6b:7a:78:32:59:18:90:83:5d:a9:24:0c:ce:ff:1f:0b:
         10:b8:b1:cb:5b:e0:b1:3b:74:ca:47:b7:82:b1:0d:67:9e:9c:
         7c:51:39:db:a3:ab:6d:04:c3:10:cb:55:0c:bc:7f:ae:ba:ab:
         c4:26:5c:43:7e:e0:90:45:4f:b6:68:52:96:95:d3:10:63:87:
         7e:10:1d:04:b7:73:de:4d:4d:99:02:84:4b:3e:b4:c5:3c:e3:
         d0:d0:c5:97:c7:37:42:d7:c4:e0:da:37:bc:7b:25:4b:19:48:
         d2:bc:c3:2a:35:f2:48:c6:1a:b3:ed:65:aa:dd:4d:7b:b6:26:
         5c:e0:e8:4a:ff:c8:68:d2:7c:11:dc:de:87:4e:ca:93:0f:ed:
         76:af:88:7d:95:e0:1c:c9:90:19:96:a0:f1:0e:cf:f1:c9:84:
         7e:b8:8c:62:57:c5:fb:5b:7b:96:35:e2:f4:d2:97:ad:7b:7b:
         bd:dc:a7:97:dd:7b:f6:35:b0:02:e6:db:c6:e5:8c:cc:6b:a2:
         ed:bf:57:ff:5a:c9:e6:c7:ed:9b:c5:7b:36:11:b8:aa:44:8b:
         70:b3:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:20:53 2024 by rpki-client on console-ams.rpki-client.org