Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
File:                     sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft (raw, json)
Hash identifier:          t7pLs091oD2IfzaI3ZKZeYpiy23PdLCxKwpA0Dui96I=
Subject key identifier:   AE:2E:F1:6B:61:CA:13:76:6F:08:A7:18:0C:68:F0:8F:77:0D:DD:05
Authority key identifier: B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94
Certificate issuer:       /CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
Certificate serial:       01901BFDD3454EDC176DE88335EA7B645ABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
Manifest number:          06A8
Signing time:             Sat 15 Jun 2024 13:02:17 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:17 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:17 +0000
Files and hashes:         1: NgR37ANmrNNE3A5AMvaae_t1K50.roa (hash: kc+REan9AHLTX7fNR4EhWFNE8aSR1vqbijjkQz1B1vw=)
                          2: sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl (hash: qwSQsc4JD+vNY5nra6PJbN3bCGOyTqTyDYjDrItzGg0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:d3:45:4e:dc:17:6d:e8:83:35:ea:7b:64:5a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13971bfea78d6aa5b49ed5ac35c77b6a30a0894
        Validity
            Not Before: Jun 15 13:02:17 2024 GMT
            Not After : Jun 16 13:02:17 2024 GMT
        Subject: CN=ae2ef16b61ca13766f08a7180c68f08f770ddd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:e8:4c:99:21:42:71:72:c0:0a:3a:da:bc:
                    94:f2:cf:dd:01:f6:98:d0:ab:01:67:4d:ce:53:4f:
                    6e:c9:fd:3a:6d:07:bc:48:f5:d7:2d:68:6f:23:85:
                    cf:c7:0a:2c:66:23:ee:d2:72:e4:16:18:db:8a:04:
                    6d:a1:ca:a0:19:07:ce:7f:a5:f9:7d:fc:bb:6c:32:
                    1d:e8:72:88:a2:0d:a2:7f:3e:f8:02:2f:a0:1f:a6:
                    23:3b:63:6a:3a:2f:0e:82:b1:ad:00:62:55:30:71:
                    bd:b7:d3:22:34:7f:48:33:fa:c3:48:9a:32:4d:ac:
                    92:3d:0c:13:73:0f:62:e3:8d:50:b9:9b:f5:98:3e:
                    11:f0:f9:b1:a0:38:f7:17:9a:ab:33:e7:49:8d:0c:
                    14:68:8d:09:75:b5:91:80:62:c6:9a:35:b6:d6:34:
                    49:48:d4:92:f0:f8:36:4b:78:60:d5:fe:bc:c3:cf:
                    52:18:3e:7e:c9:51:87:49:e0:e5:52:82:b8:8a:87:
                    0a:c7:3e:ad:39:26:f7:84:81:d2:20:51:6a:f1:d4:
                    6a:7d:ca:13:36:bd:4f:d9:b5:57:53:8c:dd:51:10:
                    bb:c3:9b:79:fe:fd:ac:be:51:ad:0a:a9:7a:7e:3e:
                    07:f3:b4:91:12:80:4b:aa:35:5f:f2:8c:9c:ae:33:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2E:F1:6B:61:CA:13:76:6F:08:A7:18:0C:68:F0:8F:77:0D:DD:05
            X509v3 Authority Key Identifier:
                keyid:B1:39:71:BF:EA:78:D6:AA:5B:49:ED:5A:C3:5C:77:B6:A3:0A:08:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTlxv-p41qpbSe1aw1x3tqMKCJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3f0083-59d7-433a-905a-47b1bdf8d530/1/sTlxv-p41qpbSe1aw1x3tqMKCJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:34:8b:b3:77:82:dd:f8:f7:6d:54:70:16:f5:43:66:75:72:
         3b:54:e9:48:55:59:9b:53:8a:f0:d8:27:f7:df:ec:82:2a:ea:
         d9:d7:c8:54:1d:0b:f1:75:e7:96:e3:29:b3:09:d0:8c:b6:5e:
         6e:08:61:46:56:40:82:c5:74:21:4b:b3:4b:45:0d:f8:99:ac:
         77:10:5f:e9:11:de:12:01:06:d7:06:95:65:6d:86:87:0e:50:
         de:b4:67:23:3d:c4:ce:5d:9e:38:33:e4:e0:5f:e9:6c:16:d3:
         6e:33:bd:1d:75:1e:07:92:c8:e4:2d:87:f9:06:5b:e4:eb:eb:
         1f:de:f2:0c:13:b0:95:d9:96:e2:c7:99:58:e8:e3:9a:bb:a4:
         23:9a:b6:f7:98:5b:83:33:60:05:e4:0c:61:75:f5:44:20:ec:
         4b:4c:fb:ff:ca:15:e3:ce:94:26:1a:3d:99:5b:fc:e3:b3:2f:
         51:67:f0:96:2b:d2:6a:7f:90:17:ce:c0:1b:4b:7d:74:6a:f9:
         cd:28:5d:86:38:30:93:ee:92:98:75:12:06:83:b2:fa:20:fe:
         95:73:c5:f6:7a:55:36:0d:68:7f:39:8a:a3:e1:73:1c:4c:cc:
         d9:68:ab:96:48:e1:fe:b2:fa:27:a4:f1:75:9a:d2:12:b1:d1:
         f0:b7:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:55:51 2024 by rpki-client on console-ams.rpki-client.org