Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
File:                     xDwiL60sJ8phLJjCc9TxZQbhsuU.mft (raw, json)
Hash identifier:          qrW+XzyzhEr0wYk7dWJoQL+ZrAsfegx0txPWjN/UVF8=
Subject key identifier:   13:3F:03:3F:9B:B9:35:29:FA:88:29:4B:94:3F:D2:DC:1C:E4:84:19
Authority key identifier: C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5
Certificate issuer:       /CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
Certificate serial:       01901DEC2C8C4CFEA602684F6002FB0A9DE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
Manifest number:          0A46
Signing time:             Sat 15 Jun 2024 22:02:15 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:15 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:15 +0000
Files and hashes:         1: xDwiL60sJ8phLJjCc9TxZQbhsuU.crl (hash: fGGVTYT5irfcERxTvqlVeOvdYyF0/M+Jv2i1YxEy1Bc=)
                          2: y8Q7ynJJnkCyRM38ljAGDQ-zYtw.roa (hash: hkBn4sxesSrU2cHpldeIckTKtiT9ZkaUlGSLvoaNKzM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:2c:8c:4c:fe:a6:02:68:4f:60:02:fb:0a:9d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43c222fad2c27ca612c98c273d4f16506e1b2e5
        Validity
            Not Before: Jun 15 22:02:15 2024 GMT
            Not After : Jun 16 22:02:15 2024 GMT
        Subject: CN=133f033f9bb93529fa88294b943fd2dc1ce48419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ff:fe:60:94:8c:15:1f:d5:ee:4e:14:9c:20:
                    eb:c0:75:e6:70:27:61:77:12:5c:ed:f2:7c:71:49:
                    ba:06:44:94:50:29:3b:09:20:9d:d0:a7:9a:11:f5:
                    83:50:8e:0e:12:ca:72:ea:28:27:16:93:ed:85:c4:
                    19:86:d7:4a:a4:d0:09:f9:64:55:28:cf:03:ed:53:
                    9d:23:8f:8f:27:83:5d:7e:9e:ed:5c:f1:ad:92:6b:
                    4a:a4:ef:61:b7:b0:c1:ad:dd:a5:a6:2a:22:bd:3e:
                    62:48:ee:59:fe:9e:a4:c5:b5:bd:28:f3:2c:f6:b6:
                    2e:aa:ba:41:23:ac:5a:98:6a:6a:0c:dd:de:9a:e9:
                    55:f5:65:9a:e5:ee:ce:f1:83:3b:56:f7:0f:ed:48:
                    6c:1a:c1:ec:f7:4a:17:29:29:96:28:8d:93:87:36:
                    3a:3d:d5:7b:6e:0c:30:c1:93:04:ac:7b:86:26:85:
                    ee:e3:c7:c8:07:51:2a:5f:d8:d4:84:a7:16:b5:a7:
                    6c:5f:ef:74:53:91:0d:b6:89:88:c1:37:3e:93:55:
                    ab:16:5e:40:52:23:ed:63:b5:b9:27:31:9d:ff:78:
                    f6:7d:3b:72:8b:5b:28:b6:79:a0:65:44:e4:88:3f:
                    38:c4:bb:f5:45:3e:12:00:4f:27:cb:03:76:67:60:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3F:03:3F:9B:B9:35:29:FA:88:29:4B:94:3F:D2:DC:1C:E4:84:19
            X509v3 Authority Key Identifier:
                keyid:C4:3C:22:2F:AD:2C:27:CA:61:2C:98:C2:73:D4:F1:65:06:E1:B2:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDwiL60sJ8phLJjCc9TxZQbhsuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/68a7ea-d50a-4a30-9513-e909a77cda98/1/xDwiL60sJ8phLJjCc9TxZQbhsuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b7:8b:cd:00:74:36:5a:bc:cb:ac:94:56:d9:47:1d:4e:30:
         cb:19:27:51:83:13:f1:9f:4a:ee:96:77:70:70:7b:49:d7:4f:
         8b:62:21:86:88:bf:2f:81:8f:aa:2e:7d:0f:32:74:54:f8:ea:
         32:89:35:b8:6b:bd:17:f9:a1:e6:00:98:a7:7e:de:8b:fc:70:
         db:e1:e1:cf:8c:11:ac:20:36:0a:08:ff:4c:cb:33:49:f9:91:
         ff:00:74:e5:74:bd:d1:b0:2d:54:6a:26:f0:64:d8:55:e5:50:
         f9:8a:97:3e:fd:0f:cc:95:48:96:e6:ec:9e:a0:ca:28:ac:d3:
         79:de:2c:b7:b5:21:d6:42:05:19:a2:02:10:28:28:3c:16:82:
         41:5d:83:c5:ee:ce:93:17:77:b9:26:c1:45:98:12:69:e8:b9:
         95:bb:7c:d0:f7:7d:07:5b:d5:59:5f:ce:30:cf:86:f4:c2:90:
         fa:79:4b:27:6c:60:aa:d9:af:0f:d0:ef:64:c0:e7:eb:1c:f8:
         c9:2c:04:73:55:2a:81:88:43:6e:95:31:ae:8d:d4:d8:43:b7:
         09:c8:e1:a1:f9:72:cf:bf:9c:3f:f9:b3:1c:3c:4a:9b:0f:df:
         74:d6:b1:5d:fd:92:ea:dc:2e:47:54:18:09:cf:80:a2:05:78:
         53:48:fe:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:58:26 2024 by rpki-client on console-fra.rpki-client.org