Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File:                     xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier:          OB0B13Hf1TcK1+h3c+q/RhHfPKIiRGPQdheafk5GWJI=
Subject key identifier:   37:F6:F7:48:14:5F:50:D4:12:01:AD:AD:58:00:34:9B:3F:B8:4B:C5
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer:       /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial:       01901E59265E29D7EDD7C0AB23BFF2CC1550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number:          0192
Signing time:             Sun 16 Jun 2024 00:01:17 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:17 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:17 +0000
Files and hashes:         1: nCkX2y3Z1L_mEhP4KCw6jFbhDKM.roa (hash: vepIgGWrBFv1QQA7NE739SLiG0/5GvJ6fTZP5yg3YiI=)
                          2: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: lJ8RCNXciNdoYbaPzF+wOBBOXrqnZJnSuLPZvddWwnI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:26:5e:29:d7:ed:d7:c0:ab:23:bf:f2:cc:15:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
        Validity
            Not Before: Jun 16 00:01:17 2024 GMT
            Not After : Jun 17 00:01:17 2024 GMT
        Subject: CN=37f6f748145f50d41201adad5800349b3fb84bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:20:9c:be:f6:fb:92:0c:26:27:4a:a6:14:f8:
                    da:ca:c0:85:6a:3b:0f:3c:19:ea:f6:51:0e:30:04:
                    b1:18:29:d3:17:7c:4f:3c:82:a7:af:53:61:93:a2:
                    53:ae:42:0c:01:86:85:55:a1:74:c7:76:67:55:aa:
                    41:3a:24:06:c2:1b:f2:8d:4b:13:9a:26:d7:9e:09:
                    2c:ab:c3:8f:ce:a1:90:c1:2d:b7:45:f3:89:cd:5e:
                    3e:56:fb:92:bc:f3:72:db:28:e4:3f:76:a9:6d:7d:
                    7a:da:dd:c3:19:b3:13:97:27:98:9f:47:9f:92:6b:
                    cc:13:83:54:95:d1:50:70:8a:dc:a1:6e:21:fb:0a:
                    16:b0:5e:bc:18:62:62:50:31:53:7f:55:55:4c:90:
                    88:b9:a7:6e:05:5f:af:09:a5:3a:47:bf:e8:d4:b4:
                    be:82:3f:51:3c:6e:bb:d4:b3:f8:c6:26:15:22:ff:
                    79:57:7b:66:f9:58:27:d6:78:ac:35:d3:19:ee:21:
                    c9:4e:84:8d:86:a7:f5:23:ca:ab:ee:76:6f:e4:db:
                    10:88:7d:c9:2f:5d:bc:84:01:3a:0b:1e:09:6d:ad:
                    58:46:c2:09:26:66:96:87:fc:b1:4c:9c:77:de:85:
                    99:12:9a:52:94:3c:1d:39:7c:74:9b:7f:1d:a8:5a:
                    fa:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F6:F7:48:14:5F:50:D4:12:01:AD:AD:58:00:34:9B:3F:B8:4B:C5
            X509v3 Authority Key Identifier:
                keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:17:80:cf:ea:91:9e:62:b7:9e:89:fa:ad:43:92:08:96:cc:
         3b:43:fb:8e:58:ce:1d:ca:ad:55:fe:1a:43:b7:6a:84:9b:a7:
         ab:0e:dd:1e:74:74:49:6b:b1:eb:53:82:af:8c:09:9b:5a:a1:
         c6:83:ae:a7:0c:23:19:a8:ca:79:98:81:fd:68:db:06:f7:3b:
         8b:96:47:78:64:9a:7b:25:52:a8:2e:d2:66:be:fd:94:19:30:
         08:06:72:3f:58:fd:2d:02:ba:b6:6e:1c:4c:f2:42:ef:de:5e:
         86:48:26:8c:ee:62:67:05:da:34:cb:48:7e:f2:42:70:39:ae:
         af:a5:bd:de:99:e0:fc:19:e6:5a:d1:72:ea:c6:77:30:82:18:
         fb:32:1b:7f:3e:ef:8a:2b:94:12:e9:86:0c:6c:91:69:a0:9f:
         1e:1b:c9:6e:ba:a6:70:24:9b:9a:75:14:06:b3:9c:36:19:2e:
         9f:26:58:08:0a:21:7c:93:92:b4:85:0e:b8:4c:a3:b6:be:af:
         11:78:d4:da:52:62:8a:15:83:74:57:de:d3:da:ad:1e:fd:ac:
         ab:d0:15:1a:aa:b7:ea:5c:27:73:10:0b:79:7e:80:13:16:54:
         31:9d:15:ba:21:3f:a4:af:88:35:04:1b:ec:69:76:29:e0:20:
         19:08:da:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:19 2024 by rpki-client on console-ams.rpki-client.org