Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
File:                     pavEOvztcvuSd4covuVxxnj1OFM.mft (raw, json)
Hash identifier:          9zwWkN44laSIy5txwyW9cN1ZssGQmJcXB/laJkg/LMM=
Subject key identifier:   11:00:C1:FA:4C:72:19:E1:6A:8B:A5:64:D1:DE:AA:77:43:97:9D:AC
Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53
Certificate issuer:       /CN=a5abc43afced72fb92778728bee571c678f53853
Certificate serial:       01901CA150D4B7F8345C4C7905B30C234B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 16:00:52 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:52 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:52 +0000
Files and hashes:         1: LAadCzCXSmxGBLyHFXGlsMUBllM.roa (hash: RHDggl9DR/TGEbVzBsCtbqYC4E3yIR/ilKZ0EW+A5vo=)
                          2: pavEOvztcvuSd4covuVxxnj1OFM.crl (hash: VUOEfvv/ZaVxLKYxdtXSb2oWgFyJGmwVvM/+jFxtGFM=)
                          3: vDZZPCTttl9LWfQmyI9VapvAKMs.roa (hash: EoSdisfC1jx5m/ary8JcT5Qo55zihyFh/7rGsO9z9sE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:50:d4:b7:f8:34:5c:4c:79:05:b3:0c:23:4b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5abc43afced72fb92778728bee571c678f53853
        Validity
            Not Before: Jun 15 16:00:52 2024 GMT
            Not After : Jun 16 16:00:52 2024 GMT
        Subject: CN=1100c1fa4c7219e16a8ba564d1deaa7743979dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:97:fd:50:6a:7c:19:58:76:b2:15:15:dd:
                    ae:af:19:13:bd:d2:3e:92:d0:37:d6:e7:71:c6:b5:
                    0a:f4:26:b2:0a:dd:95:07:18:46:97:44:93:30:e2:
                    b4:5b:4b:06:80:72:ff:bf:e7:21:2b:d8:ed:49:04:
                    44:2b:77:ed:08:c1:de:a7:8a:fd:b1:4b:db:e6:f1:
                    fc:ae:c9:56:8e:fa:3b:8e:64:0a:d6:e3:fe:d2:51:
                    7c:e2:26:b3:90:b8:f8:05:94:6f:a7:3b:34:81:b7:
                    32:a7:b8:bf:3a:99:84:07:74:f6:aa:8d:b1:cc:2c:
                    95:5e:d9:d1:ae:6f:e9:87:2c:ce:c9:da:e0:7e:81:
                    84:dd:f2:36:ea:f1:99:0e:eb:e9:18:a8:62:2b:07:
                    53:04:d5:10:65:d1:76:30:1b:71:3e:71:4b:ef:e9:
                    8a:dc:fa:46:65:45:29:78:ab:c6:e4:e8:b2:43:c0:
                    c8:fb:50:b1:9c:01:71:c9:7f:22:4b:2b:ac:6e:8e:
                    a3:14:9c:5f:30:ca:58:0b:30:8b:f7:a5:d6:ab:57:
                    1c:04:db:de:3a:99:8a:17:ad:27:53:03:41:41:9f:
                    a4:2c:57:e0:be:fb:1b:4f:56:b4:dd:8a:38:47:5a:
                    b5:95:d2:d9:53:c7:30:ce:7d:bf:73:f4:e3:6e:df:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:00:C1:FA:4C:72:19:E1:6A:8B:A5:64:D1:DE:AA:77:43:97:9D:AC
            X509v3 Authority Key Identifier:
                keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:92:59:84:54:f2:a4:5c:f1:30:6e:b7:63:c5:81:16:56:98:
         7b:0f:52:f2:43:d4:a4:b8:00:d6:34:9a:4b:4c:ce:fb:b6:9f:
         40:d1:34:55:54:b5:22:39:e4:5b:a6:45:b4:c6:12:9c:e0:a5:
         56:03:2b:f4:cd:04:1a:94:d0:9a:f1:dc:b7:63:83:50:ad:89:
         b9:11:d2:6d:f3:32:ec:ac:f7:f5:8c:e4:93:c8:86:56:c5:04:
         0f:24:fa:da:cc:49:fe:d0:70:4c:72:64:ce:bb:ad:8c:f4:9b:
         63:7d:12:60:bc:4f:13:73:3f:cb:a0:3e:6c:8c:a6:5b:04:cf:
         5d:42:f7:56:fb:69:ec:21:82:53:ef:e8:8d:bb:8e:1b:e9:9b:
         25:74:ab:69:ee:de:63:02:87:31:f7:64:03:0f:e5:b8:cc:47:
         ca:4b:c7:83:d5:3b:93:2f:be:3b:f0:d1:bf:78:1d:c3:95:36:
         ae:ac:f6:85:8d:7d:69:8b:91:6c:24:a4:36:54:93:57:f2:17:
         1a:e8:f0:e0:20:3f:ff:2c:c2:87:11:08:12:6c:6e:7f:5d:7d:
         47:7d:00:ce:ed:57:4d:8a:bd:5a:04:62:f4:f4:e1:39:6b:9f:
         26:de:9f:9c:22:78:75:e6:1a:a6:3a:40:94:ac:5d:10:50:c2:
         88:92:af:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 16:58:52 2024 by rpki-client on console-fra.rpki-client.org