Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
File:                     xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft (raw, json)
Hash identifier:          ZvWmht9GpCYOab5FN1ANy/YQEHYwKE+4PeqTYG/rP98=
Subject key identifier:   0E:87:93:C1:DE:97:18:FA:6B:FA:AB:60:76:C9:35:E5:4B:70:C6:9F
Authority key identifier: C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA
Certificate issuer:       /CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
Certificate serial:       01901EC6B976E3DC9D9592C7EA88F101D517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 02:00:58 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:58 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:58 +0000
Files and hashes:         1: r_kWYfvQeovStTU0l3lWPtsHw6o.roa (hash: AompfW0ydqgajZ/pwwP78IWr9/umHYi2bLRAKo183YU=)
                          2: xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl (hash: cH/yrIIzk/2LwQS4r8dstfRfdoGTMIM2U1WR6g+1cEg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:b9:76:e3:dc:9d:95:92:c7:ea:88:f1:01:d5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c71ef0ad43c7b8e26c175fdc1f1696d0081dc4da
        Validity
            Not Before: Jun 16 02:00:58 2024 GMT
            Not After : Jun 17 02:00:58 2024 GMT
        Subject: CN=0e8793c1de9718fa6bfaab6076c935e54b70c69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:b8:fa:08:92:1a:5d:33:6c:1a:d8:5f:5f:
                    31:fa:9a:18:28:e0:26:1d:25:df:e7:90:03:97:7e:
                    c6:86:b6:28:f2:1b:25:4f:0d:59:72:d0:b7:49:63:
                    da:82:d6:03:d9:9f:60:89:98:e4:06:11:c7:59:32:
                    2c:8f:d7:f0:68:89:dd:9c:f4:a7:59:b1:5e:3f:d7:
                    c4:8b:b0:95:3e:0a:36:c3:40:14:64:49:01:f4:f2:
                    bf:14:64:c7:8d:a4:c7:a1:64:60:62:b7:73:e0:c3:
                    c2:62:22:b2:a5:08:1e:64:2f:57:4c:83:e8:3b:eb:
                    9c:6e:7b:8b:03:3a:86:01:04:38:fa:03:80:4b:f1:
                    cc:06:f9:ce:56:53:a8:5b:5e:a8:04:4c:a9:48:63:
                    4f:fa:c4:9f:28:55:41:7c:b5:56:7c:67:d7:6d:99:
                    c5:ba:82:1a:e8:9c:ac:e2:e8:49:2a:f2:4f:b1:b4:
                    8e:36:96:ba:28:eb:14:2e:07:82:c2:d9:d0:03:49:
                    74:2f:be:26:c3:d3:a3:4e:c0:6b:54:ff:97:1d:2c:
                    c6:97:e7:03:d7:77:a3:f1:9b:d9:4c:16:73:9c:10:
                    07:c6:15:91:5d:82:39:98:9c:3a:e8:5a:c9:f5:f1:
                    a0:6b:5e:07:fa:8d:a4:b0:64:1e:21:50:30:13:2e:
                    6a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:87:93:C1:DE:97:18:FA:6B:FA:AB:60:76:C9:35:E5:4B:70:C6:9F
            X509v3 Authority Key Identifier:
                keyid:C7:1E:F0:AD:43:C7:B8:E2:6C:17:5F:DC:1F:16:96:D0:08:1D:C4:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx7wrUPHuOJsF1_cHxaW0AgdxNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/01c3aa-a2a7-42e7-8046-2243e36983e3/1/xx7wrUPHuOJsF1_cHxaW0AgdxNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:51:2a:d4:71:ee:1c:06:08:11:8f:a2:53:dd:cd:cb:5a:c5:
         ba:14:c7:75:f3:ff:f8:b6:01:1c:87:95:1c:90:48:3d:51:3e:
         51:f2:8e:2d:21:1b:48:8f:31:e1:05:ec:e5:6d:7a:7c:30:92:
         4a:0d:b1:8b:e3:cb:0a:88:d6:ca:d9:36:f9:96:80:e7:d5:87:
         ed:3e:0b:06:a5:47:7a:03:1a:f5:c5:32:0d:b7:c9:e4:65:3b:
         6b:8c:af:83:4c:1d:63:83:ee:f4:ea:c4:94:23:17:52:be:b4:
         fa:bf:f7:17:57:43:e6:67:29:3f:3f:5d:f3:29:87:f5:e3:d8:
         50:90:82:8a:37:33:bc:0b:9c:95:f0:c5:a6:d0:9f:fc:76:10:
         ca:eb:50:92:e7:47:aa:0d:30:9b:eb:bb:df:07:9f:67:0c:c1:
         fe:8c:c3:b3:2e:45:81:21:0b:da:e9:68:02:9f:a0:ab:ba:05:
         ae:3b:8a:bf:c0:10:dd:a3:ec:b1:f7:43:5f:3a:01:f9:b1:4d:
         e0:98:9e:8a:41:a9:cf:77:ba:11:bd:74:83:ec:06:0e:0e:ab:
         cb:59:3c:9d:cd:f8:9d:ec:aa:54:b0:74:91:a6:e9:c6:72:47:
         e1:bd:ab:1c:54:3c:39:f5:a0:9f:d4:d4:85:31:99:7a:c1:f0:
         a7:3b:4f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:39:18 2024 by rpki-client on console-fra.rpki-client.org