Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
File:                     aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft (raw, json)
Hash identifier:          1+Jv9yxUbINEE/JVcqNnQR9fIn9H6mJ5md/V4j16yEQ=
Subject key identifier:   E2:5C:28:4D:6D:6A:E3:26:2A:63:6C:B7:7B:DD:85:22:A0:7D:03:A6
Authority key identifier: 68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89
Certificate issuer:       /CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
Certificate serial:       01901E591BDE7203FCEFB332DDE06694E5E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
Manifest number:          0FD2
Signing time:             Sun 16 Jun 2024 00:01:14 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:14 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:14 +0000
Files and hashes:         1: aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl (hash: TlidSVv0LnAL02IndF+In+2OpaL79T5cRkpXOjGaRVA=)
                          2: maxfnIrv5kMwjDOhma71tlr06s4.roa (hash: 96cOXCNPzyxHyTPC+7UqYSvLvosT3o61JBuwzLyd2vE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:1b:de:72:03:fc:ef:b3:32:dd:e0:66:94:e5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d1ef163a661cce5bc62117ec763758b1b5bb89
        Validity
            Not Before: Jun 16 00:01:14 2024 GMT
            Not After : Jun 17 00:01:14 2024 GMT
        Subject: CN=e25c284d6d6ae3262a636cb77bdd8522a07d03a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:13:f1:00:08:0c:25:9f:4a:27:53:3e:77:
                    11:04:f0:0a:a5:64:50:09:69:63:2e:60:bb:b3:db:
                    4e:9d:84:7b:6f:21:16:b4:45:84:4c:82:b4:a4:c7:
                    b9:c7:b9:18:03:9b:21:23:a6:a0:7f:d4:dd:e0:85:
                    71:ca:45:3b:38:ba:96:4e:77:ba:48:1a:09:00:96:
                    78:8f:a3:0e:83:b5:4a:0e:2e:54:32:7a:a7:30:2a:
                    32:e6:7e:95:ee:60:e6:fa:30:93:88:2c:10:ed:11:
                    ff:45:36:27:a9:d3:47:ce:dc:fc:b2:11:5e:ff:db:
                    98:b7:aa:27:ef:7c:a5:b4:49:6b:5e:35:94:4c:11:
                    8a:45:9b:4d:22:ee:e1:d0:1b:c3:74:e5:74:b0:41:
                    06:5c:d2:f0:3e:a6:d6:c7:0a:fa:6a:1f:0c:b1:f3:
                    da:8a:3e:49:35:e5:ba:fe:ef:9e:5f:57:c6:bd:37:
                    3e:42:af:5a:15:75:bc:de:e1:35:cf:ac:e3:5c:bb:
                    59:71:f9:ba:bb:0a:3f:be:9b:6a:96:39:39:81:e0:
                    df:d5:cf:e6:bb:29:8f:3a:34:96:9b:98:5d:d2:b5:
                    f9:d1:12:2b:88:63:f5:49:73:06:0c:dd:4c:2c:34:
                    9e:7f:dd:70:11:4d:1d:86:03:ee:33:18:64:ca:49:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5C:28:4D:6D:6A:E3:26:2A:63:6C:B7:7B:DD:85:22:A0:7D:03:A6
            X509v3 Authority Key Identifier:
                keyid:68:D1:EF:16:3A:66:1C:CE:5B:C6:21:17:EC:76:37:58:B1:B5:BB:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNHvFjpmHM5bxiEX7HY3WLG1u4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6aa017-2fe8-4cd8-8a7d-3a8a61006a4f/1/aNHvFjpmHM5bxiEX7HY3WLG1u4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:68:a6:94:48:26:be:e5:16:37:47:09:bf:8d:1f:63:dd:18:
         d4:36:5a:61:21:9c:23:a6:d7:86:2f:34:90:e6:bc:e2:84:fc:
         fd:8b:55:bb:3e:03:4e:4f:c1:52:ac:8d:30:82:0b:f1:90:19:
         c6:0e:40:61:9a:2a:00:b5:ed:dd:7c:cf:fc:af:c8:d9:22:67:
         23:e5:c9:48:58:32:3b:9e:56:c0:71:08:a7:07:b2:ba:1b:47:
         61:1a:01:8b:f6:dd:b4:44:9b:55:7c:5b:1c:24:9d:fa:62:52:
         a1:82:b3:d3:5c:75:e3:3a:9d:c3:01:0b:09:3a:d6:84:f7:57:
         3a:68:21:5c:f8:87:1d:b0:94:0f:2f:d1:18:5c:f7:c0:69:04:
         9a:99:23:06:db:82:bf:09:b1:03:4d:c8:b6:b0:ac:46:75:4a:
         76:cb:04:5c:43:9c:6f:84:dd:1a:2e:d6:82:43:4f:be:d5:f0:
         00:23:ec:0f:e8:0e:ba:51:31:89:8b:5b:5b:8f:17:93:c3:5d:
         5a:fd:fe:99:b7:01:ef:39:d7:4d:25:78:3e:94:73:62:05:34:
         f1:92:0e:0d:0d:14:58:a7:c7:e2:8a:62:d7:e9:2b:b9:60:9f:
         9c:93:58:f5:03:8e:b8:2a:0d:d1:05:2d:69:8a:e7:8a:1f:f6:
         37:2b:15:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:07 2024 by rpki-client on console-fra.rpki-client.org