Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
File:                     xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft (raw, json)
Hash identifier:          ZjI9sLIW3TUvDa2FWzNmdP18FvhJxGyPbLZib+2zT74=
Subject key identifier:   47:62:49:21:F4:37:AB:86:B1:D1:D4:15:DF:AC:1B:0B:21:73:96:B8
Authority key identifier: C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53
Certificate issuer:       /CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
Certificate serial:       01903773822493AB05D50815E7477E18EB2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
Manifest number:          11D2
Signing time:             Thu 20 Jun 2024 21:00:35 +0000
Manifest this update:     Thu 20 Jun 2024 21:00:35 +0000
Manifest next update:     Fri 21 Jun 2024 21:00:35 +0000
Files and hashes:         1: LsXgEYzwFOd4vra1wnmDOc0d0pw.roa (hash: me/ISHTWnBbg3S3Q3iFgHmqpS89XOjPNlmsPXJAzxpw=)
                          2: xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl (hash: 91DfzpUqdZeW+R9YA7qeuiFYftNBkZL5s3YXlcBrCv0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:73:82:24:93:ab:05:d5:08:15:e7:47:7e:18:eb:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c415e9274e9d1fe46203c1e06b1b0dc85e612453
        Validity
            Not Before: Jun 20 21:00:35 2024 GMT
            Not After : Jun 21 21:00:35 2024 GMT
        Subject: CN=47624921f437ab86b1d1d415dfac1b0b217396b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:05:6f:2a:95:fa:01:7f:8c:07:59:6e:6d:59:
                    66:f9:b3:d4:b1:10:98:bc:9d:ae:7e:8a:65:eb:9e:
                    4f:89:35:71:f3:e5:b1:06:8f:06:a9:17:a3:09:42:
                    7f:82:92:e6:19:04:b3:8e:78:04:d6:1b:81:cf:54:
                    0d:03:65:f7:0a:a1:0a:77:19:6c:c1:d3:a8:92:87:
                    25:a9:71:8d:e2:cc:ce:fa:7c:ec:fd:ae:78:09:e4:
                    a1:ac:fd:7c:37:3e:de:4c:0f:2f:97:f8:fa:e3:34:
                    91:f9:9a:df:98:06:fc:a5:00:24:82:1b:d1:c4:89:
                    56:37:5d:8b:78:f6:3b:64:4f:d0:fe:c4:15:f0:74:
                    dd:37:d3:d8:69:b9:f8:0c:85:02:f5:54:81:34:94:
                    42:16:19:16:2e:91:6a:3a:09:0d:f4:ef:a2:e6:36:
                    a2:2f:8a:fe:f0:54:d9:93:f7:b6:0a:a2:d7:6e:fd:
                    24:37:80:c3:e6:da:36:08:47:89:45:1f:f9:7c:e4:
                    46:72:6a:2e:49:80:6d:6e:cc:e5:ac:13:2c:44:6c:
                    8c:76:81:ed:7e:45:cd:5e:24:4c:67:ff:70:12:74:
                    7a:97:f6:e4:8b:7b:5f:22:d8:9f:69:0d:8b:a8:e1:
                    a9:c1:3f:c5:8a:d2:69:44:2a:df:d9:4f:ba:b1:05:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:62:49:21:F4:37:AB:86:B1:D1:D4:15:DF:AC:1B:0B:21:73:96:B8
            X509v3 Authority Key Identifier:
                keyid:C4:15:E9:27:4E:9D:1F:E4:62:03:C1:E0:6B:1B:0D:C8:5E:61:24:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBXpJ06dH-RiA8HgaxsNyF5hJFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/37b34d-1212-4eca-a236-8f62d7dc1699/1/xBXpJ06dH-RiA8HgaxsNyF5hJFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:85:41:b5:14:cf:1e:4e:1b:d2:e4:a6:f0:a3:f7:18:81:98:
         59:01:6c:8c:85:78:a9:64:cd:0d:b7:eb:cf:bf:ec:3d:5e:21:
         40:61:f4:79:d6:7f:3d:5e:9f:27:f8:65:51:cc:1b:4f:f5:e6:
         49:16:2d:58:51:a7:f1:32:b2:59:57:9c:b3:90:66:6a:e4:f2:
         7e:e4:17:da:c0:52:56:c7:02:33:8c:a2:85:5f:29:07:31:45:
         5f:e7:74:6e:93:33:f9:7f:e6:6d:e5:6f:2a:ec:76:9b:b6:a8:
         35:46:a1:45:1e:dd:e3:05:e8:fc:9d:a5:8b:dc:c5:74:f9:39:
         d5:2b:45:91:dc:31:9e:09:1f:d5:dc:d9:8f:71:f0:8d:b4:24:
         53:dc:9b:0d:a7:0e:b6:7a:63:cd:0e:71:31:08:b1:4c:a5:93:
         df:4b:e9:43:46:47:39:1a:2f:6e:54:cd:97:11:b6:3e:4f:42:
         97:82:32:4e:41:85:65:fe:26:48:cd:f1:b4:eb:16:14:7d:40:
         bd:70:f0:29:bf:11:32:c5:0e:ba:fa:bc:95:56:81:97:1b:12:
         19:fe:8c:a4:6f:cb:07:92:fa:90:70:65:1a:11:d7:a2:d1:70:
         37:6a:51:5f:69:7f:15:0c:d0:00:ed:cc:b6:4e:1e:92:37:1c:
         e8:fe:68:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:08:17 2024 by rpki-client on console-fra.rpki-client.org