Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File:                     CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier:          tJdnkRvnP1q3e/Qcuac5VqRFi0BxIVkZ3rtgWG60MCw=
Subject key identifier:   C7:20:BE:6D:BD:18:C6:1A:A5:AB:42:A2:29:B2:9E:82:B1:05:D7:B1
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer:       /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial:       018FB981AD7C8DC2EF10662AA5933AF235C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number:          0315
Signing time:             Mon 27 May 2024 10:03:54 +0000
Manifest this update:     Mon 27 May 2024 10:03:54 +0000
Manifest next update:     Tue 28 May 2024 10:03:54 +0000
Files and hashes:         1: Cc-CsdfEw_venQ5QUqkUMrRNgbU.roa (hash: UVyq4Swrs/OmbNKiuuhZ9mVVycfW3t32QYAnnqJMKBc=)
                          2: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: Ur82N33Fo8Wyuy918MZiluV9D7Jqy47K1A1Yfyp55HI=)
                          3: _4B_8tnvXGLYwHEezek8yUZFX_c.roa (hash: RwrncYCCBOznxAmmMNClJHN/YbhTyPmFo2qxCBO7eoQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 10:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b9:81:ad:7c:8d:c2:ef:10:66:2a:a5:93:3a:f2:35:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
        Validity
            Not Before: May 27 10:03:54 2024 GMT
            Not After : May 28 10:03:54 2024 GMT
        Subject: CN=c720be6dbd18c61aa5ab42a229b29e82b105d7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:64:90:ba:e4:96:07:fc:e9:7f:2e:a5:53:
                    dc:98:27:1e:d1:c5:19:89:8b:f5:d9:89:f4:cb:a5:
                    04:ae:22:ea:a1:ea:74:8b:5d:16:03:d4:5b:bb:b0:
                    42:a6:7b:50:5c:a9:5a:b6:b9:da:73:4b:54:75:44:
                    a7:3f:3e:e7:3c:1b:2b:9c:69:65:90:61:54:6c:2a:
                    e2:a2:e3:4d:ec:e8:e3:99:28:d5:c6:1d:1d:50:ff:
                    e1:4a:f6:01:d4:1e:f1:03:74:d8:1d:d2:a0:62:6e:
                    41:88:f8:28:0a:c4:85:fd:5e:15:d3:44:4a:e7:f8:
                    7d:5c:45:5c:d5:24:6e:07:11:cc:de:8e:f2:88:e0:
                    5c:f1:80:27:47:4c:2e:c7:06:a4:d4:dd:5f:01:d4:
                    ea:52:c3:a7:3a:0e:36:36:b7:12:5f:1f:a1:23:a1:
                    8e:de:a9:e4:29:9b:68:a1:30:e1:f1:39:56:de:dd:
                    51:55:07:bf:98:22:5e:87:bf:34:f7:db:18:59:0d:
                    d3:ec:5d:bd:59:2c:e2:a2:46:6b:5b:3f:e2:ec:ae:
                    78:e7:42:78:cc:cf:70:ed:94:db:5a:1e:f9:a6:c3:
                    f4:93:2b:3d:bc:99:6e:e8:08:9a:fe:99:ee:c1:b4:
                    67:2b:9f:a4:4e:ff:56:f8:1a:5f:0c:a4:04:b8:5c:
                    84:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:20:BE:6D:BD:18:C6:1A:A5:AB:42:A2:29:B2:9E:82:B1:05:D7:B1
            X509v3 Authority Key Identifier:
                keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5b:52:f0:80:72:3e:e3:54:b9:03:6d:e9:87:9e:de:92:fb:
         29:93:06:b4:53:49:7f:96:9b:03:28:1e:eb:a9:28:12:f9:dc:
         a3:fc:3d:df:ed:3a:c0:95:18:66:00:bd:ce:02:aa:c2:81:72:
         40:4d:c7:bb:1f:c4:cc:23:8e:5a:36:48:ec:d8:fd:e0:21:8d:
         c6:52:ea:1d:57:ab:ee:f8:bc:b4:23:50:a4:fb:74:1c:cf:4d:
         2b:3e:38:ff:ad:80:8d:6d:bb:ca:1e:34:fe:41:68:e3:0f:0f:
         28:b8:88:91:48:97:48:af:c4:14:75:03:1b:a0:57:67:30:6c:
         c5:4b:c1:56:e0:6f:95:46:32:fe:27:c2:6b:85:23:00:08:74:
         8d:97:fe:4a:93:ce:1c:fd:ab:d4:ac:c0:da:54:7f:48:5c:8f:
         5d:5c:54:6a:91:e0:ac:5e:6e:e8:06:a5:4d:18:51:6f:b4:d1:
         87:8d:07:4c:d5:07:2f:a4:db:ab:f6:10:3c:6e:d5:12:9a:52:
         dc:71:e0:1f:08:c2:83:33:77:11:ae:17:98:ad:00:35:28:20:
         a8:51:c8:b1:bc:d0:c8:bf:e6:50:c4:63:17:74:f6:5e:81:bb:
         2c:43:fb:a5:32:39:2b:90:bb:a7:8a:f5:6d:50:57:96:02:2f:
         e8:1d:e5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 17:09:44 2024 by rpki-client on console-ams.rpki-client.org