Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
File:                     aspx8tn-K0nGdi89mg6L8zLf3tE.mft (raw, json)
Hash identifier:          BTGytVb/iBo762Lao0GcNZdqvU8Zti5/M+jl+3oE/1Q=
Subject key identifier:   B5:87:1A:4D:35:33:A7:0E:BA:10:07:17:65:74:5F:DC:BE:3C:66:ED
Authority key identifier: 6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1
Certificate issuer:       /CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
Certificate serial:       01903EC09162CDB538006DF9BC070B29E4E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
Manifest number:          0BC8
Signing time:             Sat 22 Jun 2024 07:02:05 +0000
Manifest this update:     Sat 22 Jun 2024 07:02:05 +0000
Manifest next update:     Sun 23 Jun 2024 07:02:05 +0000
Files and hashes:         1: aspx8tn-K0nGdi89mg6L8zLf3tE.crl (hash: j8PVHWqUxHT1AIPxecTFeFAwkB/D8/U4zeHsrqzsKJ0=)
                          2: lZgAX56xJ7ESX3QysCob7DlKdko.roa (hash: FGGMS/DJNqyABUbmVKY16yqMN6Twq7HR/c03KKr4hec=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:c0:91:62:cd:b5:38:00:6d:f9:bc:07:0b:29:e4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aca71f2d9fe2b49c6762f3d9a0e8bf332dfded1
        Validity
            Not Before: Jun 22 07:02:05 2024 GMT
            Not After : Jun 23 07:02:05 2024 GMT
        Subject: CN=b5871a4d3533a70eba10071765745fdcbe3c66ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:a5:50:60:5e:06:f7:b6:02:51:d4:48:c9:
                    d4:b4:67:2f:69:4e:41:18:d7:82:52:2d:e3:67:3d:
                    9c:8d:79:a9:08:59:80:0c:cf:77:bc:1b:bb:d8:c5:
                    da:ce:1f:ca:42:57:89:ff:9b:23:f2:77:0d:bc:d5:
                    99:be:82:e6:55:6e:c9:e0:41:c4:14:3b:73:c6:40:
                    07:3d:6d:a0:7c:d6:f7:a1:4f:20:d1:b0:a4:83:c1:
                    5b:87:a0:54:59:2f:2e:4b:a6:7b:cb:53:20:9c:51:
                    74:02:ad:a1:7e:05:ef:fb:cc:9e:22:76:83:c0:c0:
                    92:f2:d9:d1:21:fe:7a:0d:35:c0:9c:76:92:8b:4b:
                    74:0b:e3:e5:37:42:6e:2e:d4:b8:37:e9:07:c3:43:
                    d5:dc:fa:19:74:38:f5:d3:3c:6d:e6:d9:52:80:ac:
                    fc:82:24:56:7b:aa:f4:10:f8:17:b7:bd:66:2a:3d:
                    43:70:aa:5d:46:42:a1:8a:34:21:e2:e0:da:fb:33:
                    65:a1:9b:cf:b4:e4:4b:81:11:4f:2e:4d:d5:6d:37:
                    ba:74:43:42:e3:b0:fa:6c:2b:f3:c1:fd:05:71:35:
                    9b:dc:05:80:b4:27:5c:70:92:fe:34:46:5e:e3:4f:
                    12:0c:97:8a:59:9d:ae:37:f5:54:1b:09:1a:92:8f:
                    5e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:87:1A:4D:35:33:A7:0E:BA:10:07:17:65:74:5F:DC:BE:3C:66:ED
            X509v3 Authority Key Identifier:
                keyid:6A:CA:71:F2:D9:FE:2B:49:C6:76:2F:3D:9A:0E:8B:F3:32:DF:DE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aspx8tn-K0nGdi89mg6L8zLf3tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/1b0289-31ff-431f-9489-9a8d2bf00320/1/aspx8tn-K0nGdi89mg6L8zLf3tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:53:d5:1c:ce:e6:d1:31:0f:37:c4:6b:17:7f:c7:63:fd:31:
         64:f1:14:b7:33:89:bc:bd:a9:e5:3e:c7:38:b8:64:59:5c:d4:
         fc:6d:fe:63:a5:98:30:db:f2:f4:8f:12:2b:b7:70:1f:dd:33:
         21:d2:61:a5:36:3c:3e:3c:0f:44:f7:50:bd:5a:55:12:55:0a:
         36:96:98:98:33:52:68:cb:d6:cc:d7:58:43:ae:e3:c3:ed:ee:
         24:c2:c9:7c:53:81:db:93:df:56:23:6a:84:72:4e:80:81:f5:
         de:5b:17:51:83:8c:a7:d7:fa:2b:23:02:5c:93:80:83:e5:d4:
         1c:85:1a:7c:b7:d1:40:5d:03:7c:f8:a2:27:9c:29:51:02:ac:
         6c:d3:35:49:92:1d:23:a3:2e:b4:21:97:be:28:30:71:cf:dd:
         13:76:e9:4a:89:ea:3c:1b:2c:d0:76:9c:d7:37:0a:cb:75:9d:
         16:0a:64:19:f2:c9:d5:45:71:61:24:72:5d:dc:4c:f2:ea:33:
         54:e5:99:dc:9f:ac:1c:f8:62:84:36:78:04:a7:7f:bb:97:7c:
         36:7e:f6:85:49:96:04:aa:70:1c:44:78:37:69:ec:cf:49:a5:
         f4:d0:7f:e2:6b:02:cb:07:42:15:14:fc:5d:ee:ff:a4:78:1a:
         a8:08:2a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 09:50:07 2024 by rpki-client on console-ams.rpki-client.org