Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
File:                     pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft (raw, json)
Hash identifier:          LfvnDkxvLhFtuhGh8a4DD3+7xV3pjFhTmsm6b2htr/w=
Subject key identifier:   35:A5:D1:EC:A0:20:59:9D:46:73:DD:83:70:59:09:EB:03:06:06:89
Authority key identifier: A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C
Certificate issuer:       /CN=a55004661a09e2675fc1599d4e40027d778c404c
Certificate serial:       0190429CEEC5B4D24499024A835167728D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
Manifest number:          0309
Signing time:             Sun 23 Jun 2024 01:01:39 +0000
Manifest this update:     Sun 23 Jun 2024 01:01:39 +0000
Manifest next update:     Mon 24 Jun 2024 01:01:39 +0000
Files and hashes:         1: YJuJ8o0WHgLprEYuuICdtS3WmuE.roa (hash: OV2v0gIzx+CswKqEYZ8Fqvtdnp2voGCUsdTuU3aYkZE=)
                          2: pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl (hash: QzoNIAw+khBa/SOOmVVLniqd8EDL6hiVa1SKe+FwCD0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:9c:ee:c5:b4:d2:44:99:02:4a:83:51:67:72:8d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55004661a09e2675fc1599d4e40027d778c404c
        Validity
            Not Before: Jun 23 01:01:39 2024 GMT
            Not After : Jun 24 01:01:39 2024 GMT
        Subject: CN=35a5d1eca020599d4673dd83705909eb03060689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:cd:1a:0e:33:7c:1c:f1:d5:6c:b2:1c:82:
                    6e:69:93:36:6c:40:d8:5c:96:68:21:56:9e:41:93:
                    85:56:24:52:2b:29:8b:ec:73:0e:84:57:60:ff:ec:
                    ee:bf:11:d1:3e:ac:18:df:1f:59:2b:54:e9:82:ee:
                    ca:03:a4:7b:00:c7:cc:98:3f:27:58:60:b2:58:bf:
                    53:a1:3f:5c:39:49:45:35:a4:b6:03:89:54:3a:ac:
                    9a:94:ad:8d:d8:8c:c5:1b:34:e9:a5:16:df:94:ae:
                    c8:2b:bb:f7:63:aa:21:56:a8:72:93:33:1c:3d:44:
                    03:97:ad:c0:bd:75:5e:b4:03:37:14:b4:49:91:b4:
                    67:de:d9:dc:1c:92:d2:a5:b5:b5:57:cd:b3:70:5c:
                    18:df:58:7f:e7:cd:f1:d8:b6:d2:14:18:62:70:e9:
                    3d:c6:ac:94:a5:d5:e0:c7:69:c7:6f:ee:e0:c1:52:
                    3b:e4:56:a4:80:20:75:b4:cd:4d:58:4d:9a:f4:29:
                    b1:3d:70:b3:79:5a:43:ec:90:3c:f3:a7:b8:a9:f8:
                    7f:53:b4:fb:59:5c:07:d8:bf:f3:a4:41:fa:ce:84:
                    63:ec:ee:23:94:a8:b5:b1:a2:a8:3a:e9:cf:39:6d:
                    45:cd:a2:55:18:84:4e:3f:bb:bd:09:3c:ba:22:73:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A5:D1:EC:A0:20:59:9D:46:73:DD:83:70:59:09:EB:03:06:06:89
            X509v3 Authority Key Identifier:
                keyid:A5:50:04:66:1A:09:E2:67:5F:C1:59:9D:4E:40:02:7D:77:8C:40:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVAEZhoJ4mdfwVmdTkACfXeMQEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2cfdfd-1b3b-4aaa-bd82-3f78bc3de3a8/1/pVAEZhoJ4mdfwVmdTkACfXeMQEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:4f:a0:be:05:3b:59:cd:b0:a6:94:94:9c:d7:2d:55:9c:31:
         a5:de:d2:b6:2f:7e:7b:10:5a:99:f0:3f:c8:bd:1d:e5:9c:8c:
         e7:62:ba:9b:ab:7f:3a:35:fd:94:d3:fd:9f:28:d4:4a:5c:58:
         f5:e1:a4:78:2b:a4:53:ff:36:c7:2a:13:f0:b5:9c:09:38:32:
         62:14:13:2f:f2:de:51:ed:32:4c:98:53:e7:38:78:92:2d:0e:
         74:61:80:40:0f:c5:7c:38:00:0d:ad:fa:61:98:47:83:1c:ad:
         7c:8f:1b:b3:9e:8d:b9:18:02:80:24:49:4d:1b:92:5c:bf:de:
         a2:e0:d5:a3:49:2d:19:6e:0b:1c:bc:04:66:1d:cd:1c:9e:3c:
         5b:7f:ec:92:8f:1c:13:5d:21:a7:65:7c:a7:c8:c7:24:b3:ba:
         8d:ce:c7:90:a0:64:d7:d9:a2:9f:6d:37:5c:98:24:96:35:7c:
         3a:5b:bc:e3:19:66:2a:b6:23:d1:06:e7:18:50:36:23:10:80:
         f4:9f:87:46:1a:0f:e9:d3:92:e0:74:cc:39:c1:9d:e9:00:57:
         0b:71:6e:5a:24:f1:0b:ef:42:d5:33:cf:d1:56:8e:fa:1e:f2:
         b8:20:97:5d:fc:93:f4:1d:54:bb:67:24:93:b1:70:ea:13:3e:
         0f:59:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:20:31 2024 by rpki-client on console-fra.rpki-client.org