Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
File:                     aaUdRFt2erm2YncC5KKzkE0gP3c.mft (raw, json)
Hash identifier:          9n3LZjFLHkIy0DFh6faV3RFpy4NXtFIO4iGbdRnAZYc=
Subject key identifier:   3F:C4:8F:BE:14:8E:5A:5B:2D:43:D4:54:F6:6E:32:52:1D:A8:E3:11
Authority key identifier: 69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77
Certificate issuer:       /CN=69a51d445b767ab9b6627702e4a2b3904d203f77
Certificate serial:       01901EC6C4011ED971203B1A44F6AB514138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
Manifest number:          1158
Signing time:             Sun 16 Jun 2024 02:01:01 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:01 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:01 +0000
Files and hashes:         1: 1IXSAmjacdFd6gumHmkScL3SCco.roa (hash: WKknGhb1u0Elfl9M6tE0Ox2mh3oi2eKWVuGYATf+T6g=)
                          2: aaUdRFt2erm2YncC5KKzkE0gP3c.crl (hash: NF1K8BmPVdjlK/Ab5b3kkk+tBea4GvOSd+b/l2yefqg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:c4:01:1e:d9:71:20:3b:1a:44:f6:ab:51:41:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a51d445b767ab9b6627702e4a2b3904d203f77
        Validity
            Not Before: Jun 16 02:01:01 2024 GMT
            Not After : Jun 17 02:01:01 2024 GMT
        Subject: CN=3fc48fbe148e5a5b2d43d454f66e32521da8e311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:e0:85:92:44:eb:f9:10:92:e4:7d:7b:85:
                    fd:b6:00:1f:06:d8:23:9d:de:28:3d:e2:a5:2f:5a:
                    32:60:e3:82:7c:05:d8:88:ea:f1:47:f1:8c:b6:17:
                    47:76:35:bb:f1:1e:5c:63:1d:ee:97:d8:61:83:8f:
                    1f:1b:ba:7d:6b:e3:96:85:2f:52:f6:bf:6a:a7:9c:
                    d5:ad:46:8b:a4:32:f4:a7:15:11:1e:4f:7e:84:da:
                    d3:5b:9f:bb:6c:e6:cc:92:00:cb:02:56:1d:9a:81:
                    f2:e0:63:5b:d2:5e:b5:d9:fc:02:71:b8:7b:2b:8b:
                    f9:5c:a6:fc:82:34:f8:f0:3b:6a:07:4f:8c:9a:76:
                    5e:51:fb:bc:01:9b:5b:ca:7f:49:d5:81:21:3b:a6:
                    76:51:9c:f7:70:5d:3f:0b:54:1e:1f:29:7d:6f:55:
                    b1:54:ee:55:d8:c3:01:de:e4:e3:2e:fd:36:7e:76:
                    51:2f:cd:6a:a6:e2:41:c2:90:1e:d5:20:88:f2:be:
                    da:3a:f1:1f:7f:38:4b:ce:00:1e:b7:27:9d:2e:7a:
                    1d:dd:b8:94:06:b1:33:f0:ea:bd:44:06:88:ff:d7:
                    1c:15:39:b0:03:31:ae:59:2c:24:73:42:f1:9d:f5:
                    23:63:4a:1f:f5:6a:b8:f3:d9:18:2e:f6:ea:e1:2f:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C4:8F:BE:14:8E:5A:5B:2D:43:D4:54:F6:6E:32:52:1D:A8:E3:11
            X509v3 Authority Key Identifier:
                keyid:69:A5:1D:44:5B:76:7A:B9:B6:62:77:02:E4:A2:B3:90:4D:20:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaUdRFt2erm2YncC5KKzkE0gP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/2ba66e-5b3e-41fe-8a09-70520ea76369/1/aaUdRFt2erm2YncC5KKzkE0gP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:78:20:90:1f:b2:3c:82:ce:3c:f2:a9:27:b0:3a:0a:9e:3a:
         c8:57:59:09:d5:41:70:bc:74:dd:8a:56:fe:24:25:08:a4:d5:
         f7:e7:e1:2b:c7:b8:ca:1e:c3:0a:ef:6e:91:8e:61:af:a3:fe:
         3d:e6:bf:06:20:94:4f:d0:cd:e6:9d:34:6f:65:df:a1:19:4e:
         75:f0:fb:20:36:b1:02:04:c1:f1:8a:04:9a:94:80:97:d3:f9:
         ed:37:19:78:2e:3d:d7:02:74:c5:24:08:a6:30:43:1b:72:45:
         a9:f8:d7:e8:1e:c9:06:85:e5:20:2f:e5:3b:b9:a6:eb:61:89:
         9a:d6:0d:5e:b6:40:19:06:a3:81:32:28:2a:30:ec:04:f2:66:
         39:c4:c7:e2:03:01:35:79:19:47:f5:50:f2:90:ab:f9:07:08:
         82:89:7c:61:84:ec:6e:81:c1:9b:7a:63:94:c9:06:87:80:e9:
         08:f4:a3:a7:45:ab:ce:34:3c:ee:13:c3:16:ed:bb:67:bb:30:
         3a:04:4a:bd:46:52:8e:2d:be:46:9c:dd:fb:47:20:02:ea:a5:
         18:09:2a:a8:de:e4:06:7a:89:62:6a:b1:26:7c:17:f2:49:64:
         49:ee:a8:3c:96:93:94:13:89:2b:67:7f:86:9b:ab:d4:40:c0:
         8e:68:8c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:44:14 2024 by rpki-client on console-fra.rpki-client.org