Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
File:                     k680jsWk5l4MsTeCGuahOe1_rAA.mft (raw, json)
Hash identifier:          amuIfpLd1MxBxXvBahYtWVu0DABLcQrNJdClsRn7l1Y=
Subject key identifier:   51:4E:24:C4:1C:0B:3D:99:5C:44:93:FF:85:56:02:C9:16:33:D6:93
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Certificate issuer:       /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial:       01901DED5A2AA2E6EC618F0DF9176ADB035D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
Manifest number:          1156
Signing time:             Sat 15 Jun 2024 22:03:32 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:32 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:32 +0000
Files and hashes:         1: D_XMm6KH2cBFaJNIWr-c0ofl2Wg.roa (hash: SsxZZOiNSBo0oYcebMhAfAnW83h0334qbG0xOO+JVIQ=)
                          2: k680jsWk5l4MsTeCGuahOe1_rAA.crl (hash: skczu1eKAf/FQAof+G2zVHCaCr4L3EebG31Et+e/ees=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:5a:2a:a2:e6:ec:61:8f:0d:f9:17:6a:db:03:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
        Validity
            Not Before: Jun 15 22:03:32 2024 GMT
            Not After : Jun 16 22:03:32 2024 GMT
        Subject: CN=514e24c41c0b3d995c4493ff855602c91633d693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f4:64:31:62:ef:bb:4d:12:b3:24:32:b5:ff:
                    07:5b:f3:e5:4a:40:52:63:9c:4c:d8:24:79:d3:e6:
                    68:a0:38:fe:2e:55:46:d0:55:7e:b6:8a:29:33:0f:
                    ed:98:ed:b7:3d:15:62:bc:1e:4c:64:78:19:4b:2b:
                    4f:79:15:aa:e1:a4:84:1f:1c:65:9e:ed:1e:65:45:
                    fa:1f:6b:a4:ec:a9:ad:39:de:bf:0a:14:d5:90:37:
                    a0:ab:44:6d:6b:fa:af:20:6c:3b:57:87:98:53:58:
                    b8:ec:5a:4d:08:57:8c:07:2a:d3:58:70:e7:3d:ac:
                    39:c7:e2:85:a4:9d:fe:c0:a4:ba:c3:5c:f8:bc:de:
                    dd:31:15:28:4b:81:4b:72:f1:35:4b:40:13:08:58:
                    73:fc:25:33:69:25:14:51:8b:97:d9:91:c1:6c:32:
                    e0:1b:3b:3b:7a:08:20:6b:5a:39:c9:d2:0d:73:70:
                    e2:d4:aa:92:93:43:3e:a7:56:06:f1:92:af:df:e0:
                    fb:24:52:92:05:33:61:ad:74:6c:e8:f8:9f:ad:43:
                    e7:c9:4f:1c:9c:3f:e6:40:39:a8:5b:8e:c4:08:35:
                    dd:28:75:b3:94:51:e7:0d:96:cf:0d:ce:2c:73:d8:
                    e1:8f:07:24:cd:85:15:e4:9e:83:c7:db:e8:83:b1:
                    6e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4E:24:C4:1C:0B:3D:99:5C:44:93:FF:85:56:02:C9:16:33:D6:93
            X509v3 Authority Key Identifier:
                keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:19:70:76:b7:3b:24:d1:5f:c7:ea:ee:b4:17:30:02:c2:59:
         01:7e:6f:16:12:c6:43:c4:33:a1:fe:11:7d:c6:2c:08:38:fd:
         61:f4:b4:3f:14:bd:5f:02:e5:53:c9:7b:d6:79:fa:85:b2:87:
         ff:e4:ed:d9:84:48:91:1c:ca:94:4d:39:1b:2a:8f:88:6f:80:
         e9:f8:28:ed:87:d4:62:5b:1c:42:3c:85:d5:7e:cc:13:fa:87:
         cd:22:ac:a6:0d:9f:fd:4f:c3:9c:df:bd:6d:88:e9:9f:08:9d:
         87:29:d5:b1:c5:ef:4f:97:2a:87:68:2e:32:13:ab:09:4c:89:
         3d:87:e3:49:de:60:69:b6:62:9a:b7:ac:c4:11:c5:90:fe:5d:
         07:82:45:6e:3f:06:b2:82:91:2c:b3:09:f6:07:30:60:83:8e:
         66:f6:33:aa:69:11:79:94:b4:b1:29:c3:db:78:29:2b:7e:d5:
         85:86:60:e4:69:e7:ee:bc:76:c2:78:0b:93:00:c8:43:81:82:
         7c:fc:95:c1:64:a6:f4:94:ef:b7:08:43:be:c4:43:cd:d3:58:
         a6:2e:0e:34:eb:94:aa:73:13:23:aa:c6:bc:f3:00:f2:84:87:
         40:c3:7b:e0:f6:4d:31:00:00:4b:d6:35:16:f6:30:4e:f5:59:
         6a:8b:91:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:03 2024 by rpki-client on console-fra.rpki-client.org