Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File:                     xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier:          e6HECLOZp889Nq+Dm8K6y04YZNm5HqH7zikhK5/qfAs=
Subject key identifier:   2F:D3:97:DD:E2:8C:60:F2:7C:B3:3C:98:80:87:7C:FC:97:2D:42:50
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer:       /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial:       01901D45DB68B7187E1656A29FBBE1F7E0C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number:          0AFB
Signing time:             Sat 15 Jun 2024 19:00:35 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:35 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:35 +0000
Files and hashes:         1: QC3TfjMaIfxruxgThav7r-q2ELU.roa (hash: umUZEYMkqyvjNHW2ughixivPmUQX77fyN9xSBHFdLDQ=)
                          2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: ATgnJOBomtx4RWvNeUxjL5AmMjpY97a+pWsMVPOE7zY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:db:68:b7:18:7e:16:56:a2:9f:bb:e1:f7:e0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
        Validity
            Not Before: Jun 15 19:00:35 2024 GMT
            Not After : Jun 16 19:00:35 2024 GMT
        Subject: CN=2fd397dde28c60f27cb33c9880877cfc972d4250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:df:85:44:17:fd:0e:36:0a:13:31:2d:3e:83:
                    b2:7e:c2:a7:c9:c3:c6:ba:d5:35:7e:96:87:58:9e:
                    a1:b0:15:ed:5d:09:3b:61:34:91:27:ea:1f:fc:d2:
                    fd:0c:3d:f6:72:84:03:cd:4e:20:52:6e:d7:e4:99:
                    ac:01:2f:45:a8:82:50:27:4b:fe:84:7b:ff:a6:c6:
                    e3:fc:44:ab:c3:7d:5a:8c:56:8b:de:f2:45:41:9f:
                    58:f6:e4:7b:bc:9c:36:f1:9d:46:fd:86:e1:22:e8:
                    16:94:15:a9:86:ca:95:4f:e8:c8:67:1e:2c:7f:eb:
                    b9:47:be:c9:bc:9e:54:08:f4:17:65:17:8c:6f:ce:
                    ba:ef:1a:b8:b2:26:1e:5f:04:13:e5:50:99:f3:26:
                    69:80:a4:97:2a:18:83:08:e4:66:31:79:a1:bf:e1:
                    08:15:18:1d:9b:3a:30:8f:f0:b1:e1:98:da:3c:bd:
                    45:8a:f5:a0:b2:e3:7a:d6:08:62:9c:a4:d9:59:c6:
                    2d:71:8a:34:e3:da:b3:52:3b:71:18:6f:93:b4:70:
                    1b:93:1c:f7:a4:3b:f6:90:36:b7:a3:fb:b9:80:db:
                    cb:11:e6:52:67:cc:03:60:5c:dd:a6:1d:5d:4b:d5:
                    df:98:e4:af:16:72:8b:4a:b0:6b:a9:53:78:ed:cc:
                    e6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D3:97:DD:E2:8C:60:F2:7C:B3:3C:98:80:87:7C:FC:97:2D:42:50
            X509v3 Authority Key Identifier:
                keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:c1:8e:4e:8a:00:9e:2d:60:47:16:d5:59:32:41:92:e8:a1:
         e5:da:09:53:57:60:47:03:e1:7d:5a:85:0c:84:e3:81:f7:fa:
         05:60:fa:12:db:f4:a5:78:59:60:fc:1d:46:b9:e5:26:77:f9:
         c0:2d:16:5d:a6:6f:3b:e6:80:e8:b9:b7:2f:1f:2d:e6:f5:48:
         c9:b6:42:3b:27:81:22:7e:65:ca:6a:e6:df:57:45:60:f9:16:
         f1:93:24:9c:d6:74:77:2f:be:17:bc:64:3f:5b:c8:6e:8f:4d:
         7f:68:fe:f5:d3:29:eb:44:17:62:3b:25:bf:97:61:54:12:4e:
         d0:7c:85:34:61:4b:47:d7:05:4d:17:67:45:d7:d1:e9:a6:7a:
         06:1f:e2:f7:b5:b7:76:d3:14:36:37:ce:ea:5f:fe:1e:c6:ab:
         8c:13:0e:c3:a1:a7:87:d1:c2:33:cf:1c:dc:f6:65:fe:43:ae:
         6c:b2:81:c8:06:84:51:fc:91:dc:36:41:f2:67:92:a6:35:f6:
         1f:c4:0d:02:fd:e7:38:09:49:2a:77:79:cb:ea:23:08:11:06:
         8e:03:b2:70:02:0e:2a:bd:79:d6:3a:25:52:03:25:3e:d0:f9:
         8b:6e:2a:da:86:ce:b8:a4:a6:79:6b:d9:c0:38:31:ed:d9:2c:
         0b:13:7c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:09:04 2024 by rpki-client on console-ams.rpki-client.org