Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
File:                     xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json)
Hash identifier:          fiEiQ2G/8NzUFcDp0a37cQfdVTC89++JJANxd0IwSzI=
Subject key identifier:   15:64:D9:4A:37:2C:08:F0:72:2D:E8:70:3E:CD:55:FE:BD:C6:BA:2A
Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6
Certificate issuer:       /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
Certificate serial:       019043E5AD924EA2C6596570E92305A9A29A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
Manifest number:          0B0F
Signing time:             Sun 23 Jun 2024 07:00:43 +0000
Manifest this update:     Sun 23 Jun 2024 07:00:43 +0000
Manifest next update:     Mon 24 Jun 2024 07:00:43 +0000
Files and hashes:         1: QC3TfjMaIfxruxgThav7r-q2ELU.roa (hash: umUZEYMkqyvjNHW2ughixivPmUQX77fyN9xSBHFdLDQ=)
                          2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: v3DzMhTHpFu0Sp6+/qPZ08d+OO5dirvMxQMnHaKZ5nE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:43:e5:ad:92:4e:a2:c6:59:65:70:e9:23:05:a9:a2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6
        Validity
            Not Before: Jun 23 07:00:43 2024 GMT
            Not After : Jun 24 07:00:43 2024 GMT
        Subject: CN=1564d94a372c08f0722de8703ecd55febdc6ba2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:c5:62:95:b9:96:00:a2:d0:54:8d:18:38:
                    ea:56:a0:d7:8d:35:99:3c:72:4c:43:4e:a1:1c:e0:
                    50:06:61:37:f1:01:8c:21:50:da:44:89:5e:cc:6e:
                    aa:e4:fc:30:a2:26:ab:54:46:76:a4:24:85:65:3a:
                    fa:9b:74:7a:b9:89:06:73:e7:18:40:28:1b:95:5c:
                    c0:bb:70:9f:f3:77:e6:d9:eb:ce:52:7e:f2:83:7a:
                    cb:22:c8:42:35:d3:ba:e3:30:c3:76:5f:6d:f3:be:
                    7f:83:97:99:a7:9b:24:e9:6d:78:81:29:56:a1:df:
                    99:85:e4:15:da:40:e3:79:f3:8a:8b:78:0a:80:22:
                    f1:75:24:65:87:d7:9d:a7:bc:11:8c:75:24:e0:cf:
                    c9:8c:29:02:25:0f:be:a3:79:12:f7:7f:e2:ee:a1:
                    82:ee:39:6c:35:f0:c7:d3:c1:2c:1e:02:20:1c:7c:
                    28:30:1e:a7:82:52:8c:ac:c8:f9:c5:4d:e5:16:2e:
                    23:48:4b:2c:70:99:db:9f:47:35:71:c1:cb:43:af:
                    62:d4:7f:c4:19:a8:f4:57:b1:e4:9c:c7:3e:f0:52:
                    18:ff:ef:68:a3:ae:44:c9:90:51:bc:41:16:71:85:
                    8a:f9:4a:55:66:70:a3:47:66:46:a5:5a:93:e8:b1:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:64:D9:4A:37:2C:08:F0:72:2D:E8:70:3E:CD:55:FE:BD:C6:BA:2A
            X509v3 Authority Key Identifier:
                keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:1f:90:19:1b:5b:c5:12:46:7b:2c:35:04:88:d9:74:83:20:
         b4:d9:95:a1:eb:50:bb:82:97:28:af:53:67:8a:52:42:b8:11:
         a2:76:02:93:a2:e5:04:42:88:fe:a4:2e:e4:e1:77:7a:71:95:
         a0:70:22:14:41:51:21:e1:0b:24:2c:1d:85:4e:1c:85:7e:b8:
         01:ba:df:77:bc:99:df:59:08:47:ae:19:67:17:33:c3:cf:04:
         a6:6f:5b:b6:58:6b:e1:4b:0c:ef:da:ca:1e:53:0a:b2:2c:04:
         d4:81:22:9f:21:bd:c1:ed:e1:34:ad:35:31:34:c8:57:21:fa:
         ee:d7:75:46:48:29:90:5d:e3:f8:07:04:ef:56:24:48:36:cf:
         c5:9d:1a:ad:87:93:4b:64:b2:af:96:21:58:c7:35:31:49:8a:
         4e:46:83:d5:3b:95:35:a2:ef:80:40:fc:7b:86:aa:de:8f:51:
         31:ac:df:6b:7b:a3:fb:6f:da:f5:8c:59:a9:70:29:9b:90:58:
         e5:d1:27:ea:72:94:82:8a:9f:4e:b6:7d:fa:33:be:fd:7b:f0:
         74:5e:46:7b:ad:7c:92:a6:74:d0:53:44:a7:f4:27:c9:65:3b:
         d8:c6:af:a0:d3:d8:3c:1a:f5:e0:5c:be:c6:0d:18:a2:a7:ed:
         c9:1c:02:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 16:57:24 2024 by rpki-client on console-fra.rpki-client.org