Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
File:                     xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json)
Hash identifier:          ZxoTE6Ut10jFy/qnT4xqspoCbhu0/+3oXChL9JBCFss=
Subject key identifier:   F2:AC:86:CC:51:B6:6C:A6:A1:57:6B:4D:0D:3A:EA:02:22:4B:63:A0
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Certificate issuer:       /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial:       01901E8FF6930DB40C136E4A6199831013C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
Manifest number:          0BC1
Signing time:             Sun 16 Jun 2024 01:01:09 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:09 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:09 +0000
Files and hashes:         1: J54GOGSbqHTQqEjRaG3LmGV5hec.roa (hash: cetie7S1G42aCZP/HLecE4899uy/3GzNs2hb8TSdgMY=)
                          2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: 1aEHKVF73smkWYNGm+IlfjqU6Oe5xaM6rTx8yDHUUPs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:f6:93:0d:b4:0c:13:6e:4a:61:99:83:10:13:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
        Validity
            Not Before: Jun 16 01:01:09 2024 GMT
            Not After : Jun 17 01:01:09 2024 GMT
        Subject: CN=f2ac86cc51b66ca6a1576b4d0d3aea02224b63a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:65:46:bb:62:10:2f:a2:3d:64:ff:9a:c7:b0:
                    55:41:d0:ea:5d:d6:79:85:5d:90:d2:cf:4d:6e:0e:
                    02:fe:4f:cb:70:23:75:78:f0:5b:ae:a7:2b:85:f5:
                    92:71:bc:f2:1e:07:a6:af:a8:8a:a3:72:7c:11:b0:
                    d8:66:95:f1:51:c7:1c:dd:63:fa:53:93:fc:49:34:
                    12:b9:64:6f:e1:27:e2:f1:56:76:40:66:c8:40:d1:
                    f4:46:44:7f:7b:b5:78:4d:fd:12:f5:2d:11:a1:4a:
                    b7:da:8d:81:1c:7e:10:a6:62:03:60:9b:16:7a:6a:
                    13:56:d7:97:b6:c9:70:8b:e3:b0:99:c4:5d:01:6e:
                    ae:e0:82:8a:c7:6e:1b:56:ea:33:84:dd:97:15:74:
                    e8:ab:5f:c9:41:d0:86:19:18:43:d6:32:c2:1a:63:
                    8c:19:7d:d7:a2:7c:27:c8:7f:10:75:e8:a5:c6:0e:
                    c6:94:9f:e3:14:28:af:0d:af:88:15:ae:4b:43:23:
                    8a:86:c7:b7:2a:61:9c:b0:32:48:d1:95:16:30:a5:
                    47:1b:11:6c:3e:30:d7:bb:af:d6:08:98:74:d2:94:
                    2f:d5:f3:18:90:c1:66:c2:7b:04:c5:aa:49:df:a7:
                    6d:29:8d:6a:32:af:bd:a7:c0:16:d2:f0:65:22:11:
                    73:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AC:86:CC:51:B6:6C:A6:A1:57:6B:4D:0D:3A:EA:02:22:4B:63:A0
            X509v3 Authority Key Identifier:
                keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c4:b4:cd:ab:d5:be:a3:30:e4:56:6a:78:53:4f:df:14:f4:
         ca:97:49:3c:3e:60:12:e6:21:29:63:77:00:62:83:7e:2a:2e:
         52:b0:9e:8b:42:4a:87:56:84:af:7c:5a:b5:a0:99:e2:f3:d4:
         20:c8:7a:2d:89:6a:24:49:45:01:22:f7:57:61:f0:3b:13:7e:
         70:a2:e0:47:5f:d1:78:9d:ea:70:97:82:12:30:4a:65:da:2a:
         ec:34:10:73:e8:b7:3e:b7:a4:c2:cf:2d:92:9a:1b:a3:0a:86:
         3f:33:6b:e1:30:7c:52:d5:91:ea:08:02:04:59:65:93:37:55:
         b7:95:1b:73:a0:dc:07:71:33:f6:43:71:6f:93:91:2d:c1:3d:
         98:64:b8:87:27:5c:8b:90:44:9e:93:d4:1d:58:81:53:d1:9d:
         c7:60:35:77:19:ca:43:3f:07:ba:3f:2a:08:43:ab:a9:7d:49:
         12:b0:bc:2a:ad:89:07:b6:8c:8c:9e:3b:9f:fc:3a:49:47:14:
         a7:18:99:27:aa:27:3d:91:48:2e:2e:29:87:52:20:7b:9e:e9:
         18:1d:59:f1:d4:2a:74:dd:1a:57:43:2d:c4:a4:d6:cd:87:52:
         b5:e0:5b:ff:da:7b:43:e1:c4:5b:08:d6:6a:dc:ff:3a:89:ad:
         b6:fc:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:04:22 2024 by rpki-client on console-fra.rpki-client.org