Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
File:                     aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft (raw, json)
Hash identifier:          B5DbJ8Z98GAYnhfPIlBcvXMBHW1iBQKzSOfeFuiVaDA=
Subject key identifier:   86:95:F0:5B:49:81:2F:C1:F1:89:70:06:CB:9B:E1:87:65:21:4F:D6
Authority key identifier: 69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92
Certificate issuer:       /CN=69507f066f2bb0389dd88436074e1426114f2d92
Certificate serial:       01901F6B4BA24B918EA4E74EBF40D2E88131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
Manifest number:          0568
Signing time:             Sun 16 Jun 2024 05:00:43 +0000
Manifest this update:     Sun 16 Jun 2024 05:00:43 +0000
Manifest next update:     Mon 17 Jun 2024 05:00:43 +0000
Files and hashes:         1: 6t8LS_euPOfsQyoqZAwlQiXqXdE.roa (hash: m8P3smW+DPjNpIMU3dX6G8egE6BU6m5iYYjhhD33RyA=)
                          2: aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl (hash: VJIVmUBX7c3PfEd3zQ2zh6+Tu8zZpIaxA91u3EvxIXM=)
                          3: fQs0hMU9w0buUVZ88Av5QEAgFvA.roa (hash: Fii/fFKCOS2HG1HWa4caP+5lrf5wcxM5azHScckTFy4=)
                          4: oh1cn4uvfBZwrqQphpK1v0QKnno.roa (hash: 0FWQPAIBLlKyoA6phf6Oq/7LM0nBoe7VR8b4TzwIXuM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:6b:4b:a2:4b:91:8e:a4:e7:4e:bf:40:d2:e8:81:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69507f066f2bb0389dd88436074e1426114f2d92
        Validity
            Not Before: Jun 16 05:00:43 2024 GMT
            Not After : Jun 17 05:00:43 2024 GMT
        Subject: CN=8695f05b49812fc1f1897006cb9be18765214fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:a4:3f:e1:b7:ff:19:31:e4:21:76:e4:48:
                    19:26:fa:fd:dd:9d:c0:c1:ea:66:51:6f:e0:50:73:
                    4e:c9:8b:c6:65:44:34:7a:f4:5b:a9:5d:fa:e9:a0:
                    cd:d4:d8:16:89:63:8d:97:8f:d4:f0:58:55:c3:a6:
                    93:cd:e1:0c:27:40:6b:a2:38:69:84:33:de:04:49:
                    36:84:5f:aa:4a:e6:89:03:83:ea:69:0d:2f:86:fa:
                    e5:7f:75:9c:09:28:59:62:16:1b:d1:76:49:64:9e:
                    58:9f:95:f7:4a:41:cb:2a:7d:39:dc:e7:63:94:89:
                    56:c7:0f:ba:b2:c8:cf:7a:cb:18:8b:b8:ed:0f:fd:
                    bf:dc:b2:74:f0:ba:8f:47:96:ff:03:d0:67:29:38:
                    22:ce:95:9a:3f:a5:69:fa:67:01:d8:c3:75:79:0e:
                    3a:b5:d3:2e:f6:ce:67:1d:38:8c:06:3d:21:f0:02:
                    ea:37:81:cb:36:f5:a5:35:5e:89:68:02:b0:1c:d6:
                    77:d8:9c:12:32:2e:96:3e:ef:c4:cf:53:2f:81:8b:
                    48:0b:91:91:d5:ed:0f:25:b0:23:9b:71:8d:80:49:
                    6b:c9:c5:30:cb:29:86:04:ff:49:ce:e3:61:93:32:
                    45:1d:1f:d8:47:da:ec:fe:b8:8e:40:50:c0:25:45:
                    62:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:95:F0:5B:49:81:2F:C1:F1:89:70:06:CB:9B:E1:87:65:21:4F:D6
            X509v3 Authority Key Identifier:
                keyid:69:50:7F:06:6F:2B:B0:38:9D:D8:84:36:07:4E:14:26:11:4F:2D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVB_Bm8rsDid2IQ2B04UJhFPLZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf8338-8752-4d55-9c31-0e1b8fea8913/1/aVB_Bm8rsDid2IQ2B04UJhFPLZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0c:26:fb:0c:d4:92:79:44:23:3e:a0:0c:a2:bb:64:f2:fc:
         30:b8:c8:ba:cb:76:5e:13:e0:b9:76:83:3f:31:5b:11:99:02:
         ec:4e:f1:e4:3d:c0:e1:0e:e6:ca:75:29:54:9a:1a:42:3a:e2:
         66:80:23:16:74:4f:82:48:38:f8:6e:13:35:e8:7f:32:ed:98:
         96:56:bf:34:20:60:a9:4b:ca:d6:ed:1a:a4:75:f2:d2:12:45:
         6d:2a:74:1a:bf:65:03:7f:e6:b6:38:88:3d:f9:03:af:04:4f:
         d9:68:bf:61:6c:ef:b4:49:62:3f:03:8d:0a:b6:cc:41:35:30:
         fa:67:95:77:a7:72:6a:ef:8e:02:ea:8b:aa:94:cc:9b:6b:a0:
         eb:25:3d:6a:f3:24:08:32:2e:4e:85:fc:ca:00:74:d2:21:2e:
         ab:42:80:e1:85:09:42:cf:88:d8:56:de:dc:2e:03:39:e2:fa:
         93:60:10:80:35:cc:70:d5:85:cd:e9:55:10:64:a0:0e:7b:03:
         d2:24:16:2a:e4:01:d7:40:71:4a:49:22:be:24:ca:91:11:70:
         68:6b:13:95:9f:9d:b5:5c:b6:20:43:77:de:8d:52:a1:0e:b6:
         81:b8:19:0d:be:71:b7:07:6a:6c:b0:17:bd:c5:71:43:b2:95:
         67:8e:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:40:42 2024 by rpki-client on console-ams.rpki-client.org