Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File:                     AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier:          3n4XgEkUVGw6E7uRpHYxHzMmaNeMJC87trMaxEKF7mk=
Subject key identifier:   F5:AE:01:17:27:E4:78:1F:E0:45:EB:DA:F8:DD:E0:33:D3:1F:EF:0C
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer:       /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial:       01901BFEF6D9592E509A032A574C53AD1CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number:          06B9
Signing time:             Sat 15 Jun 2024 13:03:32 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:32 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:32 +0000
Files and hashes:         1: 6Gh_uO8PX7BS9Hj23c7uaPYgtO4.roa (hash: tMKQRV/08HCdMLdB9ocdfLlfpcOScSxMXxAurIwiYCM=)
                          2: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: w+THLWI6vIRNocYf12M2grVUUN3DnFkqUixDVcb0Bbs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:f6:d9:59:2e:50:9a:03:2a:57:4c:53:ad:1c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
        Validity
            Not Before: Jun 15 13:03:32 2024 GMT
            Not After : Jun 16 13:03:32 2024 GMT
        Subject: CN=f5ae011727e4781fe045ebdaf8dde033d31fef0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:28:2d:e3:4e:0c:2f:47:c3:85:df:d9:aa:
                    94:5f:81:58:40:bc:10:fa:aa:f1:be:c3:85:c9:d7:
                    ae:89:fc:53:fa:59:02:11:e7:95:f0:57:b9:36:86:
                    60:fc:31:27:b8:98:a0:cb:4a:f1:e7:66:cf:4a:1f:
                    c7:7f:25:3f:6a:1c:48:83:ab:e6:cc:e6:9f:98:2c:
                    0e:bf:87:3e:a4:65:93:07:b0:57:86:c7:70:6e:96:
                    18:b1:f8:3f:3e:3a:a1:d8:84:13:08:c9:b3:c9:32:
                    56:08:e3:12:28:92:f9:7d:fd:7a:6f:b0:eb:16:35:
                    ec:44:8b:91:4f:e0:89:09:09:e4:8d:c0:c8:77:71:
                    63:9e:3d:2c:e9:5d:f6:3f:3a:97:82:a4:d2:f6:00:
                    03:36:bd:4b:95:e3:df:e3:22:20:21:78:19:4b:4f:
                    94:07:b4:46:7f:a1:d6:e9:d0:66:21:28:ee:a0:71:
                    e2:ea:ca:c8:58:6e:b9:84:ce:6a:1f:df:18:db:df:
                    6b:bd:8c:4c:ea:06:2c:97:61:76:6a:8d:5a:18:00:
                    7f:e5:63:ce:f7:4c:5b:f6:ea:14:61:d6:e6:46:70:
                    6d:c1:77:cd:07:f6:9e:c0:47:1d:b5:eb:5b:8f:ae:
                    e1:be:2c:2c:b1:17:f5:47:61:7b:da:5e:34:05:20:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AE:01:17:27:E4:78:1F:E0:45:EB:DA:F8:DD:E0:33:D3:1F:EF:0C
            X509v3 Authority Key Identifier:
                keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:06:ac:57:84:cb:e4:18:71:9d:62:43:ab:c8:45:ae:00:14:
         3b:4d:6b:6f:4d:f3:6a:c3:e3:ed:e1:b5:bf:74:98:ac:cb:55:
         b1:b4:d1:84:de:51:56:24:10:ce:05:6d:50:82:d6:d1:0c:36:
         b4:4d:93:cf:a2:fc:b1:76:c4:2b:95:fd:58:6a:58:59:47:7c:
         07:1f:7f:b3:6d:36:c4:ed:c8:e3:e7:48:b5:17:2d:b6:b6:90:
         f8:f7:ab:6f:82:28:3a:90:f0:08:01:f8:f5:29:f5:af:41:c0:
         f3:80:ca:eb:7b:58:46:57:b3:e0:7a:86:d3:d7:c5:fd:b8:05:
         00:ea:47:64:f1:48:1c:1a:87:db:81:27:39:a0:ac:a5:0b:26:
         6d:32:70:cd:f4:4b:00:26:eb:ec:92:c9:8b:3d:73:a1:c0:41:
         96:95:14:81:61:14:e6:4b:c6:e9:1c:30:4c:fd:e7:7d:0e:a9:
         7e:cc:cc:66:46:fe:c0:68:e2:84:3f:86:26:fb:28:55:f1:25:
         9e:a7:61:96:33:4c:90:d2:41:ee:e0:dc:41:cb:eb:a9:e4:ab:
         d8:ac:63:1e:e3:fc:41:62:c8:17:66:40:81:ae:c7:23:9f:79:
         80:86:ca:9a:02:a4:44:e9:c7:51:7a:76:c9:e6:47:6f:7d:65:
         d9:6b:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:54:27 2024 by rpki-client on console-ams.rpki-client.org