Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File:                     RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier:          aDsxrcXqz2kd5Anpz5uyQWCjaca+dOK95FIWOXM9Abs=
Subject key identifier:   6A:40:E7:13:95:5A:C5:E8:01:08:91:BF:78:5C:67:C6:83:82:0B:25
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer:       /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial:       01901E8F86152F06F495BD8EDE9C042BDA15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number:          05CA
Signing time:             Sun 16 Jun 2024 01:00:40 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:40 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:40 +0000
Files and hashes:         1: MLYY2LriPUbP-cvqfKDrf7rm83I.roa (hash: UQSl5pvTs9wYhgV9HJjn9QW87kgdTHP9UDK/qxT99sQ=)
                          2: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: O9WY6BO68eR0ZPisyYN45BM/ehFYwzCUreOZGeHo54Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:86:15:2f:06:f4:95:bd:8e:de:9c:04:2b:da:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
        Validity
            Not Before: Jun 16 01:00:40 2024 GMT
            Not After : Jun 17 01:00:40 2024 GMT
        Subject: CN=6a40e713955ac5e8010891bf785c67c683820b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a9:ec:e1:85:e7:29:69:f1:b2:12:70:7f:68:
                    51:b8:45:8f:59:c4:ad:e5:d6:e0:88:d1:f4:36:77:
                    47:05:23:98:10:a5:db:85:ce:da:f1:aa:bc:ee:2c:
                    c3:3c:f3:42:22:f9:cc:44:ca:8e:5c:d0:c3:3c:7a:
                    21:97:e5:73:20:fb:31:12:2c:9a:0d:ba:ea:9b:f7:
                    9d:7b:f9:56:45:49:27:69:d6:a4:4f:55:e9:fe:db:
                    d9:66:b8:83:a2:d3:b8:32:10:1b:4a:fa:ed:5b:1b:
                    a3:84:63:d1:90:67:bf:be:86:75:b2:98:8d:6f:97:
                    85:1a:92:a2:8c:c3:8a:4c:f8:f4:82:b3:6f:c6:3f:
                    58:65:c6:ad:b8:98:fb:35:92:35:a9:94:ba:9d:54:
                    88:61:32:55:ca:86:4b:70:e8:8f:f8:01:fd:3c:cc:
                    40:40:62:49:01:f5:83:14:c4:16:cb:a9:a9:92:23:
                    23:6f:bc:cd:9d:f2:74:76:d9:27:55:da:b5:cf:fe:
                    d3:c2:a8:5a:21:10:ae:d9:86:f4:7f:b4:b5:eb:ed:
                    5c:01:d9:71:cd:f1:0e:3b:04:94:a6:3b:5c:ef:7d:
                    ff:c3:eb:15:35:cb:c0:f9:fc:42:a6:86:d9:60:e7:
                    a2:93:19:d2:f6:f5:c4:7c:3a:bd:f3:a1:32:53:9c:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:40:E7:13:95:5A:C5:E8:01:08:91:BF:78:5C:67:C6:83:82:0B:25
            X509v3 Authority Key Identifier:
                keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:57:34:ef:54:58:3b:46:c4:79:cb:ba:75:9c:58:00:38:cd:
         f3:28:e3:b0:28:8c:62:3e:10:ff:93:b7:51:b7:9d:fa:a0:c6:
         22:57:1c:4d:54:f2:ed:71:ad:ff:54:78:4f:89:1d:63:17:4d:
         5d:ad:74:5c:da:15:e5:54:77:c8:66:32:ea:e5:c2:91:bc:a3:
         c2:27:30:fc:7c:60:46:49:9b:80:53:17:bd:35:a1:9d:7a:bb:
         16:2b:1c:20:bc:f3:90:3c:57:38:dd:cc:85:4b:8f:53:7e:d8:
         d9:af:bc:f9:42:d5:fc:71:fa:8e:5c:22:cf:7d:83:fd:62:7c:
         25:8f:48:5d:f7:32:df:3b:c3:81:ac:be:89:38:d9:50:7e:65:
         6d:51:66:ca:e0:61:77:4d:dc:5c:d5:a3:f7:92:ed:73:78:74:
         ae:80:f4:33:b9:26:be:1c:a9:e0:24:f9:c7:4d:4e:8a:cd:0b:
         d0:ee:61:da:ff:ee:86:c0:d9:42:21:b5:00:76:70:d7:14:c1:
         7f:ee:4b:ee:20:73:a3:4d:f7:e9:30:3c:64:23:fe:b7:c5:68:
         92:83:18:79:67:fe:c3:d7:5d:70:dc:cd:1f:74:e1:30:2f:d4:
         7a:31:3d:ec:d6:7b:80:35:08:7d:86:db:3c:b9:db:48:67:66:
         7d:be:94:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:48:59 2024 by rpki-client on console-fra.rpki-client.org