Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
File:                     XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft (raw, json)
Hash identifier:          ZpxFOuEZFUOf64QdQCrzXfrqjMWvTxc4RMFRC4MDSNc=
Subject key identifier:   D5:E2:CB:F6:E7:E0:F6:98:93:85:C6:C3:B9:EA:8E:E5:0B:D9:E5:5F
Authority key identifier: 5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60
Certificate issuer:       /CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
Certificate serial:       01901E8FB058B9C7FFE5C8828BE8417100A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 01:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:51 +0000
Files and hashes:         1: OtcPcCqDmenYm_uyanmxLxG6Z0k.roa (hash: mBY9l05MLND4EY3oVCvN89NcllMD9cJbNP6fd2piHUU=)
                          2: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl (hash: YSD4vnvcXxmw+0pr2L1c+MiC8bEyxWgIsx6WRd8fKa4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:b0:58:b9:c7:ff:e5:c8:82:8b:e8:41:71:00:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260
        Validity
            Not Before: Jun 16 01:00:51 2024 GMT
            Not After : Jun 17 01:00:51 2024 GMT
        Subject: CN=d5e2cbf6e7e0f6989385c6c3b9ea8ee50bd9e55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3e:b2:c8:f3:da:5e:e1:e8:fa:9f:bd:7c:f7:
                    c3:0d:0d:93:2d:e5:1f:25:d3:2e:8b:87:3f:d3:06:
                    2e:d9:e1:b2:5f:b4:1d:15:fa:93:02:f8:25:15:90:
                    33:d6:d4:43:c4:45:3e:6d:43:38:e5:6a:f6:f9:9a:
                    8b:7a:7d:bb:06:be:9f:54:5a:6f:32:ac:61:39:58:
                    c2:92:81:dd:b5:b3:8b:b4:1e:dd:d1:bd:2f:e1:c2:
                    4e:43:87:6c:69:24:99:5d:9e:3b:05:83:bc:48:d5:
                    b5:b9:42:bf:19:c8:92:fe:40:c4:30:27:1d:56:7c:
                    e8:f4:3b:ad:8b:1b:ca:2c:be:94:30:a5:d9:10:c6:
                    3c:13:16:e0:37:0f:4d:3d:68:de:a5:60:c2:23:a6:
                    3a:3b:14:1f:67:95:4e:c8:7e:f5:f7:b3:7f:26:e7:
                    6a:28:8b:3a:64:c0:3b:f3:92:1a:b0:1e:67:42:dd:
                    eb:6e:27:ae:e0:5f:4c:92:33:d3:5d:2b:4e:33:e1:
                    bd:f4:58:6b:08:ae:46:be:72:0b:63:64:b2:36:61:
                    e0:eb:0b:6f:81:d5:89:92:24:57:01:2e:c8:d6:e7:
                    95:e3:e6:b1:31:6e:55:02:4b:77:27:e2:fd:68:e0:
                    5f:8e:a9:e8:e2:1c:0a:31:62:cf:05:5b:0a:42:e2:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E2:CB:F6:E7:E0:F6:98:93:85:C6:C3:B9:EA:8E:E5:0B:D9:E5:5F
            X509v3 Authority Key Identifier:
                keyid:5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:fc:72:45:6b:e1:61:78:20:d5:6a:30:8e:e1:86:1b:da:3d:
         5a:d9:9e:37:64:55:26:ee:77:09:64:8c:6d:a0:e1:8b:99:19:
         b6:97:c2:95:50:82:cd:13:36:f6:b5:f7:04:10:e1:3f:ef:89:
         65:0a:9e:bf:76:b8:b6:94:57:69:0d:a6:a5:d9:fc:53:d2:ef:
         24:d1:3c:63:29:65:1a:be:ca:af:e4:da:d8:f5:66:95:d2:11:
         94:a8:25:0d:db:18:f0:d2:54:b4:01:38:5e:20:ba:14:52:f7:
         86:73:6d:32:77:25:b2:af:cd:a4:3e:39:67:7e:32:90:fa:71:
         36:c1:42:7a:64:02:19:1d:9b:e9:8d:5f:b9:70:3d:b9:71:2e:
         d4:56:76:a7:eb:0b:25:ad:a8:72:7e:9c:c5:6f:82:cb:05:00:
         c3:a8:18:f5:05:54:f3:af:5a:72:e1:75:52:8c:ef:ba:e8:96:
         96:b5:79:18:2a:44:8f:f6:ec:63:d1:0a:ba:c6:9c:9f:54:36:
         72:10:db:b0:ec:8b:eb:27:c9:ee:cf:e8:14:6e:f7:cd:36:84:
         88:11:f0:99:f4:c0:3f:62:09:55:c1:18:44:5c:ce:62:77:76:
         95:ff:37:72:1d:84:72:59:8f:d3:11:22:39:da:ec:fd:95:fb:
         5c:bd:b6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:49:10 2024 by rpki-client on console-fra.rpki-client.org