Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
File:                     quE1bmQEwLcC1bOBOpNENarsDJg.mft (raw, json)
Hash identifier:          mhCy/d5PP/2c0O61zzv+X95r40d904PWeieWFSsPP9g=
Subject key identifier:   53:B8:6C:60:D6:4A:EA:27:40:01:02:9F:30:25:E3:1A:E1:D7:35:27
Authority key identifier: AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
Certificate issuer:       /CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Certificate serial:       01901BFD3052A32A853A6AAEBA5335EAE98A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 13:01:36 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:36 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:36 +0000
Files and hashes:         1: TtwfYZYt7LYrEn_dxZG2475WthU.roa (hash: XPijg2BBH70WPMHdGyARpwoymri8xCEWa+sdXa+j+pI=)
                          2: quE1bmQEwLcC1bOBOpNENarsDJg.crl (hash: npwRuNUJUKMAqMjjYVN15z2B88BeUcZeyJgSnNWCWbU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:30:52:a3:2a:85:3a:6a:ae:ba:53:35:ea:e9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae1356e6404c0b702d5b3813a934435aaec0c98
        Validity
            Not Before: Jun 15 13:01:36 2024 GMT
            Not After : Jun 16 13:01:36 2024 GMT
        Subject: CN=53b86c60d64aea274001029f3025e31ae1d73527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f5:89:76:96:8b:39:6d:98:d0:92:9e:83:f2:
                    56:04:4b:46:6b:b6:58:9d:59:bc:25:af:b9:b6:5c:
                    16:fb:c6:71:12:3f:dc:0d:e9:9f:fc:97:54:57:2c:
                    84:12:9b:f8:a2:5e:bb:92:5c:da:4d:74:de:df:e1:
                    38:8a:41:41:bd:35:3b:31:d2:37:d9:9d:ae:18:74:
                    74:c4:62:2e:b9:a1:a2:74:c7:bf:ce:e1:f9:93:06:
                    ba:2f:af:91:52:90:e8:be:47:a4:3a:f9:4c:62:05:
                    0d:10:a2:f3:47:14:02:b0:40:da:6c:4f:ea:5d:20:
                    c7:b0:e8:04:1f:17:91:23:71:52:74:18:29:56:99:
                    3c:15:16:fc:61:e4:f4:b6:49:57:8d:fc:98:b2:ad:
                    37:4a:2e:e4:6a:38:39:ca:32:0f:d3:7d:09:8d:07:
                    f5:75:a0:28:48:17:d2:37:e4:ac:44:62:8f:3f:7a:
                    74:6e:19:c3:50:f8:b9:57:7f:d4:b1:0e:15:7f:46:
                    84:a2:ec:a1:c6:ac:2f:66:73:ad:c3:7d:15:be:cb:
                    70:ac:86:12:b6:d5:3b:6d:28:d1:88:44:f5:95:2a:
                    6a:17:7a:c3:23:dd:9e:94:5f:c6:eb:c4:50:9d:19:
                    fe:98:c5:18:38:56:df:29:00:16:27:ab:d1:46:62:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B8:6C:60:D6:4A:EA:27:40:01:02:9F:30:25:E3:1A:E1:D7:35:27
            X509v3 Authority Key Identifier:
                keyid:AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4a:e2:58:96:bf:ad:92:4c:34:31:7a:51:37:b3:39:87:a5:
         6f:34:b9:a3:7c:44:e1:ff:ce:71:a4:34:22:fa:c3:ad:f2:3a:
         da:ca:01:00:ef:0a:d4:8f:d5:f5:a8:e8:41:0b:bb:74:d7:42:
         6e:ac:ba:0c:60:ba:a5:41:28:36:97:14:7c:57:b8:c8:95:75:
         2f:e6:eb:4b:ce:a0:19:65:ca:d9:b2:b6:c1:a1:53:27:b4:a1:
         66:1d:79:63:9e:25:8e:69:2d:8d:f8:e7:d1:f9:09:18:f9:8b:
         63:cb:07:99:0f:e3:5b:07:e7:61:cf:db:29:fc:08:74:50:d7:
         eb:e2:53:72:48:15:b8:f5:e2:87:8d:82:22:a9:86:76:60:e3:
         69:a5:b6:d9:96:6d:e0:fd:72:9d:1f:af:40:e4:71:bf:05:fe:
         b0:97:d7:2e:53:90:2b:6d:5e:14:61:66:96:c9:88:bc:4e:00:
         c3:cb:0c:0b:06:eb:50:ea:9d:c9:4f:b1:19:14:dd:02:ec:7b:
         75:f1:d1:b7:4c:06:84:c3:5d:7b:54:bb:c4:82:96:75:2b:c5:
         aa:be:40:cf:07:42:2f:0a:5c:e1:50:78:23:e9:d1:cb:61:16:
         1e:59:ca:b3:57:74:20:3f:8c:23:30:33:90:17:1a:7d:0c:2e:
         fd:3e:29:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:15:18 2024 by rpki-client on console-ams.rpki-client.org