Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
File:                     ASkuA6cxeW4dexSLHdI10UQ1L10.mft (raw, json)
Hash identifier:          q/+3N+z8ECKg6oLMOOaMbzYeqUWKWguQVUaJ87OPLFE=
Subject key identifier:   73:A2:DB:5E:44:68:C1:B5:4F:C7:56:7B:3F:8D:F5:57:6D:0E:C5:EB
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Certificate issuer:       /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial:       01901F347F7C5DC75EBC98ABA74190728643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
Manifest number:          0A9E
Signing time:             Sun 16 Jun 2024 04:00:52 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:52 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:52 +0000
Files and hashes:         1: 3Q-fRC3mcMCjO-XzNDaI8p6NXQY.roa (hash: A2LrEGEFNDMylOdD3M9/KzlVIw+oUrv9pD8QraMoyIo=)
                          2: ASkuA6cxeW4dexSLHdI10UQ1L10.crl (hash: HYLC4qjscLVcf7lpV/+Hi56xNZN6bkuDHB8hnCMb4rc=)
                          3: CpLkKYBksC8zUs6zYeEVCwei3V8.roa (hash: Fb/va4I7uYZ+1AwJX0iZb5/VG6/T6uSRO9R6/17i+OQ=)
                          4: bLNpMNkvk0YXTrsGo_sbVIrjvs4.roa (hash: qOsCKvOUAPO0FC1itc1nzqHCocvbz7tnf4bTEnR4tzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:7f:7c:5d:c7:5e:bc:98:ab:a7:41:90:72:86:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
        Validity
            Not Before: Jun 16 04:00:52 2024 GMT
            Not After : Jun 17 04:00:52 2024 GMT
        Subject: CN=73a2db5e4468c1b54fc7567b3f8df5576d0ec5eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:5f:06:0e:ed:a2:00:a3:39:97:be:95:30:
                    49:3f:f3:98:67:04:ed:43:c2:1f:f5:5e:f8:3c:aa:
                    44:57:94:75:22:07:85:9a:a5:1b:36:dc:59:39:20:
                    79:28:da:fb:62:93:37:cd:75:24:2e:cd:f9:f0:31:
                    01:64:3d:3a:6b:8d:cb:8b:75:2c:d8:1e:f1:b4:36:
                    8d:91:74:84:f3:46:2d:86:ff:0b:42:e0:d3:7b:32:
                    19:b6:96:ed:de:75:65:aa:3c:20:33:8a:4d:f1:6d:
                    27:3e:ee:ce:c3:f2:da:2a:2c:46:f4:f0:42:06:5a:
                    36:e9:ec:86:dc:a4:a1:01:dd:29:bc:d4:7f:4b:fb:
                    e1:b2:2b:68:eb:63:51:ba:d2:71:95:9d:38:07:ec:
                    67:4f:90:ee:9f:92:53:97:f4:50:c8:83:f3:b4:d7:
                    f2:91:40:b9:8c:91:bb:bc:88:74:a2:c3:d9:b2:a8:
                    9e:a3:75:6e:1d:44:e5:29:41:ca:7b:05:c9:7b:03:
                    42:3e:03:a7:c1:c5:fd:34:3e:1e:11:0d:d6:fe:f1:
                    fe:4b:37:da:2e:91:79:53:f3:a8:ee:71:40:71:30:
                    ac:8e:5b:0b:fd:75:b8:ce:ec:d8:17:ce:18:e6:30:
                    2d:a2:c7:ff:5b:42:7c:c4:69:5f:9c:eb:d4:c5:9e:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A2:DB:5E:44:68:C1:B5:4F:C7:56:7B:3F:8D:F5:57:6D:0E:C5:EB
            X509v3 Authority Key Identifier:
                keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f7:f7:e1:6c:ad:3e:ea:bc:1e:73:f5:4d:1e:6b:56:cd:5f:
         de:e0:b1:72:af:49:de:71:14:b1:7f:39:33:fc:53:07:e0:49:
         80:fa:91:a5:de:aa:1d:60:e6:ab:e4:85:b4:9f:14:98:db:39:
         5c:7f:77:e7:35:9a:41:9f:26:6f:3e:11:b9:c2:d8:b4:5e:81:
         ab:6f:df:02:a2:ac:b3:d4:49:6b:34:dc:06:43:a3:4e:cc:64:
         7c:56:fe:87:cd:34:1e:d6:1f:f4:4b:64:9d:87:31:73:9d:98:
         2b:15:da:6a:92:b7:a6:40:f2:40:68:a6:1d:6b:8e:77:1e:b2:
         6e:62:67:a1:50:4e:96:b8:fa:2d:33:d6:13:ae:97:7a:9b:85:
         2d:76:26:81:d3:06:66:58:04:c3:63:3d:63:2e:a6:91:32:5d:
         9f:ad:d7:5b:28:f6:52:ef:d6:5e:cb:70:b9:aa:67:e9:cf:12:
         87:f4:a7:56:40:34:95:1f:a7:eb:3a:c1:0a:fb:05:9b:ad:ce:
         7a:8e:a9:b6:84:a3:66:1e:fd:84:bf:83:d4:49:3a:e4:21:cd:
         5b:8c:c1:4c:74:66:96:94:e4:8b:97:d5:9e:7b:7e:d0:e3:3b:
         ef:be:3f:04:d0:19:26:c9:17:9b:3d:1a:cb:19:b8:b3:c6:62:
         f6:7c:0b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:52:36 2024 by rpki-client on console-fra.rpki-client.org