Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
File:                     xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft (raw, json)
Hash identifier:          oXFP+wHhUuFERxYJKAV7CwmfqqDDtZlnXhKV7KtvfQY=
Subject key identifier:   6C:77:54:19:EC:79:5D:E3:8D:E8:CA:9D:C9:09:82:B2:34:97:A1:07
Authority key identifier: C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E
Certificate issuer:       /CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
Certificate serial:       01901DEAD8676651343F21878C43718684EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
Manifest number:          0364
Signing time:             Sat 15 Jun 2024 22:00:48 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:48 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:48 +0000
Files and hashes:         1: RO4zjeQkeheRbDBuYx0fcd6al8I.roa (hash: jMMoQs9InoheM+pJMXFAOJkfiXLoeW+w5ZxWTOr3lZw=)
                          2: xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl (hash: Y1YgKTbxmwFP83hNo4E0QgmjZeX8J65ekUqrfGSax5s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:d8:67:66:51:34:3f:21:87:8c:43:71:86:84:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43c74022cbbf0b3cfff6031d6d2de0369c99e4e
        Validity
            Not Before: Jun 15 22:00:48 2024 GMT
            Not After : Jun 16 22:00:48 2024 GMT
        Subject: CN=6c775419ec795de38de8ca9dc90982b23497a107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:db:3d:d8:6f:68:bf:72:1f:35:99:33:dc:
                    f2:84:06:46:c5:62:4f:bd:16:55:47:fe:cb:95:d1:
                    4a:11:6b:98:f5:4a:5e:e2:96:7c:aa:f4:ed:23:b3:
                    38:f0:14:73:dd:73:c6:fb:20:cb:24:d0:5e:6c:5e:
                    41:6e:96:36:34:c0:93:ee:04:b0:e2:be:6b:78:1b:
                    17:c3:1f:b9:20:b1:03:46:08:f5:3d:47:6f:b9:b6:
                    71:4d:cc:4d:6c:78:8b:95:1c:64:fb:db:09:b7:87:
                    59:27:78:7f:a0:d0:3b:93:e9:a2:e3:59:00:c9:00:
                    95:dc:de:24:7b:f3:f4:5a:81:a1:a5:99:9c:df:68:
                    81:be:76:9a:0f:d2:bf:99:22:45:b0:2e:05:ef:9d:
                    fb:77:51:50:2a:5c:dc:93:42:d8:04:57:ed:e0:0b:
                    03:38:e6:9e:d3:0d:e2:f1:41:0b:ac:5e:ed:2a:5c:
                    86:f2:b6:c9:6a:96:b3:e1:1a:4c:c4:fc:a3:de:e7:
                    bd:ed:5c:a9:cf:da:ba:49:b0:61:8a:aa:0f:ae:4f:
                    07:72:f4:8b:34:5d:07:bf:39:d5:14:37:c2:9f:d6:
                    b1:b4:3f:aa:b1:28:da:1c:70:5e:c1:5e:18:60:34:
                    2f:c4:66:e3:b4:9f:48:02:e3:65:d7:e0:9b:43:c8:
                    8b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:77:54:19:EC:79:5D:E3:8D:E8:CA:9D:C9:09:82:B2:34:97:A1:07
            X509v3 Authority Key Identifier:
                keyid:C4:3C:74:02:2C:BB:F0:B3:CF:FF:60:31:D6:D2:DE:03:69:C9:9E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed5d3a-b869-4cda-9d32-250e55b9d4a9/1/xDx0Aiy78LPP_2Ax1tLeA2nJnk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:31:41:7b:84:56:43:f9:32:d7:2b:f4:96:57:32:0c:ae:45:
         fe:16:a7:3a:6f:4b:d9:f4:46:ce:c5:14:90:73:8f:4a:76:2a:
         be:ab:1a:04:3f:71:46:bb:a6:c2:d4:97:c4:99:82:67:75:88:
         0a:bf:d3:8c:12:3e:f2:e8:3c:f1:d3:79:0f:64:2e:d8:23:eb:
         7e:e2:a0:dd:34:c8:64:4f:84:9d:07:10:83:73:81:9b:a3:cb:
         d7:b5:45:88:d0:13:8e:44:09:d3:2d:a2:9b:94:18:33:1d:f2:
         63:7d:0e:9b:9e:06:26:91:d4:80:c5:ea:d4:21:d0:68:40:b3:
         3d:42:f8:ba:9a:e4:75:4a:21:ef:af:47:e6:5e:70:01:3f:dd:
         89:78:a4:eb:95:ca:22:0b:53:d8:48:29:ad:55:e7:6f:c6:3c:
         aa:35:c0:a1:41:e7:ca:55:4c:ea:47:a6:07:30:a0:76:c1:52:
         f0:87:45:dd:86:71:47:bf:72:1f:5a:b5:93:82:91:53:14:2c:
         cc:a2:c7:af:85:51:a4:f8:4f:07:1e:bd:05:8b:97:2e:fc:44:
         93:5b:5d:b7:86:bb:d1:8d:97:54:56:ef:fb:32:ff:0f:25:f3:
         24:3f:70:26:f6:d4:50:59:19:98:e5:7f:3c:58:7c:8d:6c:d2:
         05:f2:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:52:08 2024 by rpki-client on console-fra.rpki-client.org