Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
File:                     Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json)
Hash identifier:          bbm64x0695rK1AzeZnv5THxEs1guiQGIN8mNk7njj2c=
Subject key identifier:   09:28:61:C7:8F:46:78:A0:AA:74:8E:84:79:70:7F:9D:CB:9D:C8:34
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Certificate issuer:       /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial:       019052116CD2A24DD67D1636DF5EE10B2F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
Manifest number:          0A32
Signing time:             Wed 26 Jun 2024 01:03:11 +0000
Manifest this update:     Wed 26 Jun 2024 01:03:11 +0000
Manifest next update:     Thu 27 Jun 2024 01:03:11 +0000
Files and hashes:         1: 7P2CYdhriAUM_9b-Ti7ahWJDxh0.roa (hash: j6koATZKfAy6H6CAzvy/86RREh0OIybMIqG5jGwGee8=)
                          2: AxJZJZJDXQQxIDuYYFPAfDT1tIc.roa (hash: uhW0irGiMfcTISDl2jYvGF+2wBIavExDXe6RbS2z130=)
                          3: LvgliWlwKOYLnIL9SurKrYlAW9A.roa (hash: tII6yfde1nMHR8s9/b5EW+wqC7XaX/SLbOw9PlryIJk=)
                          4: SeIGX5WVfUcp3xwMF4P4CSTytaE.roa (hash: pcA9IyYvrZ85IzneQbBVkQRVCNdSEDsd1/ycwFRTdYQ=)
                          5: TmXOKeiFO094g4qPgwAXVhUTPDk.roa (hash: Phu0heoSgpxcZvOkLdXEjyPxIFVbWm+h5RH8qfAL+3w=)
                          6: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: laV2Eu7xNKq26kix8NjosQlKjwtCs/GSlcOPh87Rrjo=)
                          7: bIXbGnmiAnAoUxSiZ74UzpvmjEo.roa (hash: rg7zY081joyocJhHRS/oclCCECNCYTg6Fxkf7JBPIQo=)
                          8: cnwvNBqIXBzEPYTjifJARBhAA1A.roa (hash: 0JcOEb/y04enmGbtLTRfBKmjgZx2s1JVBenkbDOtk+o=)
                          9: tSLbbP-ksJeNISvS2zPN-4MZwJU.roa (hash: z6+riQPNEy9IxITj8M6n55nEMfi9v914HUcGN3hZGiA=)
                          10: uV-avjwEhJXUnJxEPBfWqSAkiic.roa (hash: G/o6tnmxcuFVCjHQENQTBXCWN7/gwn5319+TNjfcEPc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:11:6c:d2:a2:4d:d6:7d:16:36:df:5e:e1:0b:2f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
        Validity
            Not Before: Jun 26 01:03:11 2024 GMT
            Not After : Jun 27 01:03:11 2024 GMT
        Subject: CN=092861c78f4678a0aa748e8479707f9dcb9dc834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:57:5b:3f:95:70:66:a1:f0:57:a3:87:7a:
                    f8:b1:42:db:5d:80:7f:fc:c1:49:d4:74:22:09:09:
                    fe:8b:91:b5:ab:70:ec:88:82:06:c3:65:7d:55:89:
                    12:f7:e4:78:48:a6:c8:28:d9:2a:c9:81:7e:2c:df:
                    fe:f3:eb:a7:ac:3a:f3:49:d6:b0:0c:fb:3d:55:7c:
                    cd:6e:7e:aa:08:d9:c1:1b:bc:53:e6:06:c0:dd:8b:
                    2c:08:db:bc:ce:fb:93:a8:f1:77:ba:ef:65:92:84:
                    75:f5:f8:b2:6c:b2:53:c3:1f:9f:a5:5d:77:e7:fb:
                    ae:e2:51:00:3b:f6:43:55:94:46:5c:84:ed:a8:1f:
                    1c:4c:36:1e:76:c4:04:b3:b0:1d:75:1d:99:e4:7a:
                    ea:4a:55:72:53:e1:8e:fd:7e:b7:6c:84:dd:c9:4c:
                    c7:7e:62:75:a3:1d:18:21:4e:b8:49:56:67:e8:55:
                    a1:5f:09:b5:8b:b4:22:d8:47:19:a4:de:d3:7b:88:
                    85:25:0b:0c:b9:5c:d5:b9:fa:a7:b2:f4:79:92:7c:
                    cf:c2:07:79:b1:93:04:9b:0a:82:b3:1c:ee:4e:2f:
                    7f:4a:75:ea:f1:9f:15:ae:64:c7:f9:05:dc:95:db:
                    91:53:ca:4e:34:16:8d:b3:46:8d:22:09:a5:42:76:
                    b9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:28:61:C7:8F:46:78:A0:AA:74:8E:84:79:70:7F:9D:CB:9D:C8:34
            X509v3 Authority Key Identifier:
                keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:7b:70:8d:ca:b5:fe:56:46:ba:da:e2:de:96:f0:69:10:
         8e:6c:87:42:e1:bf:07:bc:e0:3d:fa:e8:ed:1c:a7:1e:87:47:
         05:b3:8e:6a:02:86:f3:25:8a:13:60:a3:17:11:be:64:47:99:
         64:3a:98:bb:4f:5f:87:de:23:80:89:94:44:4b:ae:0a:69:57:
         d8:7d:74:88:e8:99:93:8a:69:b2:35:de:d9:39:b9:8c:35:a4:
         ef:c2:16:85:62:8f:55:dc:a6:ed:85:ff:0d:f1:5a:23:74:d0:
         06:0d:19:5d:5f:1c:e9:ad:14:00:2e:67:47:0b:57:2a:d1:5f:
         e0:ea:21:96:d1:e3:91:ac:5d:86:44:0a:cc:d3:57:e5:a7:81:
         a7:67:3b:8d:f0:6d:d3:3f:57:5c:07:75:8f:57:f4:36:25:48:
         64:6a:95:72:fe:f6:47:e6:81:d7:b9:71:79:6f:f5:bf:12:22:
         a1:d9:de:8c:83:40:29:4c:30:60:57:8e:5d:76:cf:61:32:8d:
         76:72:59:ad:82:2a:6e:3b:a8:98:1f:26:5c:f3:7c:92:66:c0:
         4b:da:bc:98:9d:a9:fe:9c:52:f1:4b:4e:ac:26:20:71:8e:34:
         25:76:3f:92:3d:42:95:12:8b:6f:32:1c:9f:e9:fa:16:de:30:
         7b:89:4d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 06:27:47 2024 by rpki-client on console-fra.rpki-client.org