Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
File:                     AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft (raw, json)
Hash identifier:          iugIGkH+uw834e3ZKbxeNBlUKEgikHOYm0TLfMaPlvE=
Subject key identifier:   5B:95:0A:85:34:95:5B:7E:4B:FA:2A:A4:84:55:F9:1F:09:45:A3:10
Authority key identifier: 01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1
Certificate issuer:       /CN=017c90654653ac150028562b32431491b52147d1
Certificate serial:       018F4E35E208E0EC2CC41347C872252C35D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
Manifest number:          0939
Signing time:             Mon 06 May 2024 14:01:45 +0000
Manifest this update:     Mon 06 May 2024 14:01:45 +0000
Manifest next update:     Tue 07 May 2024 14:01:45 +0000
Files and hashes:         1: 7arvf6qTXBmTVVsPblBNn4gsfMA.roa (hash: 2HvJ70Dd3kj5uTF6UWiBM1U7pU6DRtqmM8FV7VK8so8=)
                          2: AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl (hash: N5YK6QzJomnunWkFdUJ/g04rWeHsvIQFhSfuKGIhQKQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 14:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:35:e2:08:e0:ec:2c:c4:13:47:c8:72:25:2c:35:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=017c90654653ac150028562b32431491b52147d1
        Validity
            Not Before: May  6 14:01:45 2024 GMT
            Not After : May  7 14:01:45 2024 GMT
        Subject: CN=5b950a8534955b7e4bfa2aa48455f91f0945a310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:40:0d:4e:42:29:7f:7a:6f:15:00:b4:3a:a5:
                    3c:68:1f:bc:dd:77:a7:34:ab:a5:b8:dc:c6:bd:29:
                    6f:e3:b6:fd:45:34:93:48:ad:40:24:e4:f6:d5:76:
                    3c:09:00:59:23:14:23:9c:0f:d3:39:b5:e7:1c:93:
                    f0:97:2e:07:e3:bc:c3:ee:c1:e8:2a:76:09:36:73:
                    08:0c:1c:86:8c:51:13:86:f6:b7:76:5d:62:4e:d5:
                    dc:1e:bf:4d:4e:c1:dc:29:04:69:dc:50:72:30:76:
                    f3:c6:91:a7:bb:b5:bb:84:c4:ea:54:33:a8:6c:b1:
                    98:35:f7:c2:fa:59:36:62:66:37:fe:fc:14:62:1e:
                    b8:b0:d0:c5:f7:7e:d6:0c:16:96:e1:cc:19:cb:80:
                    49:ab:c5:15:c4:6b:2c:aa:03:96:7c:cc:63:a5:7e:
                    1e:7a:b6:aa:6b:00:14:21:3c:33:f0:aa:73:1f:27:
                    5e:ce:c0:7e:ba:b7:8d:c3:1b:44:91:98:d0:e4:ba:
                    fe:7e:d5:1a:e5:12:15:fb:86:3a:1d:96:b6:44:b3:
                    87:7b:0d:95:7c:36:9e:7c:1a:88:4e:0f:93:03:68:
                    b7:6a:0e:10:7d:eb:d7:34:0b:78:51:4a:b0:5d:fe:
                    a1:ea:ad:ce:8f:e4:19:4a:45:69:9c:b0:07:c4:ce:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:95:0A:85:34:95:5B:7E:4B:FA:2A:A4:84:55:F9:1F:09:45:A3:10
            X509v3 Authority Key Identifier:
                keyid:01:7C:90:65:46:53:AC:15:00:28:56:2B:32:43:14:91:B5:21:47:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AXyQZUZTrBUAKFYrMkMUkbUhR9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/35b7e5-8864-4759-bb86-7013a6c43985/1/AXyQZUZTrBUAKFYrMkMUkbUhR9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:94:36:6c:c0:bc:6a:cd:f9:a3:05:e9:de:bd:ca:c6:c8:13:
         a2:62:d3:ea:fc:32:9e:7a:a5:c7:bf:c8:f0:c6:ae:dd:e2:40:
         90:95:db:62:5d:44:dc:a2:a3:26:4f:76:30:e5:58:45:93:e9:
         7e:f8:bf:cc:57:6d:d2:96:70:d4:6d:1d:53:77:4c:93:f9:f3:
         c3:6b:7f:81:7f:0d:ba:5c:3c:fc:05:ed:1d:31:81:f0:96:e1:
         cf:00:76:34:ba:6a:53:b2:bd:cd:a3:b9:f4:23:9c:76:97:b6:
         b2:15:51:73:90:96:62:af:e9:e8:95:6b:6d:ab:c7:01:ba:8a:
         ab:33:57:c1:c7:b6:89:3c:0b:e3:ea:b3:31:da:a3:ea:d4:17:
         fc:b0:e7:aa:2a:e4:f4:fe:b5:73:49:1a:f8:dd:14:13:23:6b:
         aa:0c:2f:85:43:ff:cb:cf:bf:6e:d0:1f:78:41:0b:ae:c4:d7:
         94:84:68:c8:ef:0d:fd:3e:5d:46:ad:c2:89:16:66:9b:ad:a4:
         48:40:57:f6:d0:f5:6a:0d:05:06:a6:d6:a3:4e:95:25:53:c4:
         9a:90:14:ef:ec:45:16:1d:e2:66:18:e8:63:2a:e0:9c:b2:2f:
         2b:59:8b:ff:b2:72:05:ba:d5:3c:43:79:e3:52:f7:7e:a7:2d:
         a5:5a:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:20:45 2024 by rpki-client on console-fra.rpki-client.org