Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File:                     bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier:          DJ/JhNtL6USoEVTulJie9H2DxDRtZlUYmjmsKBkAsMI=
Subject key identifier:   D9:43:89:67:7A:68:AE:96:78:95:E2:96:B2:9D:E7:A9:B0:3E:06:2F
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer:       /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial:       019040AF7AB3A998221D12B3EB6237F29382
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number:          0EC3
Signing time:             Sat 22 Jun 2024 16:02:40 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:40 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:40 +0000
Files and hashes:         1: CxHneHeP-VZ1pphxtnUDc_MTPZc.roa (hash: VQ0ydonNZIDl6XRXXlGMhP6PYqQTLIkVkfhHtBbiEQU=)
                          2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: 6HUyrmvLSSqSptgJQo8zoEVsfA0ZsDgxj3xtGA7ji9w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:7a:b3:a9:98:22:1d:12:b3:eb:62:37:f2:93:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
        Validity
            Not Before: Jun 22 16:02:40 2024 GMT
            Not After : Jun 23 16:02:40 2024 GMT
        Subject: CN=d94389677a68ae967895e296b29de7a9b03e062f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4e:96:4d:6a:54:0a:48:26:a6:cc:67:dc:51:
                    e4:90:b6:da:74:e0:52:93:b5:f1:75:f0:fb:01:c1:
                    3b:1f:33:8e:63:f8:ab:31:bd:a0:ef:32:36:84:38:
                    05:5a:ee:e2:f4:46:5c:53:3b:92:de:da:61:c5:c8:
                    f4:09:af:21:6e:04:2d:5e:40:fc:e1:d5:6d:9d:ae:
                    88:cc:a6:5f:6f:f2:8c:f3:9a:8e:11:1f:7e:ea:32:
                    a0:be:0d:ea:fc:a9:4f:62:ea:d5:5c:c6:e6:b0:09:
                    cd:f8:bb:51:bd:4b:ad:77:44:26:78:04:c1:cc:bd:
                    4b:0b:e6:e8:7d:41:12:45:4c:2a:0b:0c:d1:85:fc:
                    13:11:97:e9:41:9a:50:10:40:ce:03:8e:87:3e:4c:
                    40:a0:e7:7f:bf:5c:94:1c:5e:8f:ad:41:5e:59:08:
                    34:f7:e3:a5:b1:78:7c:5f:52:1c:8b:c0:66:99:62:
                    53:dc:21:19:e7:5c:3b:71:c4:ff:aa:f9:cf:d4:a1:
                    34:db:bc:91:3a:59:85:f8:98:07:61:6a:f7:b7:e6:
                    f9:be:4b:6f:11:ed:71:81:8f:12:be:87:aa:d3:88:
                    c9:34:73:ef:9f:09:63:57:ff:e0:59:c7:db:18:19:
                    0e:45:d2:bf:ad:06:8c:ec:f2:45:54:9d:b3:10:ef:
                    5a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:89:67:7A:68:AE:96:78:95:E2:96:B2:9D:E7:A9:B0:3E:06:2F
            X509v3 Authority Key Identifier:
                keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c2:ea:9f:95:06:b0:4f:3c:43:70:90:39:d2:82:6d:61:a2:
         28:8a:a1:6b:e3:76:a2:43:bc:f7:93:5f:b9:b4:90:eb:40:81:
         fa:e1:2b:09:9a:84:f7:a1:f0:fa:87:ca:0c:7f:78:72:dd:7f:
         ed:73:d1:6a:ad:52:c6:d9:1e:ab:1c:58:e4:c1:cc:77:00:ff:
         29:8a:6d:20:11:1b:41:19:fb:f4:0a:82:61:2a:c5:36:31:0c:
         97:e1:60:31:f4:5e:ef:bd:26:5d:17:68:73:f2:cc:28:51:eb:
         0b:dc:39:71:43:59:56:82:1a:7e:48:5f:14:33:e0:ff:c6:22:
         cc:af:f7:e9:86:74:14:6b:d5:e6:0b:0f:2d:82:21:ed:c9:eb:
         3a:c5:76:cc:85:ac:2d:3d:1a:fd:07:34:83:56:7c:3b:e2:b8:
         ef:00:9f:26:45:a0:d4:1e:67:df:e8:ec:1e:26:6a:8a:1e:b4:
         23:59:00:0b:82:50:31:8e:e8:11:66:c4:f4:d3:2b:7e:1d:29:
         f7:96:c1:8a:bd:bf:00:da:38:b3:08:97:e4:1e:a4:6a:58:62:
         fa:15:4b:37:c7:43:7a:3e:b1:55:b4:93:42:89:ca:ee:9b:ec:
         95:06:a9:7e:ac:35:4b:1b:b2:a4:99:06:c9:bc:4a:35:66:11:
         4e:89:ff:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:27:43 2024 by rpki-client on console-ams.rpki-client.org