Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
File:                     aa9wvad8-FjhZNa3xwnoeP0aYEU.mft (raw, json)
Hash identifier:          1cMxu8teP9pxUZznoxtyL/qTTwk75aP9Ng36EhJVdXU=
Subject key identifier:   F8:C5:1F:D5:80:30:FC:54:6A:B2:7F:CD:D1:BC:A8:40:7B:C8:6D:A2
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Certificate issuer:       /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial:       01904869DB71D86675841CBE3CA6FA33BF4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
Manifest number:          11DC
Signing time:             Mon 24 Jun 2024 04:03:35 +0000
Manifest this update:     Mon 24 Jun 2024 04:03:35 +0000
Manifest next update:     Tue 25 Jun 2024 04:03:35 +0000
Files and hashes:         1: HrLubRvcOt-jwd15yCTpMs7T4AM.roa (hash: bVbU8onnYRt8k2yIqBxq53NajhWCar8fHY42CFzFZA0=)
                          2: S5ivU2r8Cuu-w_aiAtlP1pvCGw0.roa (hash: tM9XiMVhFJThfqwFzCBglkaUFkaPLedEwp33jKDiHEs=)
                          3: aa9wvad8-FjhZNa3xwnoeP0aYEU.crl (hash: j1Q+25liyLZVC9kaW61tF/xUPFxtLR0uewTC8nQg40o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:db:71:d8:66:75:84:1c:be:3c:a6:fa:33:bf:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
        Validity
            Not Before: Jun 24 04:03:35 2024 GMT
            Not After : Jun 25 04:03:35 2024 GMT
        Subject: CN=f8c51fd58030fc546ab27fcdd1bca8407bc86da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8c:1c:0c:44:b4:1c:a0:98:04:75:22:f1:81:
                    37:47:97:42:65:51:29:19:41:f1:3b:f6:3f:ff:96:
                    62:a8:7d:93:02:b5:5f:56:c6:44:36:83:d3:2f:64:
                    ea:04:7a:38:45:22:7d:e0:b8:59:89:60:bb:92:84:
                    d6:63:a8:d2:e0:4b:10:04:5b:2a:a3:f3:11:f5:ef:
                    9d:24:e5:d3:1a:59:a0:b2:90:ae:6e:8a:78:72:b9:
                    61:df:19:fb:65:6a:ea:98:6a:26:0d:09:8a:4f:86:
                    ce:99:38:08:57:81:45:93:01:14:48:f1:ea:07:db:
                    24:b1:c2:f5:48:85:fc:e8:b4:e0:ab:95:a8:f0:27:
                    41:62:7e:f6:4b:0c:be:11:95:4c:97:02:d3:6c:58:
                    64:f4:b6:9e:16:6d:86:fd:27:81:3d:91:2d:45:ee:
                    4c:ee:6a:a6:82:77:4d:54:6f:63:86:1b:22:7b:d6:
                    28:f3:68:4a:ae:61:64:09:79:a8:fd:8b:fa:75:ff:
                    22:bf:15:3a:5f:cb:3e:f5:66:5e:80:ee:03:47:2d:
                    c5:63:b1:5a:3e:38:f7:35:9d:e6:5c:fd:97:f3:35:
                    20:23:fa:50:14:05:21:7a:1c:52:2d:df:2b:de:c9:
                    41:cd:7a:68:04:c3:76:86:c0:c0:6f:f8:7f:3c:3c:
                    b3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C5:1F:D5:80:30:FC:54:6A:B2:7F:CD:D1:BC:A8:40:7B:C8:6D:A2
            X509v3 Authority Key Identifier:
                keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e5:9b:e8:04:dd:44:2e:b6:de:79:b4:a6:8e:3b:1c:0d:e4:
         0f:84:97:ae:a9:78:34:f2:d4:8c:14:ea:7d:1d:e6:38:54:bd:
         f2:03:40:d5:e9:59:2f:2d:86:5a:c4:02:40:b3:89:80:21:68:
         13:0c:98:49:d1:d0:8a:38:3d:48:51:d2:75:63:47:0d:9e:9f:
         f4:53:e4:8d:eb:e4:cb:9d:b2:5b:82:c7:31:c9:84:db:05:b2:
         81:81:93:e1:b5:7b:6c:ca:fd:68:93:98:e6:34:6b:09:3e:00:
         de:b3:f8:09:03:31:a1:db:83:0b:6c:d4:16:db:7f:f0:3f:58:
         3b:08:0e:c2:dc:a3:b7:7a:5e:91:ad:1e:4e:32:24:5e:0d:7f:
         86:2c:01:45:45:c5:0f:15:20:1c:c6:8d:2c:83:83:81:37:bb:
         b9:ae:53:77:74:70:a3:7d:fc:5b:d8:ae:99:59:d9:cb:9e:50:
         5d:8f:08:ca:20:2c:34:2a:52:f6:f8:2f:08:0b:ec:45:ec:40:
         d4:92:1f:4a:fd:7b:71:39:f7:7b:f4:3d:fc:5c:6e:5d:d8:65:
         63:f2:28:05:61:fc:46:03:a7:0e:df:32:88:a0:89:6d:73:66:
         fc:a7:89:7f:01:9c:ed:b1:8c:e2:fc:3b:0a:78:c6:c3:19:6c:
         be:03:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:19:27 2024 by rpki-client on console-ams.rpki-client.org