Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
File:                     MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft (raw, json)
Hash identifier:          t/64Z/DU5UqzV0pqrjQPK64O0Nz/ruz5kaaLoTQRExI=
Subject key identifier:   49:5A:C1:B8:BD:6E:68:61:37:E8:AD:B2:89:CB:77:D3:99:40:D3:D7
Authority key identifier: 30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E
Certificate issuer:       /CN=3016b10d0ac218017c749394e4f2519cf2c0514e
Certificate serial:       019072E4D036A3D004A29EF3AA17860CF7C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
Manifest number:          11F1
Signing time:             Tue 02 Jul 2024 10:01:56 +0000
Manifest this update:     Tue 02 Jul 2024 10:01:56 +0000
Manifest next update:     Wed 03 Jul 2024 10:01:56 +0000
Files and hashes:         1: 0_B8sTTsZrNrOobe3kxL8SU4RMk.roa (hash: WetLMtQbpHvXpYMXSNCMCeEjQp2+OrKcsGexHL/DzZI=)
                          2: MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl (hash: Y7VpfoQgjIWfiEz42ajjghMIRLgIjaxNKrDVwXrbBIc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:e4:d0:36:a3:d0:04:a2:9e:f3:aa:17:86:0c:f7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3016b10d0ac218017c749394e4f2519cf2c0514e
        Validity
            Not Before: Jul  2 10:01:56 2024 GMT
            Not After : Jul  3 10:01:56 2024 GMT
        Subject: CN=495ac1b8bd6e686137e8adb289cb77d39940d3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:7b:4a:99:74:6b:65:fe:c0:e9:33:78:f3:
                    dd:8b:f6:d8:29:de:c3:de:bf:64:06:f1:4b:5f:14:
                    e0:12:2b:69:16:1c:9a:05:1d:b7:a5:ac:08:06:cc:
                    59:76:d5:c1:4b:13:cc:ed:3e:06:6f:b8:2c:11:b6:
                    1d:34:05:72:61:6f:3d:90:91:c6:9d:7c:e5:fb:4c:
                    6b:49:11:88:ec:72:d1:fa:3f:f3:f4:9c:61:85:39:
                    1e:29:22:7c:91:72:ff:cd:8e:00:85:43:57:dc:9b:
                    eb:e6:3c:c6:d3:37:8d:f5:7c:26:07:fe:6c:be:52:
                    27:68:2e:62:04:75:84:98:34:ae:b2:0c:1f:7d:38:
                    56:3b:0b:1e:15:19:e0:3d:df:1a:3c:a2:10:96:71:
                    89:31:55:10:37:b5:23:bf:07:8d:e1:e9:b2:38:7a:
                    91:d1:1f:73:5d:ce:c4:ae:4e:51:c2:d3:0f:e6:67:
                    2d:18:2a:f3:f0:ad:53:bd:19:2b:39:e7:42:51:7b:
                    8d:fc:57:22:45:4e:99:0f:d9:b8:4d:9b:31:22:05:
                    84:1c:27:cb:6a:73:19:33:88:e4:08:d9:92:ec:66:
                    39:54:4a:02:4d:c3:a0:2a:30:0c:4a:48:5b:2f:9d:
                    94:ec:f1:ce:db:bb:92:44:44:04:f0:57:63:17:35:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5A:C1:B8:BD:6E:68:61:37:E8:AD:B2:89:CB:77:D3:99:40:D3:D7
            X509v3 Authority Key Identifier:
                keyid:30:16:B1:0D:0A:C2:18:01:7C:74:93:94:E4:F2:51:9C:F2:C0:51:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MBaxDQrCGAF8dJOU5PJRnPLAUU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3eb64a-e6de-45f5-b68c-6936762d2fce/1/MBaxDQrCGAF8dJOU5PJRnPLAUU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:08:fe:ce:af:73:b1:04:4e:f1:4b:f8:7a:c4:96:c8:9c:12:
         db:6d:91:f6:ce:22:b2:10:66:96:80:7c:ba:aa:fc:1a:20:4e:
         f6:5a:82:a3:f8:97:80:68:0f:b1:d5:44:66:22:8a:92:f2:91:
         fa:73:62:69:ec:34:45:b0:f9:52:16:48:63:1a:b2:e5:71:31:
         72:38:28:ed:85:f3:e8:53:6c:c9:ec:ae:38:4e:4d:2b:44:07:
         8e:29:a4:d5:d9:87:13:25:c4:91:ad:34:4c:d7:88:41:d6:c0:
         1d:ce:28:a1:86:3a:41:3f:6f:a4:fe:7c:ba:89:05:2e:97:cf:
         cf:aa:a7:0c:cd:d9:85:03:56:92:b3:73:b9:78:e0:41:3e:2f:
         bb:d9:73:4d:9a:cf:00:5b:9f:24:d0:de:0f:1d:32:0e:36:64:
         7a:e8:39:7c:37:79:39:c1:39:cc:39:70:27:1d:2c:be:52:09:
         fd:89:4f:38:7c:c9:f4:dd:4e:d3:ca:62:3c:41:31:46:18:53:
         a4:c2:68:83:73:c6:c3:ba:60:c4:96:c2:d2:91:5c:8e:8c:71:
         04:d4:0e:ff:c4:b9:bc:3d:1f:0f:9a:84:26:47:fe:13:7a:ed:
         62:40:7c:41:8e:10:98:a4:79:38:01:77:0e:29:49:05:08:37:
         8a:ea:84:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:46:37 2024 by rpki-client on console-ams.rpki-client.org