Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
File:                     gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft (raw, json)
Hash identifier:          5nJAN/9YeGa4sACsseNPocBhec0MQ0k2yKr/6veWTF4=
Subject key identifier:   56:1F:16:79:E4:CE:98:52:35:B1:AF:55:05:EA:8C:1C:1D:3F:7D:0D
Authority key identifier: 80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20
Certificate issuer:       /CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
Certificate serial:       01905358F625DFB848F0AB2A4389BA369ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
Manifest number:          08D4
Signing time:             Wed 26 Jun 2024 07:00:57 +0000
Manifest this update:     Wed 26 Jun 2024 07:00:57 +0000
Manifest next update:     Thu 27 Jun 2024 07:00:57 +0000
Files and hashes:         1: Wq_YeHfxuSt71bK3QZZ0UpbikkQ.roa (hash: 5ls54/mw/KTX0tCQErllYc2b+fPCSqz93J7wARJdS54=)
                          2: gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl (hash: yjlEsvFMIc2hjO6X0197JRt9XHAdMv7SHDUU45mTs00=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:58:f6:25:df:b8:48:f0:ab:2a:43:89:ba:36:9e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=807bd62fd8d35308dbc8b1fd5f1727af57abd220
        Validity
            Not Before: Jun 26 07:00:57 2024 GMT
            Not After : Jun 27 07:00:57 2024 GMT
        Subject: CN=561f1679e4ce985235b1af5505ea8c1c1d3f7d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:09:7f:36:b6:42:3b:59:7d:fc:bd:fb:27:
                    9a:38:c1:11:16:3c:06:e5:9a:3d:79:19:11:c4:04:
                    e5:72:47:dc:bc:71:4d:0b:62:34:e9:8b:dd:c7:c3:
                    1c:86:0a:e3:83:3e:71:03:b7:af:20:28:2d:76:35:
                    fb:34:7a:67:bb:fc:57:e1:00:66:9d:61:24:ac:63:
                    ba:95:3d:94:98:b9:63:ca:66:08:97:cd:76:15:f9:
                    86:38:2c:24:b8:0b:65:bd:f3:8a:dd:6d:c2:1e:49:
                    eb:3d:4b:5b:c2:4e:6f:a9:f1:3c:53:c6:97:b5:d3:
                    a2:8b:b0:4e:c9:08:b5:3e:83:91:7c:62:8c:76:a9:
                    10:dc:b6:f1:27:5f:72:69:58:f3:f3:af:94:d8:80:
                    5d:78:91:42:15:fa:59:f9:8c:a9:08:05:f2:c1:5a:
                    a2:37:2a:01:53:1c:04:15:40:dd:1b:3b:17:82:9a:
                    8d:05:3e:9b:aa:32:d3:55:3b:0f:04:ff:f8:84:7b:
                    35:55:7b:f3:26:56:79:16:b0:53:8d:67:72:9e:3d:
                    f2:a3:eb:d1:22:41:c9:83:4c:0c:97:d4:87:5c:62:
                    ff:19:05:94:ec:54:d2:e9:d7:ba:81:19:a7:7c:aa:
                    2e:4f:dd:92:d5:56:7b:92:6d:8d:2c:77:29:4f:87:
                    be:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1F:16:79:E4:CE:98:52:35:B1:AF:55:05:EA:8C:1C:1D:3F:7D:0D
            X509v3 Authority Key Identifier:
                keyid:80:7B:D6:2F:D8:D3:53:08:DB:C8:B1:FD:5F:17:27:AF:57:AB:D2:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHvWL9jTUwjbyLH9Xxcnr1er0iA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a0ab51-9dae-410d-8fd9-08fadeb2dbe7/1/gHvWL9jTUwjbyLH9Xxcnr1er0iA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:0e:d5:62:fc:be:5e:a2:84:31:58:f6:81:34:fa:79:cc:d6:
         97:c0:e8:10:4e:5c:69:ea:8e:d1:17:91:4b:2f:39:b7:ce:06:
         6f:4c:a9:b2:05:53:1e:6b:bd:97:5f:8f:43:b8:69:d3:62:c3:
         a3:76:85:c1:53:7b:f3:95:3f:32:ce:8c:73:4f:12:3a:1d:21:
         e5:09:2f:27:ad:7a:a8:47:6c:31:db:44:8c:6b:e0:2f:17:f5:
         13:0f:94:a0:d2:b0:41:b3:70:c6:97:e9:09:11:d1:5e:67:85:
         76:41:9f:7a:66:41:1a:4b:dd:70:03:d9:49:ff:e3:bd:5c:fe:
         d6:cf:21:76:cc:5c:a5:59:fe:85:a8:51:d9:05:ed:1e:38:98:
         be:ea:1c:85:b7:f0:4a:a1:05:9d:75:bd:68:6b:8b:18:89:7f:
         b6:78:08:d5:dd:4a:2b:95:85:08:e8:bd:c0:5b:b0:39:30:52:
         6a:45:a8:5f:ce:a8:d3:80:e1:93:14:e7:6a:9f:33:0d:f4:2a:
         5a:b7:66:91:fc:5b:b2:00:6f:ec:26:42:cb:05:db:8c:05:e1:
         47:27:c9:41:98:bc:5e:0f:71:d1:e4:f8:a5:3c:85:1d:32:41:
         c4:45:f7:81:a9:82:35:2a:c1:cf:0d:e8:79:48:4d:3b:08:19:
         9b:03:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:36:00 2024 by rpki-client on console-ams.rpki-client.org