Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
File:                     r5OFA9cpMWJty40elGsq4Gpz0C4.mft (raw, json)
Hash identifier:          oIC2Ta1CIsLG7yG4W8YO1UWWb0z7spgwuelZBG+M648=
Subject key identifier:   54:E7:BA:A0:95:79:D3:3A:AA:DA:EF:D7:A5:5D:D3:AE:45:12:64:44
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Certificate issuer:       /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial:       01907351A503D59ED26FCB56DC7E0B246676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
Manifest number:          11F1
Signing time:             Tue 02 Jul 2024 12:00:48 +0000
Manifest this update:     Tue 02 Jul 2024 12:00:48 +0000
Manifest next update:     Wed 03 Jul 2024 12:00:48 +0000
Files and hashes:         1: hYI06ipzcNLOb2fhNgJRx6apJKQ.roa (hash: imJUcxtFgTDaAZuzVX6DKWNucTokXErOAZEWWHSLcEU=)
                          2: r5OFA9cpMWJty40elGsq4Gpz0C4.crl (hash: BRLsJSbp0UrncKAM3viq9shkRSbKykdNcSNkVvTBu3g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:73:51:a5:03:d5:9e:d2:6f:cb:56:dc:7e:0b:24:66:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
        Validity
            Not Before: Jul  2 12:00:48 2024 GMT
            Not After : Jul  3 12:00:48 2024 GMT
        Subject: CN=54e7baa09579d33aaadaefd7a55dd3ae45126444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9e:be:40:a4:0d:07:af:cb:d9:e0:38:71:c8:
                    71:95:54:2f:ab:38:50:11:1f:68:7a:7b:85:d0:36:
                    01:d6:51:ab:8c:01:c5:ea:e0:b1:25:9f:c6:05:37:
                    5c:4b:2c:8e:6c:cb:06:c2:d5:ac:a4:57:db:40:85:
                    eb:a7:8c:7a:2e:3c:86:81:d2:9a:7f:fd:9e:ed:f4:
                    61:5e:04:3c:90:ed:f7:d0:69:31:5f:2d:33:14:9e:
                    25:f5:29:a7:57:5c:d0:83:a8:e9:65:dd:db:e6:98:
                    7e:8f:e8:0a:a9:7f:5d:cf:eb:d9:49:5f:35:ae:88:
                    f2:1f:05:c1:2e:5e:86:e9:7a:60:40:d3:43:b5:2e:
                    57:0e:a0:a2:a8:30:41:62:1d:a6:bb:1f:04:8f:af:
                    f8:d2:08:e5:0a:c1:2c:7c:af:5c:e8:4e:cc:17:bf:
                    83:bd:86:1d:d6:29:cc:7b:6d:f6:df:ed:84:e7:e5:
                    49:67:f0:d8:75:8f:13:4e:85:63:71:82:75:de:25:
                    00:b9:7f:43:0c:a2:65:4c:eb:db:c2:84:42:7e:97:
                    d0:1e:f2:b1:0d:93:7d:d8:9e:77:24:b5:4c:47:3a:
                    ed:0a:cd:4a:49:33:1d:a3:2c:bc:2f:19:07:90:f0:
                    de:69:a6:e4:7d:90:a8:ae:51:07:0a:53:67:a2:7b:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E7:BA:A0:95:79:D3:3A:AA:DA:EF:D7:A5:5D:D3:AE:45:12:64:44
            X509v3 Authority Key Identifier:
                keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d9:8f:fa:00:df:ef:f6:9b:be:d9:32:32:1f:6e:fa:f8:e6:
         6a:c6:27:7b:58:96:0b:9c:66:df:1e:e7:75:bd:ca:e7:bb:64:
         25:3a:3f:46:51:21:59:b3:d2:79:54:83:34:97:b4:26:99:d3:
         9b:91:81:ec:79:b6:29:e1:25:c3:fd:d9:51:56:54:6b:04:cd:
         29:3a:81:8a:18:b8:4a:ca:a5:aa:9f:a5:bc:17:78:12:06:60:
         22:16:9d:74:56:cc:14:fc:36:ae:fc:d4:c8:2c:c7:2c:8b:0a:
         8a:8a:f0:14:8a:5c:67:37:a3:ee:e3:85:6a:ee:ca:89:c9:df:
         a5:bf:cc:95:3d:fd:f6:f7:2c:42:13:c7:0a:d1:4f:3f:59:aa:
         60:a5:3c:5c:b7:5c:cb:f0:33:ef:c7:ca:3c:44:6d:a2:84:a4:
         7d:8f:e8:86:35:36:45:71:9c:b6:d3:91:8e:a9:79:28:14:6a:
         4d:3d:cd:1f:c0:1d:1a:af:81:a2:6b:9f:0f:8d:ee:70:01:6e:
         b8:a7:82:b1:2a:21:dc:ab:e8:8a:4a:4a:06:7a:5e:78:1a:62:
         a0:6c:cc:e2:53:fd:7b:a2:67:2f:95:ff:a0:03:42:61:db:2f:
         02:f1:c1:5c:f7:a0:41:ed:38:14:5b:fd:95:d3:48:17:40:1b:
         99:c1:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 16:42:36 2024 by rpki-client on console-ams.rpki-client.org