Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
File:                     xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json)
Hash identifier:          VQFApNIcHMFSD4axNaem35su3yV5vD44FiF0LIII+DQ=
Subject key identifier:   06:59:2F:5F:C3:63:C2:57:CA:5D:B9:F3:6D:FE:EE:F5:1C:EB:36:B2
Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13
Certificate issuer:       /CN=c6a707934a762bbdf34fc0148f265ce124577213
Certificate serial:       018F8749E525519044763125AC2C9825D77D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
Manifest number:          0790
Signing time:             Fri 17 May 2024 16:01:57 +0000
Manifest this update:     Fri 17 May 2024 16:01:57 +0000
Manifest next update:     Sat 18 May 2024 16:01:57 +0000
Files and hashes:         1: 5pDXhBOPiimScgEhgBUoqo8OV4E.roa (hash: vkDk6oK7YAG+5tYuz2R7ORkBacWD6k+SvpKolvAGGS4=)
                          2: jRrRFFlGWzHGorDJqVAHzqKbZlE.roa (hash: k5CW/xG/npgPBLrAMvlEjOmrjAMEBe8g7zzF2Y/+FoQ=)
                          3: m7kZHk5Pb1qSXSwi709DcHbPWPg.roa (hash: c0a0Bo+qqCJdFeMlZnmxcq9/9va6LKKWAfoMXVmAt+Y=)
                          4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: BNgAF9JPYKDk8p9TMay5+VTNylkjDAuSfoA8cl27omI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:e5:25:51:90:44:76:31:25:ac:2c:98:25:d7:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213
        Validity
            Not Before: May 17 16:01:57 2024 GMT
            Not After : May 18 16:01:57 2024 GMT
        Subject: CN=06592f5fc363c257ca5db9f36dfeeef51ceb36b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:23:1b:a0:c4:7e:ba:6f:f7:8c:ac:23:aa:9d:
                    21:93:ca:9b:47:f8:aa:8d:16:c9:0c:8d:84:1f:06:
                    69:f6:ff:66:42:92:7b:ad:22:d3:44:a8:59:3e:a2:
                    10:89:eb:ea:68:1e:54:61:a3:1d:ee:11:f3:8a:80:
                    50:f5:09:09:32:7b:87:0a:19:ca:f6:5a:2f:c4:16:
                    8a:c4:77:8a:f9:6f:47:22:7a:03:59:d8:70:44:be:
                    4b:52:5f:fa:6d:62:c1:bf:53:ef:57:4d:55:c2:50:
                    67:58:b2:2f:72:42:17:d6:d9:5c:9f:c2:c3:ff:ee:
                    1e:32:a6:cf:25:60:e7:03:0a:01:74:91:7e:51:1f:
                    ac:64:54:fe:0c:20:36:aa:a8:c5:c9:fc:59:33:77:
                    14:13:15:2c:6a:a7:15:54:b1:74:bd:2e:28:bf:09:
                    9c:9c:72:b8:b5:b8:0a:34:9e:52:98:eb:f1:92:75:
                    b3:69:fc:1a:15:8b:ef:ad:23:f5:06:16:f9:3b:a0:
                    08:3a:11:86:13:69:cf:0e:a8:56:17:70:1f:4c:cb:
                    d7:7b:74:40:fb:44:29:10:ef:a3:55:5e:f9:01:65:
                    91:fb:8e:e3:0e:12:00:cd:56:5a:cf:13:62:15:ce:
                    ed:69:57:a6:40:36:9e:8c:65:7a:09:79:fd:bf:93:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:59:2F:5F:C3:63:C2:57:CA:5D:B9:F3:6D:FE:EE:F5:1C:EB:36:B2
            X509v3 Authority Key Identifier:
                keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:89:0a:3a:b1:d5:d7:23:77:70:27:34:19:5e:8a:9c:34:07:
         2a:b3:84:cc:46:98:b0:bf:6c:d0:d8:df:0c:71:65:f4:22:2f:
         05:51:bc:2f:e0:80:fb:fa:2c:4b:7b:75:61:92:71:6d:58:51:
         8f:69:51:05:06:2a:22:9c:1e:0a:ad:69:fc:b8:ba:98:d2:ae:
         f6:35:e1:5d:f1:00:9a:0a:54:b4:8f:1b:c9:6d:8a:1d:00:fe:
         e3:f0:5a:8b:12:2e:51:34:4a:d4:33:31:37:9c:76:47:02:24:
         e7:6a:e2:49:1d:ea:f1:77:35:4a:b7:4c:a7:b4:46:cc:17:ba:
         81:aa:78:43:94:59:b6:a1:d1:53:33:1c:e2:5e:06:59:0f:2e:
         94:15:76:ba:57:33:d9:e5:e9:cb:fc:52:68:26:64:4a:af:ab:
         7a:77:a2:55:35:0e:8a:8c:61:29:dc:c0:d7:10:38:68:a4:23:
         3c:69:c2:d8:8e:49:5d:ae:6d:32:f1:d2:da:fb:61:1c:9b:b5:
         79:28:e7:74:ee:8d:05:ca:17:6e:22:11:1a:ce:67:f7:ae:36:
         ef:08:71:52:c4:15:89:f2:55:fd:f0:d8:f9:d1:87:0e:7d:8b:
         37:cf:2d:17:24:56:b2:1a:52:a8:90:f8:aa:a9:5d:e1:17:19:
         a4:7a:9b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:46:42 2024 by rpki-client on console-ams.rpki-client.org