Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File:                     x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier:          mOjLNEI9GHQsMB46x5Rf8rXqzTxVeWR2FWX0roPKJTA=
Subject key identifier:   2B:3B:E5:12:E0:22:B9:6F:EB:9A:2F:BB:98:D5:6D:4E:7B:67:DF:98
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer:       /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial:       019061820A9330D7D52AB5D22F4B2C2AF3B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number:          11E8
Signing time:             Sat 29 Jun 2024 01:00:30 +0000
Manifest this update:     Sat 29 Jun 2024 01:00:30 +0000
Manifest next update:     Sun 30 Jun 2024 01:00:30 +0000
Files and hashes:         1: V8ynhZMh_t3EKef-VFAdD6p_oBw.roa (hash: MB3ThIwz9t5K6hMmrVO/TTspnoQrgikCZKSJ43EX4Ho=)
                          2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: kGzsYpJTZkc50yY2kcyy1UCu82RW50ypry6rrXkC4Mo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:61:82:0a:93:30:d7:d5:2a:b5:d2:2f:4b:2c:2a:f3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
        Validity
            Not Before: Jun 29 01:00:30 2024 GMT
            Not After : Jun 30 01:00:30 2024 GMT
        Subject: CN=2b3be512e022b96feb9a2fbb98d56d4e7b67df98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:04:6c:40:1d:d2:f1:9a:d1:de:e2:89:fc:
                    8a:6a:59:19:c1:f9:6a:ae:e4:08:73:0f:9e:23:7b:
                    78:df:18:12:eb:a4:5b:09:e3:62:c5:44:dc:b3:54:
                    c0:90:66:bc:9e:af:db:e5:82:10:71:1b:38:a3:b4:
                    a0:b9:70:62:c3:df:60:e4:ec:1a:40:27:5e:52:71:
                    74:a9:53:c2:dd:f1:d1:19:27:b7:35:5f:f6:41:b6:
                    bb:63:78:d7:4e:19:17:93:8f:5b:8a:31:c9:34:eb:
                    f1:70:a5:12:97:6f:02:91:c9:83:ab:5c:2a:a8:2b:
                    4c:21:cb:6b:4c:75:a3:9f:a5:c2:90:64:bf:11:06:
                    38:1a:19:55:35:23:d1:ef:0b:ff:62:a9:a7:64:1c:
                    fa:b4:f7:70:ce:55:74:28:d0:19:ad:fc:67:4d:22:
                    b8:29:1c:b9:c2:25:00:c2:0d:1d:f6:19:00:0d:b6:
                    e5:09:42:25:0a:c9:07:55:e0:23:6d:15:ef:ee:9f:
                    72:f1:52:24:16:10:99:7d:33:93:85:1f:28:52:f3:
                    3a:9d:e5:66:12:19:fc:7f:24:bd:ff:65:6a:2e:68:
                    6f:cb:1e:f2:f1:84:f4:8f:ad:a5:da:9c:57:2a:c0:
                    d9:5d:aa:54:03:3a:9f:92:da:08:af:3f:9a:02:0c:
                    d2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3B:E5:12:E0:22:B9:6F:EB:9A:2F:BB:98:D5:6D:4E:7B:67:DF:98
            X509v3 Authority Key Identifier:
                keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f4:eb:b9:e2:4a:0e:dd:20:62:b3:67:11:a7:86:c6:33:b0:
         ef:6b:eb:8c:5e:ed:fa:43:b3:72:30:a7:7b:d4:b9:90:03:6d:
         a3:62:f0:d2:d3:de:66:b0:50:49:ef:25:ac:2c:f8:46:d5:c1:
         10:37:94:c2:f3:4b:20:81:fa:31:05:82:fa:b6:19:f2:3f:fc:
         7d:63:66:b7:8f:8c:4d:45:97:c2:75:76:bd:c4:9d:15:e0:5b:
         17:9d:f7:b9:8b:77:24:41:58:cd:9d:d9:d5:b2:76:ef:4b:78:
         6e:ff:0b:83:f7:73:a9:9e:4d:49:f2:a6:d5:02:52:be:db:e9:
         f8:a8:2a:d5:e7:4c:70:d7:e7:bf:2b:de:9e:a1:11:00:61:1b:
         6c:a7:c3:a4:39:31:68:3d:c7:ca:44:ee:27:bd:7a:0c:f8:3b:
         59:7f:f0:92:60:b9:80:7b:45:3c:d6:9a:2e:4a:ae:15:31:33:
         a0:a6:c6:c6:00:11:8f:49:d9:be:7c:94:18:64:f8:13:7f:ee:
         84:6f:a2:c0:88:a6:d9:0f:fd:50:43:c3:b5:64:20:7e:26:c8:
         99:03:6b:5d:7f:ea:44:bf:f0:1b:cd:aa:59:0c:6a:38:d2:a6:
         26:b5:9e:a6:12:eb:39:d3:47:38:8d:33:dd:f7:13:9c:1a:8c:
         a6:d5:d7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 05:43:58 2024 by rpki-client on console-ams.rpki-client.org