Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File:                     gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier:          P3Hu0/stOYaEDxMUZUKaop3xSDTs30SVtLckH1Tnek8=
Subject key identifier:   4F:3E:B9:6A:7E:24:DD:9C:94:C3:F4:D0:94:7E:F0:95:11:59:2D:BD
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       01901BFF5800E9670BE5145ED27FEF242987
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number:          0481
Signing time:             Sat 15 Jun 2024 13:03:57 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:57 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:57 +0000
Files and hashes:         1: LR3jEfrUN4yIefnAiD-r2Za5N-Q.roa (hash: eH7vuPzpUL6JG3C8yaxH/G5fYsc2tnwjei7aa7wCEOc=)
                          2: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: 2/4L0oBhG0yJkyLFwywLl8Sv+DPf4uhaSTV/N2jMj5I=)
                          3: mFLzpg2In93kVDweWohB3Z8cDz0.roa (hash: I/EeoGUI7gJ3metUq/KLvR+HI3txrbaCu+hhssHyHOY=)
                          4: sOYBIWat7bOONFBH9TF6w8PQB4A.roa (hash: 1jEe0G9j1rFYW2ngfziDE+W9vnyTm8YVb48TY1RO6uc=)
                          5: tKJvDrTbPo6mtN887xHq1ApEaKQ.roa (hash: H5pfrhbIbrfftmUGxtYT8tpQ6zdNFv/BArKLQvoJsbc=)
                          6: u-PXxIvLtGFB2NBtpbuBhma3_D0.roa (hash: A86m5FTOUTkY+pxKZ/nEDlLAoGQUS6K+fDJwfzPNXic=)
                          7: yQp29sJqe9H0wZr5HoBC2mw0i6k.roa (hash: 3MLKHPZ7UMFaQuUdf3i1UxyEIC/OAvrMcr4Ug0IRGZ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:58:00:e9:67:0b:e5:14:5e:d2:7f:ef:24:29:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Jun 15 13:03:57 2024 GMT
            Not After : Jun 16 13:03:57 2024 GMT
        Subject: CN=4f3eb96a7e24dd9c94c3f4d0947ef09511592dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c5:4a:f4:9c:c1:8b:a0:03:d6:d1:3e:5d:cb:
                    68:12:89:38:ce:8b:cc:81:79:06:72:df:fb:59:38:
                    60:92:e7:95:52:9d:ec:2f:0d:69:c6:e3:1f:51:36:
                    51:64:32:11:06:24:bc:58:79:40:8d:a7:3e:40:40:
                    3a:f9:31:92:18:ab:fb:19:81:48:a0:87:78:cf:85:
                    5a:df:7c:c7:ee:12:4f:5d:a4:d9:be:8d:eb:f8:de:
                    ef:4f:ee:72:4c:73:e8:b7:c8:2d:4e:87:7f:82:c6:
                    bb:90:e3:c2:87:0f:c8:c7:07:6f:4f:96:aa:bd:b0:
                    8d:26:a0:98:4a:60:6f:cf:c5:4b:b7:aa:c6:7e:1e:
                    55:68:5d:fb:bd:25:8c:6f:db:eb:b3:97:ce:cd:25:
                    86:e0:16:62:92:98:8a:81:11:86:52:24:f6:c3:90:
                    ae:d5:ce:6b:25:55:8e:90:4e:08:b2:90:f1:7e:c4:
                    cb:9d:69:8d:44:07:9e:94:1d:a1:2f:72:8e:51:58:
                    3e:ae:38:f8:99:d9:f7:ad:c7:ac:7c:6e:df:d3:8d:
                    f8:bb:5a:8f:2f:06:b3:2a:9f:ee:0e:5b:2d:0d:34:
                    a0:b9:cd:7f:6d:d7:5e:80:34:79:51:0e:9f:38:52:
                    8d:6e:3d:52:d7:28:59:f8:5c:dd:8f:8f:d6:26:b0:
                    6a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3E:B9:6A:7E:24:DD:9C:94:C3:F4:D0:94:7E:F0:95:11:59:2D:BD
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a5:5f:82:09:ff:06:e1:39:5d:2a:40:a1:77:d5:9a:66:14:
         9d:b9:7f:d3:aa:79:4c:f9:86:5b:42:e2:b0:60:ed:48:04:15:
         a9:fa:ff:5b:6c:d8:ba:25:16:9c:f2:20:d1:d6:da:3b:79:8a:
         12:b7:90:76:bb:b7:ae:92:48:b8:1e:a6:be:14:75:51:dc:40:
         96:79:04:d4:6f:ad:0a:d7:32:67:b4:71:32:09:26:bd:9c:8a:
         70:f2:37:c8:9a:b6:f1:48:11:05:7a:27:0b:fd:53:5c:0f:94:
         78:94:ef:15:b1:69:89:91:d5:5c:17:0f:c5:71:11:7a:bd:73:
         66:9b:8c:00:9e:d2:c6:14:93:9f:ab:45:a0:e3:31:4d:b8:cb:
         03:de:75:8f:ef:f9:9a:4a:03:2a:20:f3:3e:4a:e3:5a:b5:03:
         e2:e3:ea:67:92:d0:8e:31:fe:4a:ee:2e:3e:16:f8:5c:59:f3:
         b6:56:39:25:4e:ce:7c:5f:11:c7:40:97:35:62:50:2c:b9:3e:
         c6:31:da:c7:07:6e:f9:a2:15:b5:a0:72:84:82:34:25:10:c8:
         9f:90:3e:01:41:dc:c4:c2:aa:0a:ab:c3:69:e0:78:8a:3b:53:
         ed:99:c9:4c:3e:4a:b2:b6:4a:05:07:33:bb:d2:9a:4a:73:65:
         e2:26:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:37:36 2024 by rpki-client on console-fra.rpki-client.org