Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
File:                     gVeAUy7Smj-A57pBTvyzednsl8k.mft (raw, json)
Hash identifier:          06oBzVV5gCEF20luiK4ToDrKUh9r96VUbdG8Va2vf8U=
Subject key identifier:   7B:3C:03:67:12:F7:BE:D0:7C:2D:7F:05:F7:8D:51:E5:EB:2C:81:FD
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Certificate issuer:       /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial:       0190351A6F073213AE5CE140FBABBC85C7AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
Manifest number:          048E
Signing time:             Thu 20 Jun 2024 10:04:03 +0000
Manifest this update:     Thu 20 Jun 2024 10:04:03 +0000
Manifest next update:     Fri 21 Jun 2024 10:04:03 +0000
Files and hashes:         1: LR3jEfrUN4yIefnAiD-r2Za5N-Q.roa (hash: eH7vuPzpUL6JG3C8yaxH/G5fYsc2tnwjei7aa7wCEOc=)
                          2: gVeAUy7Smj-A57pBTvyzednsl8k.crl (hash: UBhiYIiJuG/Hhs8IrIZjNR3MPXgjGwR+mNxXwfYvjYM=)
                          3: mFLzpg2In93kVDweWohB3Z8cDz0.roa (hash: I/EeoGUI7gJ3metUq/KLvR+HI3txrbaCu+hhssHyHOY=)
                          4: sOYBIWat7bOONFBH9TF6w8PQB4A.roa (hash: 1jEe0G9j1rFYW2ngfziDE+W9vnyTm8YVb48TY1RO6uc=)
                          5: tKJvDrTbPo6mtN887xHq1ApEaKQ.roa (hash: H5pfrhbIbrfftmUGxtYT8tpQ6zdNFv/BArKLQvoJsbc=)
                          6: u-PXxIvLtGFB2NBtpbuBhma3_D0.roa (hash: A86m5FTOUTkY+pxKZ/nEDlLAoGQUS6K+fDJwfzPNXic=)
                          7: yQp29sJqe9H0wZr5HoBC2mw0i6k.roa (hash: 3MLKHPZ7UMFaQuUdf3i1UxyEIC/OAvrMcr4Ug0IRGZ0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 10:04:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:1a:6f:07:32:13:ae:5c:e1:40:fb:ab:bc:85:c7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
        Validity
            Not Before: Jun 20 10:04:03 2024 GMT
            Not After : Jun 21 10:04:03 2024 GMT
        Subject: CN=7b3c036712f7bed07c2d7f05f78d51e5eb2c81fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a1:fd:81:bc:b6:cb:cd:4d:e6:b9:96:04:34:
                    9d:bf:30:89:e7:53:26:b0:b0:82:d8:c7:b1:f5:07:
                    b8:1a:c7:3e:82:78:6c:35:5d:be:64:19:00:bc:d5:
                    d3:5c:2c:09:dc:9f:bd:61:aa:24:9b:6e:fa:af:fb:
                    83:ea:50:e7:dc:5d:b7:25:76:eb:af:13:d1:43:fd:
                    9e:fa:b8:be:a6:77:58:37:86:12:0c:2b:d0:7a:11:
                    cb:11:b3:ae:ae:66:da:74:a4:25:96:68:30:b4:4d:
                    dd:7e:16:18:ae:8e:1d:02:2d:b3:da:bd:e2:c3:eb:
                    6e:20:ec:a5:d7:90:f8:67:64:6a:1b:2b:fd:79:68:
                    c5:63:5b:2f:fd:ac:c5:7a:a2:6e:04:a1:86:92:1e:
                    7b:20:6d:7e:49:5e:85:a5:cb:b1:74:00:24:c9:9f:
                    68:3f:ac:92:8c:62:91:98:8f:5d:da:73:51:fd:12:
                    8d:74:1f:90:ae:b4:1a:ea:07:5c:c4:b6:88:c4:7d:
                    f3:77:27:e1:1f:3b:e9:5f:28:a9:e3:70:54:94:90:
                    76:fe:ae:f5:ac:17:3f:b6:27:f8:93:8c:f1:2d:ff:
                    31:4d:4e:18:9f:1d:08:2a:50:be:c9:04:2c:6e:ef:
                    e5:c2:5d:c7:82:2b:61:ce:61:40:f2:58:26:13:c8:
                    8d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3C:03:67:12:F7:BE:D0:7C:2D:7F:05:F7:8D:51:E5:EB:2C:81:FD
            X509v3 Authority Key Identifier:
                keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:8a:37:b7:af:2e:75:10:9c:f7:2a:8a:a4:9b:66:86:6e:dc:
         cb:38:ac:74:5d:9f:81:27:de:35:6b:03:35:85:b4:06:07:b2:
         30:6a:39:88:c8:b8:ba:23:f0:4b:72:99:5f:6b:d3:ec:27:2e:
         db:b3:62:56:05:f6:40:69:6c:40:4d:60:5c:38:83:4c:b8:e5:
         b9:78:70:1e:2c:75:54:a3:9c:65:46:a9:fc:d3:67:1c:70:fc:
         0a:5f:08:ee:a0:a5:f1:9f:c1:8f:01:06:3b:34:8e:0d:8f:4c:
         36:85:80:ad:6d:45:d2:33:bf:ee:68:64:60:14:01:34:b1:9e:
         bd:50:2b:74:8c:b0:a3:0c:7d:7c:48:cd:56:b0:4d:e3:26:4c:
         17:0c:98:10:ce:3d:45:b5:87:0c:8d:35:7e:e4:e2:07:82:8d:
         fc:69:13:d1:ac:59:53:b5:c9:34:15:fd:2d:34:7d:68:36:2c:
         6a:21:de:8a:e6:06:da:13:b0:d1:0e:2f:a5:0e:2c:06:60:a2:
         41:ef:08:5f:d5:dd:f7:f1:04:32:d7:d2:b2:5a:0e:cd:8e:b5:
         0e:bb:3d:98:36:a0:00:0a:e7:af:69:ab:4c:db:f6:06:df:c9:
         08:b1:e5:d0:b1:59:f0:67:18:e3:1f:0c:9c:ac:53:cd:cb:d7:
         78:53:9a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 13:21:24 2024 by rpki-client on console-fra.rpki-client.org