Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File:                     2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier:          RcpsJyKqZ8H3SzljYfhjbL8UP5yBUbFxc2Hx0V/JJMQ=
Subject key identifier:   B0:CA:2F:DD:B4:5D:35:C1:75:FD:CE:E6:19:0C:24:36:19:5C:E8:29
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer:       /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial:       01903AE4906137999D2F9467E74E5D5FCD4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number:          0CB1
Signing time:             Fri 21 Jun 2024 13:02:55 +0000
Manifest this update:     Fri 21 Jun 2024 13:02:55 +0000
Manifest next update:     Sat 22 Jun 2024 13:02:55 +0000
Files and hashes:         1: 0uPcW7iKdBzyIjJJqDBuGrEPoRQ.roa (hash: rYSmdZGMC01yUDQwwC/0Sd+9g9zimFWnAanv3V668GA=)
                          2: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: krHshlhRplFZJsd3vb1G4QLluHEUcl6i0vi6LeMg8vI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 13:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e4:90:61:37:99:9d:2f:94:67:e7:4e:5d:5f:cd:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
        Validity
            Not Before: Jun 21 13:02:55 2024 GMT
            Not After : Jun 22 13:02:55 2024 GMT
        Subject: CN=b0ca2fddb45d35c175fdcee6190c2436195ce829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:79:1f:75:85:3f:a0:8f:70:b5:a7:34:22:
                    6b:ef:01:a2:57:cd:34:7d:26:fb:41:91:15:04:a3:
                    c7:b8:cd:48:2a:4c:02:52:46:05:e7:2a:f8:c6:a9:
                    12:14:5b:2a:91:6c:fc:f2:2c:30:1e:41:68:82:15:
                    1d:47:99:bf:25:fe:82:5d:90:29:6e:9a:30:dd:eb:
                    cc:cc:79:45:0b:1d:4c:a3:73:fa:cc:4d:2a:69:67:
                    20:29:c4:af:91:ac:92:45:9b:3d:60:68:3b:c3:c5:
                    9b:9c:16:84:d0:22:f2:d3:27:f5:f7:37:b2:a8:1a:
                    8f:b6:65:3c:2a:c6:5e:2a:28:27:5b:0a:be:81:4d:
                    0f:8e:8e:c6:bd:75:d2:49:fb:2b:af:c1:26:0d:8e:
                    39:b0:f7:42:3c:ce:f1:44:49:55:24:f7:87:22:08:
                    19:f8:dc:dd:4e:10:e5:58:4d:95:3b:cf:9f:a2:0d:
                    6c:fa:5d:30:f1:e2:58:6d:c9:a7:d8:0b:30:8a:fe:
                    dd:c3:db:70:1b:19:22:d4:fa:d4:04:50:d9:30:d9:
                    18:d1:56:56:a2:82:99:bd:d1:ab:1b:bc:14:4c:88:
                    1d:b7:29:8c:93:74:39:31:90:6b:0c:27:19:d5:0c:
                    cc:c3:da:b8:74:6d:e2:41:64:91:2f:73:da:f9:4b:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CA:2F:DD:B4:5D:35:C1:75:FD:CE:E6:19:0C:24:36:19:5C:E8:29
            X509v3 Authority Key Identifier:
                keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7e:bd:78:81:51:12:20:31:87:25:b7:d7:49:52:99:8d:a9:
         e5:7e:13:8c:8f:e8:97:75:07:9f:44:e4:56:71:d2:7b:97:6a:
         2d:68:1a:57:39:8f:b6:fb:8a:e1:47:f8:b1:29:4a:b6:23:ef:
         39:28:11:5a:2a:d0:67:59:78:d4:33:c2:71:a1:1f:4d:1b:77:
         f4:61:f5:4f:17:ed:31:8f:3b:21:a3:f3:59:b5:ec:f1:30:b5:
         48:96:46:c5:9f:17:c7:f9:3b:f8:8a:83:32:2c:31:3d:e9:7c:
         4b:c3:bf:72:e2:52:37:95:9d:de:36:36:ce:b7:21:4b:5b:0b:
         fd:57:0d:13:95:49:57:da:13:62:9f:83:96:67:bc:5a:c4:84:
         a0:ee:01:10:03:df:75:87:9a:67:26:75:e3:f0:36:1d:f3:9f:
         e3:ce:79:07:f4:fd:ba:8d:33:3c:bf:6c:72:2f:96:c7:36:32:
         5f:53:64:6a:a1:ce:63:74:70:43:ec:83:47:b9:d8:a9:5d:71:
         11:b6:6b:ac:03:54:0e:b1:0b:85:33:33:5a:61:b3:ad:7a:09:
         28:5e:16:2a:9a:e9:8a:61:c9:75:49:48:3f:46:eb:7c:22:6b:
         2d:25:f2:f7:fa:ed:af:f8:80:c0:1c:63:17:2a:00:bc:9f:c6:
         ea:c2:01:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 20:01:15 2024 by rpki-client on console-fra.rpki-client.org