Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
File:                     2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft (raw, json)
Hash identifier:          ncjZiSU+w1r+z76U70IfN9AhT/t4A+bWvknvwytQ/ek=
Subject key identifier:   F2:DF:D8:48:13:95:5E:40:F8:8A:EE:5B:C1:0B:5C:46:5E:EA:29:55
Authority key identifier: DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7
Certificate issuer:       /CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
Certificate serial:       01901BFE8ED4849B21D67D5C60D67508C91A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
Manifest number:          0CA1
Signing time:             Sat 15 Jun 2024 13:03:05 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:05 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:05 +0000
Files and hashes:         1: 0uPcW7iKdBzyIjJJqDBuGrEPoRQ.roa (hash: rYSmdZGMC01yUDQwwC/0Sd+9g9zimFWnAanv3V668GA=)
                          2: 2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl (hash: 8sxIA3R2qYIeHDgTDdRNwmXo+nF6ekuu1SNQOI4zMSM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:8e:d4:84:9b:21:d6:7d:5c:60:d6:75:08:c9:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab80ea0f9965f6880329b12fec27a9390fc1cb7
        Validity
            Not Before: Jun 15 13:03:05 2024 GMT
            Not After : Jun 16 13:03:05 2024 GMT
        Subject: CN=f2dfd84813955e40f88aee5bc10b5c465eea2955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:36:91:27:32:01:5c:07:81:23:86:2e:a2:
                    92:9c:9a:3a:e8:a0:22:12:ec:d1:90:c6:17:11:3d:
                    8b:b1:70:9d:35:14:5d:8c:88:f1:11:29:9a:8c:09:
                    ad:35:20:16:e8:26:0a:d4:22:27:82:0b:2f:7e:52:
                    76:eb:a7:d9:b9:26:52:19:d7:64:aa:28:a8:3b:85:
                    0f:f5:a0:13:8e:b2:00:71:43:18:87:5d:62:43:d0:
                    7e:50:d3:b7:a9:6f:00:86:2c:dc:12:e8:4f:31:8f:
                    7b:59:4f:0a:8a:93:61:de:90:ca:87:27:cb:38:62:
                    30:53:55:91:e2:6a:80:fe:49:a4:0e:fd:fe:bf:fe:
                    b0:b1:39:48:fe:b0:76:a9:65:2a:7d:b8:84:72:f0:
                    49:93:18:83:8f:98:d7:79:17:7f:0c:82:7e:d7:ab:
                    c0:3d:16:be:5a:14:af:2d:e6:6d:51:d9:22:9f:e1:
                    2e:a0:26:e7:7b:71:08:ec:92:75:a4:1b:bf:3e:4c:
                    03:4f:ef:da:cd:5b:6e:e0:e5:85:ee:61:74:9a:66:
                    38:07:6d:bf:e0:e4:b6:15:cb:f7:47:5a:6b:16:d0:
                    21:04:e2:dd:c8:d5:e6:4b:a8:c9:ef:5e:c3:ad:db:
                    8a:b0:5c:6d:f9:b0:a6:af:9f:9b:22:e7:20:ce:c5:
                    7c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DF:D8:48:13:95:5E:40:F8:8A:EE:5B:C1:0B:5C:46:5E:EA:29:55
            X509v3 Authority Key Identifier:
                keyid:DA:B8:0E:A0:F9:96:5F:68:80:32:9B:12:FE:C2:7A:93:90:FC:1C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/153ff7-d4b2-407f-a216-9f6aa4cf0799/1/2rgOoPmWX2iAMpsS_sJ6k5D8HLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:9d:63:40:27:bc:d5:2f:4c:1a:b5:fd:00:d9:af:0e:bf:9d:
         d7:4e:16:0e:24:f6:67:c6:99:d5:c0:0b:b7:1d:51:23:4d:b2:
         fe:1b:a5:5d:18:67:4c:37:da:43:9c:a1:25:75:fb:ba:36:ab:
         c0:16:39:7c:b1:e8:b0:37:8c:26:af:d8:10:81:10:f7:64:e6:
         ac:28:cb:40:9d:e4:c7:6f:0a:3b:9c:15:62:02:df:d5:91:e5:
         49:3c:d2:5a:b8:51:36:cd:3c:61:17:2e:4f:02:95:41:ad:4f:
         49:5d:9b:37:32:28:e4:29:c8:d6:cd:8e:b2:26:c0:60:ba:7a:
         40:13:cb:b6:0d:1e:e4:c0:00:91:94:18:1d:4b:1b:41:11:cb:
         2e:29:f8:f7:be:cd:c2:9f:ad:cb:7c:dc:9f:00:5d:c9:63:f5:
         d0:73:0e:a7:a6:9f:2f:94:67:91:77:74:8e:af:95:dd:07:a1:
         fa:8a:df:55:be:4b:9b:6f:83:4b:b0:35:de:ef:5e:2d:36:c9:
         74:3a:ed:2f:74:70:67:4f:62:60:52:32:fe:d7:14:64:b6:6f:
         d4:be:71:ab:3e:d4:c1:90:28:ce:b6:7f:bd:42:7d:4f:74:ed:
         bb:5b:1b:41:6b:24:4e:9f:9c:fe:5b:36:a3:ba:31:d8:97:29:
         8d:53:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:49:18 2024 by rpki-client on console-ams.rpki-client.org