Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File:                     Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier:          0nvmQ/Dtcjgi9zPOWEwqqynCOsxqeg+IxMAHvqib4JE=
Subject key identifier:   58:E5:86:76:9C:7E:5E:22:2E:F2:EF:EC:68:36:E2:34:8D:EA:DF:25
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer:       /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial:       019041F78685C6297D70354C49E733462CF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number:          AE
Signing time:             Sat 22 Jun 2024 22:00:59 +0000
Manifest this update:     Sat 22 Jun 2024 22:00:59 +0000
Manifest next update:     Sun 23 Jun 2024 22:00:59 +0000
Files and hashes:         1: GSIjiG7l2t5b3b0MV9Kwkma-VuE.roa (hash: b2pOuTkgtoPwL9LXOehykxlaCvBsuZXo5khQvHaA7V0=)
                          2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: L5JyFSzyI7YYfrxQXPtZak5nmmKenW8JUlHgBMjS/N0=)
                          3: wfqKJcJOvtFqZvd-UQvA_tb2CGM.roa (hash: iHvaI6mG1bCGXneLjFdMXYFcegjsQBFSBIWd4cOApSw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:86:85:c6:29:7d:70:35:4c:49:e7:33:46:2c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
        Validity
            Not Before: Jun 22 22:00:59 2024 GMT
            Not After : Jun 23 22:00:59 2024 GMT
        Subject: CN=58e586769c7e5e222ef2efec6836e2348deadf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d5:99:7f:d0:6d:95:e4:ca:ce:1b:97:75:92:
                    81:41:86:9c:53:c8:e2:21:a6:db:ab:04:8a:30:17:
                    a7:90:1d:c1:52:38:2f:9d:89:0d:11:c2:7a:6d:9f:
                    a0:04:5f:f5:60:04:4a:d3:74:cf:b6:5e:47:f4:1e:
                    f1:55:7c:fa:c7:f8:e5:2d:0d:3c:4e:be:4e:ef:e0:
                    87:83:87:f2:14:45:e1:2f:d2:ce:79:11:73:64:f4:
                    ed:4b:ea:1c:a8:3e:8a:c4:d3:49:9c:2b:80:c7:4b:
                    1d:d1:35:1e:33:88:bc:4d:c3:04:2a:48:3e:b7:2c:
                    78:e1:fa:a7:e2:77:07:8a:c3:bd:f6:52:e5:6a:3c:
                    cd:3d:e3:4e:e0:af:c8:26:41:a7:28:72:a3:f5:f7:
                    7a:de:9f:1b:a4:38:a9:5c:78:6b:e7:29:82:67:56:
                    93:df:c5:fb:6c:4e:f7:c8:36:a5:4e:20:f0:80:c4:
                    da:81:3b:ba:4d:0b:11:33:f6:9d:3a:90:46:f8:9d:
                    08:5e:0e:96:ff:2f:d3:b0:47:cb:3a:1b:dd:d7:1e:
                    be:c5:b9:d9:9b:a2:c6:30:f3:ea:48:60:ab:57:ae:
                    5b:92:44:73:bd:71:24:f0:00:cf:ac:aa:38:df:68:
                    e4:17:4e:f6:01:5c:a3:e5:11:ff:7c:33:7f:1c:8d:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E5:86:76:9C:7E:5E:22:2E:F2:EF:EC:68:36:E2:34:8D:EA:DF:25
            X509v3 Authority Key Identifier:
                keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:8f:01:c0:4c:db:90:1d:3b:a9:b3:b9:df:fa:15:03:db:d2:
         21:c2:8b:e3:37:78:84:e1:3a:e0:4d:79:24:08:f6:cc:4c:8d:
         53:43:6b:45:fe:b8:c3:2f:04:2b:90:da:bb:e9:7a:ca:75:e9:
         74:13:71:44:6a:dc:eb:00:04:11:e3:bc:dd:b9:89:ac:f8:b9:
         d6:d8:f1:c4:35:87:65:26:69:aa:09:1c:6a:c5:1a:0b:23:c0:
         1d:c9:e4:dd:ef:ab:bc:10:73:c1:20:64:d5:33:f0:d6:c2:a3:
         83:38:ec:3a:84:ce:e1:ab:fd:7a:37:c8:cf:e8:91:f2:e9:7d:
         ea:98:44:09:a0:f4:ac:b0:4e:97:48:2f:f8:e6:80:f3:bb:6c:
         30:07:9e:2e:bb:6a:41:2d:cc:1a:21:a3:05:48:cc:47:5b:2c:
         eb:c7:91:c5:af:c8:21:db:6a:ac:ce:4d:14:0d:9c:79:de:47:
         22:52:6a:93:73:9a:0a:20:c5:7b:ca:8e:d0:84:fe:cd:f8:65:
         df:4f:95:a0:89:ca:fd:95:a4:4f:16:95:ac:a5:52:17:53:c0:
         29:58:c5:b8:d2:8b:37:b9:1b:13:ef:c7:cf:ab:ae:e0:c3:4f:
         ba:82:d8:98:b1:19:5c:3e:84:6d:7d:59:09:3f:d5:5a:cd:5a:
         b6:f9:0a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:07:32 2024 by rpki-client on console-ams.rpki-client.org