Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File:                     S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier:          QolsYTseC/QcCGgJSVglJ/MFnMmDe0pCB2Hb8tKN2t8=
Subject key identifier:   4B:86:5B:50:07:A4:E5:1A:34:23:07:5F:05:60:6C:49:71:D8:E3:51
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer:       /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial:       01901E587F001D83925F8A5654B4F2DC5812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number:          07CD
Signing time:             Sun 16 Jun 2024 00:00:34 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:34 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:34 +0000
Files and hashes:         1: DOUdlGchlbTtfE2ciw4KW8AGl3g.roa (hash: mmXmH9F42sPzNhQ89NiIO+/yqp5ib1d5/LtHBigeoQc=)
                          2: JOEugf6c2IQoHYVRYewzz_dItvE.roa (hash: idWRpDFzuiOPJIlhxurRB5VOgBZdVahVl8SpF5VSojs=)
                          3: LxfoQE72V51EHBTLDvnuYBXhJz8.roa (hash: HwsSGyQ8DrVthdqJQakfqmFGqaJoHJxyOTvKTDs/7r4=)
                          4: Qa_1ytAHIcs14yVI44Lcp6VI9kk.roa (hash: RCsZ0xXH9Nik/u/L3U273WXNOKjKOvIEq7fcJ10+kn0=)
                          5: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: W5vm0AFpYar0ygoeZmjn3NVD42seoA+L1f3lgti/TSk=)
                          6: h18pVLgH-ywIRvuOqOU1_0_JhK8.roa (hash: vtPu8dlh7Ti6YqjjwLXfQCUjK4+7UbuCS7XDomqHrU8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:7f:00:1d:83:92:5f:8a:56:54:b4:f2:dc:58:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
        Validity
            Not Before: Jun 16 00:00:34 2024 GMT
            Not After : Jun 17 00:00:34 2024 GMT
        Subject: CN=4b865b5007a4e51a3423075f05606c4971d8e351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4e:0c:4d:6d:dd:d0:92:14:1c:43:f4:2a:ca:
                    b4:8b:75:a1:ad:f5:8b:75:6d:db:2a:f0:45:ef:36:
                    4d:41:d4:b7:c5:22:88:b8:08:8e:3b:85:59:0d:30:
                    97:2b:10:f3:33:33:c6:f3:72:2a:7d:a7:f0:96:82:
                    2a:15:4b:2d:92:4b:24:5c:0a:3d:11:ff:49:aa:db:
                    94:64:d4:49:a3:f3:13:9d:79:7d:c8:d0:b0:2b:cf:
                    fd:dc:dc:f3:92:07:dd:45:17:47:a8:4c:f7:bf:15:
                    a0:f6:a0:ab:f7:82:66:0d:91:a1:81:ef:85:18:59:
                    8b:7c:0f:db:08:40:79:4c:65:fb:e4:81:a5:6c:0c:
                    be:cb:09:ef:27:a6:2a:25:47:e7:60:07:29:fc:8f:
                    9b:af:5a:55:90:f8:d6:76:bd:c8:9d:9d:8c:b6:1b:
                    db:a3:9e:04:e2:23:32:b4:4b:da:ce:75:ba:2f:3a:
                    79:c1:ea:86:75:aa:4d:50:48:5d:5d:25:a6:0f:51:
                    10:0f:c6:e3:c7:6a:6b:8c:a0:d4:35:19:f3:c6:d4:
                    d7:b1:74:8a:06:52:c8:ab:fd:b0:83:41:56:f2:14:
                    b1:3e:2d:56:94:3b:fd:8a:bf:69:b6:98:84:97:5c:
                    12:d5:30:9a:0a:89:f0:c1:cb:ba:84:13:ba:b7:6d:
                    8f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:86:5B:50:07:A4:E5:1A:34:23:07:5F:05:60:6C:49:71:D8:E3:51
            X509v3 Authority Key Identifier:
                keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:62:cc:2f:e3:de:fa:e4:9f:f1:35:aa:ce:97:8f:c2:96:33:
         dd:dd:44:b3:7a:18:b8:9c:0c:d6:a0:21:07:48:de:3d:31:91:
         49:8d:f3:d1:28:e4:f0:07:5d:43:3d:c6:23:a3:ff:f3:1e:a4:
         b8:6e:ba:a4:dc:d3:29:6f:43:03:d7:4f:ec:72:26:71:df:18:
         8f:df:4c:a0:50:84:48:5e:b5:1d:50:5c:d1:51:8f:d5:61:c5:
         49:e9:87:0d:54:5a:b6:54:e9:62:c2:6a:27:16:f0:01:07:ee:
         76:74:b4:ba:bb:21:c3:02:c6:ef:62:1a:52:e2:f2:a7:3f:06:
         cb:e0:89:01:15:ee:6e:07:58:1e:d6:2c:89:d5:1c:6b:34:bb:
         ab:05:72:fb:76:ea:d8:c8:d7:58:fe:5d:64:63:2d:df:51:f6:
         31:07:c9:fa:eb:a5:d8:cd:b5:5a:de:8a:4e:71:80:ee:3f:c7:
         7e:80:83:e0:a9:38:d8:dd:87:af:f9:97:e5:76:0a:4c:91:34:
         21:b6:55:70:94:01:a6:7a:db:a4:03:7c:72:d0:c1:21:3f:d0:
         cf:93:f9:c3:bb:25:00:c9:75:12:22:db:ba:53:55:b3:a6:0c:
         cf:fd:4b:97:1f:27:ff:ff:2e:7a:3d:e3:b3:f9:00:1e:1a:11:
         e4:1a:6c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:50:01 2024 by rpki-client on console-fra.rpki-client.org