Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File:                     T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier:          5BMttQ6aScfvHhuoHFrOxeHlPEcXkVCWh7W7U7FflKI=
Subject key identifier:   F6:39:EB:EA:86:01:F2:A3:99:43:92:40:4B:57:62:02:2C:5C:4B:D1
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer:       /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial:       01901DED5D5D9649349C1DF0B167C04C4238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number:          08EC
Signing time:             Sat 15 Jun 2024 22:03:33 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:33 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:33 +0000
Files and hashes:         1: FxV3Y_5foeiBO07lxzXTkTIRT8A.roa (hash: TObIQhIrd+jkMqh5NNeTCeki27I7eYxZwT0C7CWK8Yk=)
                          2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: WWQb+4mgofHr8ilr6jQExob0PFCWN7TgDOYvHJrUwMg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:5d:5d:96:49:34:9c:1d:f0:b1:67:c0:4c:42:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
        Validity
            Not Before: Jun 15 22:03:33 2024 GMT
            Not After : Jun 16 22:03:33 2024 GMT
        Subject: CN=f639ebea8601f2a3994392404b5762022c5c4bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e2:f0:66:98:1c:04:6f:e1:57:75:95:63:16:
                    e6:5a:bd:cc:61:79:1b:06:df:43:9b:fa:d3:64:05:
                    8f:3b:e6:3c:3c:32:1b:a4:19:cb:e1:23:af:80:02:
                    64:e2:1a:b1:9d:ae:fb:53:6a:6b:b3:9d:4d:9f:b5:
                    31:a4:27:0c:76:ab:03:35:2e:38:f6:2a:a2:de:4c:
                    52:c4:02:7e:06:ee:2b:1f:f7:84:96:a8:be:c7:44:
                    7f:00:fd:45:bb:72:47:e5:de:65:63:41:f0:be:a0:
                    ae:ca:c4:69:f6:94:30:5d:a7:8c:84:e7:a9:bf:e0:
                    50:49:1a:ec:84:f9:cd:9f:65:3f:e6:11:52:28:e9:
                    f1:7b:ad:55:95:ec:e4:5b:7a:13:13:c0:b0:46:9a:
                    0e:00:55:77:d9:a8:0a:86:b2:5a:15:61:66:6d:5d:
                    e5:4f:6c:08:e2:62:81:41:08:86:6c:74:d0:d9:2d:
                    b2:a7:ba:cc:d0:7e:9c:eb:19:3a:0d:c6:b4:89:ad:
                    82:5f:c2:15:51:49:9f:29:5d:28:d8:47:0c:95:30:
                    56:80:d4:da:ad:53:d6:5d:4a:84:e7:b3:d6:fe:dc:
                    f7:77:15:23:1f:8b:45:81:c8:5f:27:33:91:13:b9:
                    d7:41:af:97:2e:f0:db:0e:87:50:28:fe:a7:2e:ba:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:39:EB:EA:86:01:F2:A3:99:43:92:40:4B:57:62:02:2C:5C:4B:D1
            X509v3 Authority Key Identifier:
                keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d7:d7:10:ea:2d:c3:51:ee:a1:98:57:a0:61:76:bf:e1:b4:
         89:a6:93:14:73:cb:c1:a2:c8:91:de:28:59:be:96:ba:29:77:
         a7:b7:49:0c:98:57:49:90:23:ac:66:60:a4:b9:f0:68:0c:31:
         03:a7:b4:83:8a:de:de:c3:7a:12:d9:a9:9c:3d:02:d2:33:b3:
         c7:fe:ba:f9:31:94:83:7e:b2:80:cf:27:90:f0:b5:68:66:41:
         c0:5a:10:fd:10:26:82:70:da:83:42:4c:63:1c:1c:1e:35:44:
         01:23:16:22:32:34:80:bb:4d:1a:81:16:90:3b:d1:37:46:56:
         a4:1f:e0:e9:7c:23:07:ef:49:12:e4:cc:2e:2c:44:d1:50:a8:
         ef:fd:9d:7a:ab:a5:46:11:ef:1b:8d:e0:77:8c:29:41:9f:9e:
         1d:48:e6:1f:16:6b:fa:d5:ad:6d:93:1a:fd:67:8e:14:47:ce:
         d8:6b:9d:e3:52:fe:93:43:3a:1d:de:9f:1e:f0:29:b6:45:67:
         c7:0d:24:8e:ae:f3:85:e0:4a:d0:27:68:36:b6:56:38:01:d6:
         93:1b:24:49:cc:34:8e:f6:16:7a:af:2c:d2:e2:f4:f5:b5:cc:
         e3:2f:35:ac:0c:54:0d:b9:2c:01:23:b2:c7:7c:1d:22:bb:82:
         d4:7a:cc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:50:54 2024 by rpki-client on console-fra.rpki-client.org