Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File:                     cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier:          VnPru1ygZy32MY/K2X0RrSi4EpDbuzabDwS+H9XcHYA=
Subject key identifier:   59:8E:5C:E4:CD:81:B6:17:E1:16:43:55:AD:B2:6F:81:EA:53:F5:F6
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer:       /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial:       01901DEC2089FDDF5C89061ADD2C0A1B0793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number:          0EB5
Signing time:             Sat 15 Jun 2024 22:02:12 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:12 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:12 +0000
Files and hashes:         1: 0wCe-RMpWP650fdv6ZWDWRZ78LE.roa (hash: NF6AXG8Q5HutlZjGPyR8fhOKnQB1kN40amirf51mz4s=)
                          2: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: onI2u51WJbqE54WcGLNn8ae2+Ah8uB17syjpyrigEMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:20:89:fd:df:5c:89:06:1a:dd:2c:0a:1b:07:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
        Validity
            Not Before: Jun 15 22:02:12 2024 GMT
            Not After : Jun 16 22:02:12 2024 GMT
        Subject: CN=598e5ce4cd81b617e1164355adb26f81ea53f5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:a3:7c:36:fa:37:f2:40:4e:3e:4b:b3:2d:
                    75:91:29:30:fc:4d:d4:54:f4:fe:61:62:fa:80:a7:
                    c0:81:f5:f9:49:89:2b:d5:00:10:74:cb:db:aa:95:
                    f0:c2:f7:93:a0:31:63:69:ac:3e:e2:68:12:92:34:
                    a5:04:cf:2f:98:a7:cb:b6:66:aa:57:28:e6:14:99:
                    5b:72:06:50:6a:13:54:f6:a2:fc:48:f2:36:1b:75:
                    61:42:43:3f:78:75:49:76:17:72:bc:64:8f:69:24:
                    57:13:6e:d0:9a:53:7f:cd:d2:00:7b:4c:9f:76:4a:
                    b9:17:a0:97:e7:47:57:60:48:cc:2c:68:6e:b8:73:
                    15:6b:c0:76:74:0d:88:77:bc:51:54:04:2d:04:b2:
                    c9:b7:8f:3f:fd:bf:a9:20:ee:0f:4d:ef:6e:85:01:
                    3c:90:cc:81:48:0e:07:74:13:90:cf:ee:dc:c3:fc:
                    9d:07:24:eb:9d:e1:4d:5c:99:52:4e:34:80:87:fd:
                    1f:c7:7a:df:d9:b4:63:f8:ba:c0:96:e4:a1:e6:90:
                    d3:cf:b8:57:9d:76:d4:a2:89:f8:57:d7:7c:b2:15:
                    c2:37:68:0e:ad:53:63:09:8c:ef:dc:00:aa:ff:fc:
                    6d:a9:ea:70:56:28:e7:91:45:d9:a3:14:34:6f:e3:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:5C:E4:CD:81:B6:17:E1:16:43:55:AD:B2:6F:81:EA:53:F5:F6
            X509v3 Authority Key Identifier:
                keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:b3:55:28:5b:ea:4c:46:3d:fa:16:cd:cb:b7:70:8f:4d:80:
         bb:23:f3:a9:da:51:4f:e7:e4:50:fe:62:a4:52:17:e0:82:51:
         c2:9a:d4:b1:4c:1d:f2:36:f9:c9:73:01:aa:4c:94:93:d0:dc:
         f6:50:7f:7b:33:0e:b6:ca:c2:21:d7:8a:33:a0:03:3e:2f:af:
         d2:e8:8e:12:6d:12:ab:0e:4d:78:9d:70:f4:66:6a:24:66:44:
         c7:d0:a4:2f:80:f3:45:82:9d:70:f5:0b:59:7a:13:5a:88:bc:
         fe:ca:98:10:7a:0a:bf:0a:87:be:90:40:38:8f:88:e6:5a:fc:
         b6:57:2c:b5:01:c8:b5:ba:56:cb:f9:11:16:b5:9a:5b:8f:00:
         56:19:56:09:16:6a:61:71:12:ed:5d:d8:aa:14:ba:5c:65:67:
         5a:19:5a:0f:6d:44:62:cb:dc:be:99:24:43:17:80:2b:d9:0c:
         81:78:35:29:f8:74:7a:c5:6d:cc:4e:89:14:8e:c9:ba:e6:95:
         4b:f6:7a:5a:87:84:d1:fc:7d:1b:94:a8:ef:1c:48:dc:4b:07:
         6e:b3:46:d9:ff:b8:c9:c6:dc:d5:6c:35:1c:a3:18:f8:3e:34:
         e2:44:0e:b0:ce:73:bd:15:ad:55:12:cb:ba:9a:a1:79:b4:75:
         bb:dc:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:52:03 2024 by rpki-client on console-fra.rpki-client.org