Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
File:                     rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft (raw, json)
Hash identifier:          0YwGV3AXgOJtphyIznr3hVyp/Sd2yI8W56NoHrVfwoQ=
Subject key identifier:   22:A0:60:F4:96:07:EB:97:C9:4D:2D:CD:62:36:53:19:01:B1:C1:93
Authority key identifier: AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8
Certificate issuer:       /CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
Certificate serial:       01901E58F5DFA5CB62CA30BF827347515780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
Manifest number:          0E3F
Signing time:             Sun 16 Jun 2024 00:01:04 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:04 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:04 +0000
Files and hashes:         1: Iptt3UOEZZ-5C0qxOjSPOaux4nY.roa (hash: 0ccZ7o6hC36PAyvtC+kHb+vPCqfewuQZNO/as6G4Jus=)
                          2: rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl (hash: hB3hHYCL7AGhZFFE/boTD5w5agusLEKIC/KFjWi3I1k=)
                          3: zBMTpdA1gq4ZMQdkb-pniMa2Uwk.roa (hash: +ex7NU52M7cJNgCzeWWG7z3N3w1MSSnyr5hFZpoLlbI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:f5:df:a5:cb:62:ca:30:bf:82:73:47:51:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad8dd17a768e3b6fbfa7a7009a7007ebe65b45c8
        Validity
            Not Before: Jun 16 00:01:04 2024 GMT
            Not After : Jun 17 00:01:04 2024 GMT
        Subject: CN=22a060f49607eb97c94d2dcd6236531901b1c193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0b:53:b6:a6:ea:38:44:cf:71:30:74:e6:02:
                    ae:b7:f2:09:13:bb:b8:b1:1d:db:f9:ff:03:e7:43:
                    cb:5e:c7:c4:1e:29:40:c2:61:ca:d9:bb:4f:73:ba:
                    8c:a4:18:09:03:25:83:b1:fa:52:6f:c3:60:34:b4:
                    c1:ff:a1:5e:41:0c:28:b0:5f:62:54:99:57:e3:ec:
                    e0:52:29:76:a7:b0:71:2f:78:3a:6c:f0:e1:ed:1b:
                    9c:40:c1:75:1b:1d:f4:53:e6:4d:1f:0b:30:85:66:
                    96:e9:83:c0:fa:f0:ad:56:75:2a:1d:ad:a5:6d:d4:
                    01:7f:56:3c:81:b8:55:66:d0:1a:6f:c5:2d:40:57:
                    40:18:29:e5:17:94:aa:ec:26:03:86:33:76:c5:17:
                    8a:61:cf:37:f2:6a:26:9d:01:11:33:91:09:57:71:
                    b5:7e:6d:b1:bc:a1:e5:c1:1c:46:96:83:df:fe:19:
                    4d:1f:b9:c9:ff:58:18:74:6b:b5:fa:34:c3:0a:9c:
                    fb:4d:84:ce:3c:ca:af:cf:96:7a:c1:90:1d:73:fb:
                    35:e5:84:04:d6:0c:df:95:2a:c9:a3:57:3e:3b:05:
                    70:62:3b:5b:c6:5c:42:11:84:aa:49:9c:09:dd:2a:
                    9b:1e:3e:2f:ba:70:17:27:33:a9:17:3c:ec:93:a9:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A0:60:F4:96:07:EB:97:C9:4D:2D:CD:62:36:53:19:01:B1:C1:93
            X509v3 Authority Key Identifier:
                keyid:AD:8D:D1:7A:76:8E:3B:6F:BF:A7:A7:00:9A:70:07:EB:E6:5B:45:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY3RenaOO2-_p6cAmnAH6-ZbRcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/98b35b-945e-40c5-bb95-9eadd351fc79/1/rY3RenaOO2-_p6cAmnAH6-ZbRcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:34:d0:90:6a:87:ac:a9:86:86:38:6c:de:04:b5:90:92:af:
         31:d6:19:0a:7b:f8:f5:81:0e:87:e2:94:d4:ea:48:1d:b5:b6:
         3d:81:af:af:84:0a:de:60:eb:b4:b4:5f:fb:07:8c:c4:20:a1:
         67:63:5d:89:e3:d2:54:20:99:be:93:b8:e0:ca:e7:20:b0:0c:
         ce:f9:69:82:5d:ee:66:48:dc:89:7c:23:27:25:fd:dc:a0:5d:
         3a:c7:a8:a2:11:2f:25:10:6c:31:22:b7:0b:e3:26:db:fd:cc:
         b7:59:4c:de:f8:60:39:1b:d0:2f:37:72:55:41:ff:98:05:c1:
         d5:34:54:80:bf:c0:0e:63:27:f4:34:7d:a7:66:90:7c:9b:16:
         5d:b6:85:54:af:51:00:f0:85:0b:d3:bd:45:9e:35:d9:d6:b8:
         12:aa:69:ce:8d:96:9e:02:ef:91:1f:16:74:64:72:2e:97:5d:
         9c:99:23:70:5f:86:bf:03:91:96:4e:74:a0:0e:1b:11:3e:a7:
         22:7e:cc:38:a4:6f:12:f3:fe:e8:fd:0c:4a:72:d5:f7:8d:b0:
         86:80:01:99:ea:3b:18:7e:f7:f2:b5:3d:b9:81:ee:a5:26:39:
         02:ee:1d:79:ae:73:26:16:02:cf:2c:e2:ba:a2:f8:e5:97:27:
         6a:31:5a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:11 2024 by rpki-client on console-ams.rpki-client.org