Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
File:                     GEe1nSHqNrMGL8qAznXBYWr1EZo.mft (raw, json)
Hash identifier:          Jy/3ReENAoJDFurCYkbDinn1Mb8X2RSFYShi/9mOzz4=
Subject key identifier:   71:B6:33:26:DB:4D:50:8C:F7:A1:AE:A6:A4:D4:03:96:58:6D:01:DA
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Certificate issuer:       /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial:       01901DEC5E5E40A682AC2B6AA1947A2B9679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
Manifest number:          11D8
Signing time:             Sat 15 Jun 2024 22:02:28 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:28 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:28 +0000
Files and hashes:         1: 9oRLE-gSgc4drpJzIEexmB_ninc.roa (hash: FAa6tWbqhCuRVBRn7s0EezCUu3SpSyyc093nK/kshyA=)
                          2: GEe1nSHqNrMGL8qAznXBYWr1EZo.crl (hash: rhcNjuYNq/dAWzhnDD8jtdMKCNoNFZNq9DDJBZNyKvY=)
                          3: Lhbt1th14edAodw9bRMZzaOx57U.roa (hash: x+OU1q9sGfK/5dQcHZQufauYJEnkq7uOYf+TYnLrFZo=)
                          4: OMxuY3kG4tWEp9TnV_g6vV_Zz-g.roa (hash: WJeBDJrfG4/nU23jWsXAzIGPKsRINPWkJqU+afh3nYk=)
                          5: TgaEClqjKBq5nU6d0SVks9i9ZpA.roa (hash: REAizIgb+bhsHHLb6t/B/RBgMyM/dP9GXN0siDXBhQ0=)
                          6: mxT1zF7zbGKAFCiPNo758Tg_cxI.roa (hash: uT+xEPrEGH4JUh0AANiR+zZHjbunhTubUx8QxwUHo9s=)
                          7: qOUncy20l085rk-8gUsUUzinRYQ.roa (hash: kjjqliEvBwLPyl1jKLnYLRPkZpfEV3gY58zeM/5+n2o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:5e:5e:40:a6:82:ac:2b:6a:a1:94:7a:2b:96:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
        Validity
            Not Before: Jun 15 22:02:28 2024 GMT
            Not After : Jun 16 22:02:28 2024 GMT
        Subject: CN=71b63326db4d508cf7a1aea6a4d40396586d01da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:ae:4d:3c:c6:b6:38:42:1d:35:a8:3b:4a:
                    b1:64:99:7a:a1:c3:e8:3f:1a:e6:d3:1f:2c:b4:6c:
                    e3:69:e9:66:c6:9b:7d:eb:ff:70:b8:83:42:c1:5b:
                    9c:54:b2:a2:ef:ca:2f:02:1a:46:71:24:bd:18:7b:
                    24:5a:9e:79:66:81:06:6b:dd:b3:f0:d9:2a:c4:db:
                    c9:68:3b:71:6e:38:c8:43:e2:6b:c4:0b:23:ea:53:
                    b1:a6:75:50:c5:36:58:7b:fb:eb:33:c9:a4:15:1c:
                    80:7c:1b:67:fd:ef:82:4a:91:ac:31:54:9b:7c:38:
                    86:1a:ed:bf:09:c5:70:10:cd:c5:ec:e7:49:b5:18:
                    35:12:94:ac:63:ca:8b:3f:db:74:67:86:1b:13:f0:
                    7b:d0:69:bb:de:14:ea:0b:13:69:66:a1:a5:32:d5:
                    9f:68:15:6b:05:62:78:07:ca:a8:74:ab:54:93:0d:
                    a8:cf:a3:73:86:e1:c8:90:60:20:c0:be:d8:09:fc:
                    16:8b:fc:78:19:c5:96:3f:86:e1:c5:82:66:9b:77:
                    1b:eb:fa:a9:1b:71:b5:26:8e:c0:10:ad:f9:37:3c:
                    86:1a:3e:d7:1a:fa:d6:26:e1:e5:ca:44:04:57:64:
                    92:8d:55:62:37:86:66:a8:15:73:a5:8d:f0:7b:fd:
                    b5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B6:33:26:DB:4D:50:8C:F7:A1:AE:A6:A4:D4:03:96:58:6D:01:DA
            X509v3 Authority Key Identifier:
                keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2c:a9:44:72:9c:3e:63:fb:76:32:fd:97:03:ff:a1:f4:aa:
         07:be:5c:ec:d5:65:a1:aa:b0:11:33:14:ca:cb:04:b9:2b:4b:
         a2:34:a5:cc:be:13:aa:92:c1:10:ae:5a:eb:a7:5f:f3:6a:60:
         f9:f0:60:fb:55:7d:8c:80:79:ed:bb:bc:bc:ee:bf:d4:e6:6b:
         8b:0d:0e:83:c8:1b:61:8b:02:8c:b3:df:cf:1d:06:c9:be:fa:
         87:c0:29:14:7e:fb:15:32:ac:c4:9b:c3:82:8a:c8:da:df:ef:
         26:e2:0f:d2:7d:ac:c4:93:e8:d8:2c:e5:5f:af:a1:19:d2:7a:
         8a:73:54:88:05:be:8c:d4:9a:3e:e0:6a:43:5f:da:11:45:48:
         49:f8:86:df:38:fd:59:b0:8e:c2:44:c6:8b:96:d8:58:3d:d9:
         73:26:a2:9f:1f:62:2e:35:fc:78:c0:3c:59:a0:a4:13:ad:69:
         a7:99:84:1b:37:9c:bf:cf:9e:02:c4:d0:ce:34:cb:61:b5:ef:
         1c:32:51:b0:13:f5:b6:5b:dd:17:67:b2:9f:d1:29:74:20:0d:
         af:30:47:e9:ee:69:0f:46:7a:54:2b:4e:15:69:8d:bb:53:bc:
         7d:b6:40:0a:a4:27:86:c6:21:34:d1:b1:22:18:e9:bd:99:bc:
         ac:4c:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:31:48 2024 by rpki-client on console-ams.rpki-client.org