Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
File:                     sFoGBOdodvoD5q2Gh_odtsY9OQg.mft (raw, json)
Hash identifier:          grA1AN72VNKQhHP/VirONAKXFOUNxn0fNsxc0zDXQOk=
Subject key identifier:   63:B8:E6:3A:9D:09:40:D8:81:B4:D3:3C:05:5C:11:71:52:F0:09:4C
Authority key identifier: B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08
Certificate issuer:       /CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
Certificate serial:       019044F8A863502E3861465226EE5F80B0C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 12:01:05 +0000
Manifest this update:     Sun 23 Jun 2024 12:01:05 +0000
Manifest next update:     Mon 24 Jun 2024 12:01:05 +0000
Files and hashes:         1: Jn2lqNsrfbERm_6Vzks0-kD-wrw.roa (hash: 2T0yV0scCMLbDblagfFzCmeWYVFy8vBWpC3ZN+sMyFw=)
                          2: VItzM9RdUBieF0_xobY1wC2rjyg.roa (hash: I1TlU9mC0MtpSuY6WgsXyC+qUTPZuHZU/RWQdF5vDZI=)
                          3: g87p2tcRIXeBWaId0mgMpUHs9fQ.roa (hash: XNy0byiezKwkVhHCbNNKYK4p67ilAUz7wvQiiTAJMQs=)
                          4: sFoGBOdodvoD5q2Gh_odtsY9OQg.crl (hash: X2Wt9b4M1VuhWAskTmB8YhJ4VMqgb80IrPdBhhi7IfY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:a8:63:50:2e:38:61:46:52:26:ee:5f:80:b0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05a0604e76876fa03e6ad8687fa1db6c63d3908
        Validity
            Not Before: Jun 23 12:01:05 2024 GMT
            Not After : Jun 24 12:01:05 2024 GMT
        Subject: CN=63b8e63a9d0940d881b4d33c055c117152f0094c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:a9:4e:74:46:df:90:34:2a:49:91:d6:da:
                    0d:1f:80:32:02:d2:c1:74:8a:4a:27:dc:ce:67:31:
                    f0:05:43:d3:48:fa:c9:c7:5c:55:55:ca:56:ce:ba:
                    6d:64:6c:2b:b5:50:b0:ae:b1:10:09:db:ab:93:ee:
                    69:d8:92:35:6e:89:e1:bd:a1:8e:4c:f7:8b:6a:90:
                    0e:27:bd:1d:f4:61:a6:95:f4:66:a8:af:b8:29:5a:
                    50:a3:48:22:ab:78:36:8f:e0:38:16:20:ec:55:46:
                    7d:b5:86:aa:a3:ed:59:2b:0e:e4:f7:05:61:22:28:
                    d2:3a:9b:21:ca:8a:ae:a4:af:6a:d7:b9:e7:57:d2:
                    3b:db:4d:ea:75:61:91:3a:0b:fb:35:a1:1a:0b:3d:
                    a1:8c:e5:0f:47:d8:93:4c:67:ca:10:0f:69:ec:fc:
                    d2:fd:2e:53:ab:bb:a8:5f:7b:45:fc:7a:cb:3d:3c:
                    83:e5:63:be:3b:18:9c:49:6e:ff:e5:cf:8d:84:21:
                    79:e3:4e:07:6a:2d:66:38:25:ee:d7:e7:43:e5:bb:
                    e1:88:4b:27:a0:dd:f9:67:d5:4f:1d:1a:bf:36:8b:
                    77:17:2f:e1:a0:5f:40:2d:76:b0:07:59:e2:b1:a3:
                    19:cc:cb:03:0d:ad:7b:91:89:55:90:43:9c:e0:97:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B8:E6:3A:9D:09:40:D8:81:B4:D3:3C:05:5C:11:71:52:F0:09:4C
            X509v3 Authority Key Identifier:
                keyid:B0:5A:06:04:E7:68:76:FA:03:E6:AD:86:87:FA:1D:B6:C6:3D:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFoGBOdodvoD5q2Gh_odtsY9OQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/81aa49-8b4a-4c28-a578-a605717d34ae/1/sFoGBOdodvoD5q2Gh_odtsY9OQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7e:bc:c0:29:6e:99:c9:98:5f:0f:57:0b:46:a9:f2:0f:28:
         a5:cd:84:42:c7:43:34:0b:af:0f:4c:57:28:ca:ea:1c:b6:a3:
         f0:a4:1f:d3:00:c7:d5:94:42:cc:f7:90:34:9d:19:7a:e9:6a:
         a4:0b:22:c9:60:40:8f:45:0d:65:fe:de:ee:b4:84:ff:97:49:
         9e:2d:3f:d5:05:d5:8b:f9:5c:1d:db:77:37:38:1f:d0:94:03:
         eb:08:e6:8b:4f:cd:a8:16:27:5a:cf:9d:0b:28:f6:44:c8:73:
         f7:a3:24:e1:29:c8:7a:69:2c:00:06:5f:75:c4:e8:cd:a1:27:
         f4:2a:3d:98:52:7e:6d:36:b8:a2:6b:00:8d:f4:1e:bc:23:3c:
         5a:28:89:de:66:e3:c8:f6:1e:99:4f:b6:f1:d6:f5:22:7d:ae:
         ea:e2:b3:7b:8d:44:46:13:a4:bf:33:6a:a0:39:72:4f:96:32:
         ef:02:97:70:db:f3:1f:3c:99:03:5a:1e:e8:d5:14:57:73:cd:
         7e:cc:80:84:63:b2:8f:63:f9:a5:0b:d2:19:8b:06:cf:15:9b:
         fc:f5:18:ec:cf:bc:af:35:b2:42:db:b3:9a:3d:be:42:19:fa:
         12:cc:4a:86:9a:4c:5c:d1:a0:22:dc:19:c1:fc:5b:6e:42:33:
         a7:4b:22:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:09:13 2024 by rpki-client on console-fra.rpki-client.org