Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
File:                     gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft (raw, json)
Hash identifier:          cIX2nu0Ivg53M0nq4/cc2gyCpAMLWKj5GCFzy72r3Vo=
Subject key identifier:   ED:86:55:1A:ED:92:37:DC:73:68:50:40:FE:8B:F3:7E:4C:88:7B:5F
Authority key identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
Certificate issuer:       /CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Certificate serial:       01901DEB842F3AD63DD4D15BDC7DC011E66B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
Manifest number:          0F08
Signing time:             Sat 15 Jun 2024 22:01:32 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:32 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:32 +0000
Files and hashes:         1: Q9olgamGlzjpXDNMBrtD1gWUVU4.roa (hash: XeA6Ue0lUaFSJ8TCSBJ+7Rgu8KB7dyFLqjzcZPMccSk=)
                          2: gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl (hash: ZiYcl0fqIICDKh+zbZa2ZPbS9KvbX9QCIMKE8j2su5c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:84:2f:3a:d6:3d:d4:d1:5b:dc:7d:c0:11:e6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
        Validity
            Not Before: Jun 15 22:01:32 2024 GMT
            Not After : Jun 16 22:01:32 2024 GMT
        Subject: CN=ed86551aed9237dc73685040fe8bf37e4c887b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:c5:49:a3:15:b6:35:e8:8d:e4:e6:91:3d:
                    84:22:e0:0a:51:03:05:f2:b1:0c:87:0b:1e:61:a1:
                    ac:e9:4f:82:66:82:10:0b:8a:fb:16:b4:39:61:45:
                    22:27:91:72:f2:67:1b:1b:e3:b3:f4:71:ae:b8:bf:
                    0d:c0:81:b5:a5:56:83:58:2a:4a:8d:ea:2c:16:da:
                    73:45:5b:6d:2c:e0:ec:1f:98:d6:c1:2a:80:d2:76:
                    21:df:9e:2b:fd:de:af:dc:d3:3f:60:1a:f5:31:83:
                    09:b3:b8:43:78:57:9a:6f:34:6c:28:c5:94:44:71:
                    c9:c9:02:5e:35:70:48:e1:d8:cd:d3:38:82:22:28:
                    93:1d:9f:5b:a7:4d:ea:c2:84:a6:65:27:25:1b:74:
                    c8:17:10:45:cb:3b:24:68:bb:b4:ed:35:0b:f8:fd:
                    22:8a:6e:b6:74:9b:d2:8a:fc:68:9d:ba:d3:ea:02:
                    d2:ba:34:0f:b4:0a:a3:5b:0c:cf:06:8d:e7:1b:08:
                    ee:17:d3:b0:f9:d1:43:7c:3d:45:74:78:9e:ce:b7:
                    39:97:ee:e4:40:72:4f:c3:59:7a:ae:b2:51:36:b8:
                    2f:28:84:26:5b:f1:94:d5:21:52:09:21:d7:77:78:
                    9a:7a:ab:e4:31:b6:62:87:64:64:a3:57:59:51:90:
                    ba:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:86:55:1A:ED:92:37:DC:73:68:50:40:FE:8B:F3:7E:4C:88:7B:5F
            X509v3 Authority Key Identifier:
                keyid:81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c5:91:9c:b2:82:35:ca:65:30:b7:83:8e:d9:b8:58:d7:f2:
         f4:da:38:4f:93:ab:f9:72:47:9a:3e:0a:b5:b5:27:2d:be:ec:
         8c:3d:1c:d8:2d:d4:3a:f7:0e:16:d2:97:f0:d2:e3:bb:76:e6:
         40:b4:22:91:b8:e6:19:3c:21:90:c8:bc:49:63:0c:8e:9b:cc:
         95:14:3c:0a:65:49:45:6a:53:c5:2c:c3:e1:d5:ca:34:f7:06:
         38:f9:20:01:a6:52:e5:bf:07:fe:88:69:35:58:c7:e4:52:68:
         c8:f3:be:be:d2:8e:fb:37:f3:1e:b0:59:3f:81:83:86:6b:26:
         34:72:04:d0:24:a0:7b:3b:4d:68:24:76:e2:ff:86:8d:95:67:
         93:81:88:b0:6f:6d:50:fb:69:e7:fc:ef:3b:58:54:22:36:b5:
         1c:63:a7:d8:b4:4b:10:ba:35:00:c4:07:21:94:e0:e1:63:7d:
         cf:ba:2a:08:74:c5:b9:98:f8:96:df:1a:c2:bf:0b:bf:6f:86:
         94:1d:91:48:a0:a4:aa:2b:40:5c:2e:53:92:60:cc:7b:3a:f8:
         a6:32:99:27:47:fb:92:8b:d6:ea:70:ad:57:02:95:5a:1a:6b:
         16:be:66:f6:33:d2:f7:88:2f:f3:fd:0c:09:a5:78:fc:b9:ac:
         8e:aa:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:50:03 2024 by rpki-client on console-fra.rpki-client.org