Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
File:                     mpGLgMuzJzekayRIaaatVQlUP6E.mft (raw, json)
Hash identifier:          QVugyN7wyrT7yGtRsfoUzJzS4DzNEMzSmn/Jfbz6Kns=
Subject key identifier:   5D:0F:30:B0:A3:98:DB:81:DC:A4:9C:7B:58:E1:13:6D:98:BF:4C:9A
Authority key identifier: 9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1
Certificate issuer:       /CN=9a918b80cbb32737a46b244869a6ad5509543fa1
Certificate serial:       0190459D3FF8837918231CD1C0BE56109A73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
Manifest number:          0581
Signing time:             Sun 23 Jun 2024 15:00:51 +0000
Manifest this update:     Sun 23 Jun 2024 15:00:51 +0000
Manifest next update:     Mon 24 Jun 2024 15:00:51 +0000
Files and hashes:         1: 2WBFidnUIZfm1Xhwjd_NR-WVXRc.roa (hash: ctQcAg1aMdEyFjxmegT5PYjvgi4qsKQSZKMfWaGtdLs=)
                          2: mpGLgMuzJzekayRIaaatVQlUP6E.crl (hash: VvorP0HRq3sD4MSCNKwWWs8BwoRHYXc9ojaEWR2cTYY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 15:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:9d:3f:f8:83:79:18:23:1c:d1:c0:be:56:10:9a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a918b80cbb32737a46b244869a6ad5509543fa1
        Validity
            Not Before: Jun 23 15:00:51 2024 GMT
            Not After : Jun 24 15:00:51 2024 GMT
        Subject: CN=5d0f30b0a398db81dca49c7b58e1136d98bf4c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7b:9d:ef:f7:3c:67:34:7a:d0:1b:c3:d0:fc:
                    c5:9f:84:9f:bf:fe:62:61:0e:77:04:79:32:6a:b0:
                    d3:03:7d:5b:d5:38:d9:94:29:da:6d:a8:f4:25:23:
                    b3:a9:86:18:b3:0c:a8:a2:db:2f:17:7a:5a:c1:ce:
                    18:53:50:6b:4f:80:f6:8f:cb:7b:47:cc:6c:5c:81:
                    a9:18:06:6c:3d:0e:e2:62:4a:77:90:c9:fb:59:b9:
                    18:2d:37:1f:bf:77:b7:c4:7e:2f:48:6e:d1:52:6a:
                    a9:d7:1b:2c:a9:ab:64:cb:68:2b:d3:5c:ce:a1:e6:
                    0c:8f:41:3d:bc:f1:8e:5a:3c:48:42:22:69:bd:fc:
                    8d:f3:f6:70:7e:25:26:69:47:c7:2a:90:d1:80:2a:
                    31:88:a4:4c:7a:50:36:b3:11:f9:8a:49:d4:68:02:
                    22:6e:82:64:34:f1:62:bb:4d:d6:a5:4f:d8:fb:80:
                    51:c1:7e:51:31:48:53:24:c8:f7:5f:cf:ec:9e:f4:
                    67:ed:02:51:e9:91:ec:ff:4a:ad:67:36:14:90:1e:
                    7e:a8:d9:45:3b:80:61:81:cf:a4:32:e4:c5:cf:47:
                    7a:26:5c:18:54:f2:f4:23:ac:5d:11:78:20:93:be:
                    5a:15:a4:16:14:b7:d0:1f:1c:4e:c1:13:08:e4:19:
                    9e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:0F:30:B0:A3:98:DB:81:DC:A4:9C:7B:58:E1:13:6D:98:BF:4C:9A
            X509v3 Authority Key Identifier:
                keyid:9A:91:8B:80:CB:B3:27:37:A4:6B:24:48:69:A6:AD:55:09:54:3F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGLgMuzJzekayRIaaatVQlUP6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5c0b4a-2da4-43a5-9289-1937bde8cd6f/1/mpGLgMuzJzekayRIaaatVQlUP6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:ab:89:3e:51:a6:9c:07:43:ef:9d:d2:ca:80:7d:78:c6:
         6c:2b:7a:87:86:4e:a1:f0:49:27:cc:b4:ca:41:76:a5:6f:94:
         1c:6c:d4:93:e7:0a:a1:36:b6:9a:2f:4b:86:4e:88:95:67:0d:
         f0:10:70:e2:1e:f6:14:91:71:aa:20:bd:8d:7b:bf:96:e4:f7:
         50:d1:ed:81:8e:61:c3:d0:16:e7:fb:66:45:3f:00:72:59:7f:
         1b:95:01:36:71:ff:b6:e9:07:bc:90:89:87:e1:45:1d:5c:67:
         b5:b9:3f:e9:b3:48:32:e7:da:81:38:2a:b4:c6:12:3f:fd:de:
         c3:37:ba:c4:0c:49:14:67:35:1d:1b:bc:0e:4e:14:01:d6:b6:
         3d:7b:fd:0c:e5:85:58:b7:eb:84:83:9a:0d:e9:b5:d7:86:29:
         bb:9c:ae:61:2c:89:54:8c:4d:ae:37:4f:23:c8:1d:a8:98:62:
         c3:d1:b5:05:30:9a:1e:ca:4c:ed:4c:cb:df:c4:d3:77:17:34:
         6e:b4:0b:38:6f:f8:34:b3:e8:d6:79:bb:d2:4a:a8:21:e9:9b:
         e5:0e:c0:eb:b2:74:c1:bf:a6:27:b5:16:e7:14:0c:9e:0d:4d:
         e8:33:49:09:af:cc:36:fb:fc:72:48:8f:63:f6:76:bc:a5:f7:
         a7:13:40:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:10:22 2024 by rpki-client on console-fra.rpki-client.org