Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File:                     c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier:          gTajffAmzXlOqJu4Acv0jo8DJ5aqG8LEV1+hdblUmCo=
Subject key identifier:   91:F7:EA:DC:71:85:B3:2A:13:07:DB:EE:A0:98:BD:08:15:83:1D:6D
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer:       /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial:       01901BFE9AE292A1F787622CA36F716C7803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number:          02D2
Signing time:             Sat 15 Jun 2024 13:03:08 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:08 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:08 +0000
Files and hashes:         1: M-q7Yu8W4kEDrYBrEYGSkryZIBU.roa (hash: 8upvmOLmbq9Ubby/G4DDdD5pTDb0CD6Qs/cLutbj1Dc=)
                          2: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: xAZx4f/zyRuKlHF1fFUM2mcinPYONF+T+Bh6FT0ixoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:9a:e2:92:a1:f7:87:62:2c:a3:6f:71:6c:78:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
        Validity
            Not Before: Jun 15 13:03:08 2024 GMT
            Not After : Jun 16 13:03:08 2024 GMT
        Subject: CN=91f7eadc7185b32a1307dbeea098bd0815831d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:aa:d8:a6:a3:6e:9f:84:7c:5d:e1:ae:4f:
                    d8:0c:4b:90:ca:fb:14:a7:2c:97:1e:f8:8f:a5:84:
                    0d:95:e3:a4:97:03:e1:28:f0:3d:3c:7c:df:a2:04:
                    08:8b:9d:cd:dc:08:da:7c:ed:ac:6a:9b:2e:db:55:
                    82:8c:10:d5:ae:d6:55:f9:ab:a2:e6:10:15:4e:e2:
                    0d:1d:e6:d4:1a:1a:2b:14:ac:94:db:0a:f3:6e:2c:
                    57:61:c5:a3:2f:38:00:19:eb:b8:2b:b3:ad:0c:62:
                    55:d5:b8:34:8c:df:3d:89:6e:5c:73:f3:5d:10:8c:
                    e4:a8:8b:b4:fb:83:ba:44:13:31:85:e3:50:ab:8a:
                    2e:b0:01:23:06:a0:fb:f9:66:ff:34:f8:99:ad:c4:
                    37:44:a5:98:2b:c1:8a:41:37:73:15:7b:4a:92:0b:
                    62:09:96:d9:a6:5c:79:a7:67:8e:55:71:b5:62:13:
                    38:4a:54:05:1b:a2:37:e9:f8:ae:e6:be:30:1a:44:
                    62:42:be:ef:2c:51:d9:e3:55:a9:91:81:57:a1:98:
                    d4:4a:64:b7:ac:d5:8f:d0:77:04:20:c0:cd:2a:d6:
                    63:7e:e3:a4:52:13:5b:98:81:e9:f8:b4:04:2c:fe:
                    9b:ad:79:c4:32:0f:72:85:1a:72:b9:64:45:74:d2:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F7:EA:DC:71:85:B3:2A:13:07:DB:EE:A0:98:BD:08:15:83:1D:6D
            X509v3 Authority Key Identifier:
                keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d5:08:3f:6f:f5:98:84:f9:8a:2c:92:fb:34:fb:37:c5:b6:
         e4:1b:6c:37:52:ae:9e:4a:16:02:6b:45:10:eb:4f:a3:99:bf:
         a4:f8:37:4d:b3:70:2a:a4:b7:8a:64:ba:34:e7:e2:69:b0:4c:
         10:a4:43:00:79:eb:9d:d7:3d:78:5b:bc:c7:e2:67:cd:5a:34:
         23:88:57:c9:83:49:52:87:6f:07:1f:6a:82:b5:97:71:25:e0:
         c7:84:e7:db:1f:16:ad:33:33:e3:44:86:15:bc:e9:78:47:d2:
         06:37:3c:82:b7:c3:be:0d:91:15:e7:b7:6d:23:ad:49:e6:9f:
         ca:69:bc:b1:9d:ed:39:52:4b:6d:b4:3a:af:53:5b:b0:76:bb:
         19:7f:d1:cb:99:48:a9:77:22:6d:4b:95:5e:3e:c4:ee:19:d2:
         92:f4:e9:af:62:43:80:af:bc:b8:da:6a:3a:e4:f9:2f:a4:1b:
         82:a7:20:24:58:3d:fe:ff:b1:99:73:55:8b:30:eb:4b:a2:88:
         93:89:77:6f:75:40:a0:34:28:fb:85:36:de:44:42:00:ae:bb:
         ce:61:26:a5:db:30:2d:4f:71:23:f2:4c:69:bf:ed:90:bd:a1:
         44:8c:8b:4d:4b:9c:d1:c3:33:62:d2:6c:66:46:bf:d9:6f:c2:
         df:c3:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:28:07 2024 by rpki-client on console-ams.rpki-client.org