Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File:                     vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier:          61yJKFzUqrXrIaiJBVAJ7aSlLVFZKe6Tvo2uAasYO3c=
Subject key identifier:   7D:C2:7A:7D:58:ED:74:88:D9:A2:45:CA:AC:E1:7A:77:1D:EF:B3:E2
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer:       /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial:       01901EC6AFF916A1698CBAD478ADCB0936D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number:          0A06
Signing time:             Sun 16 Jun 2024 02:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:55 +0000
Files and hashes:         1: sDkAfqlfMdk2N1cpSMoG3DqCjOg.roa (hash: dPOT9z9eh8cXXnReszfexsvS+dHT4zVWN5nTvrTp1TQ=)
                          2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: MnF2Epx2RioXJYoBeW3aC9g1mrXoAaIAgq8arMM3b0o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:af:f9:16:a1:69:8c:ba:d4:78:ad:cb:09:36:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
        Validity
            Not Before: Jun 16 02:00:55 2024 GMT
            Not After : Jun 17 02:00:55 2024 GMT
        Subject: CN=7dc27a7d58ed7488d9a245caace17a771defb3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:71:2c:28:1e:a7:c4:c3:e4:13:91:dc:33:
                    cb:15:e6:dd:f4:69:78:f9:7f:5d:42:83:c0:23:37:
                    5b:47:8f:c8:32:43:04:29:ea:1c:59:6c:73:24:cb:
                    14:5e:02:c3:c2:be:a7:95:2f:de:c4:92:07:7e:80:
                    53:9f:4a:62:bb:66:37:0a:a4:b1:76:76:9b:c7:26:
                    74:63:e8:44:71:66:23:d3:d9:60:22:d6:44:35:b5:
                    f9:ca:13:69:59:c1:94:02:2e:40:02:e3:01:92:42:
                    b9:2d:6c:9b:74:58:a6:54:e8:47:88:f5:f4:ff:09:
                    c8:db:31:78:90:ba:f4:c3:2d:0d:6b:56:e2:b8:b1:
                    7a:86:46:40:30:50:fe:74:15:9f:41:16:1e:08:5b:
                    66:13:74:36:2e:f3:7d:fd:b9:ff:25:1d:30:94:8f:
                    1f:cc:97:a7:9f:16:5e:c7:bf:b8:52:90:bf:67:4e:
                    63:5f:8f:32:d8:9d:b4:2f:3e:5e:94:ba:00:26:a7:
                    31:f1:17:de:83:27:cd:74:75:91:db:51:08:61:65:
                    74:24:b1:2a:ef:d6:ff:d2:a4:fd:7f:4b:c8:72:78:
                    66:17:90:60:ad:0e:31:8f:7f:c6:8b:3d:50:75:ea:
                    dd:40:ef:fe:a1:f6:be:1f:b9:0b:e8:8a:2c:22:1d:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C2:7A:7D:58:ED:74:88:D9:A2:45:CA:AC:E1:7A:77:1D:EF:B3:E2
            X509v3 Authority Key Identifier:
                keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3b:36:43:c5:b5:d7:02:0d:21:1e:de:f4:01:82:28:95:ee:
         54:1a:32:f7:9c:99:df:18:2d:c3:a8:76:59:c9:92:ad:05:9a:
         bd:da:03:e5:77:48:71:ba:2a:33:af:2a:56:e7:a5:35:76:ab:
         b9:f2:a7:ce:46:b8:0f:71:e2:09:a7:2e:7f:98:10:bc:84:52:
         b5:40:d3:b5:e8:57:bc:b8:a1:58:cb:47:bb:06:ed:8e:7f:b1:
         dc:b1:d8:51:9b:77:0b:7e:1a:a4:1a:98:a2:2f:71:69:ad:50:
         69:50:49:db:6e:61:06:ac:f3:b7:97:87:6f:62:7b:2d:75:40:
         8b:59:5f:9d:fb:50:64:69:fb:04:47:88:49:9b:9c:66:a8:5b:
         a9:87:05:e3:7b:78:d3:4c:1a:e5:1f:f7:07:81:a1:ab:0f:4c:
         7c:93:8c:33:e6:d3:fb:f5:7e:36:b9:77:db:86:a5:cf:2e:6b:
         cf:9a:b2:3e:ad:4f:98:a5:f1:9b:42:ce:91:85:b1:2d:ac:fd:
         29:76:3b:ff:3b:67:00:33:6d:06:1b:cf:16:d8:ac:eb:1e:96:
         51:d8:66:7b:d5:c9:ee:c6:62:f1:f9:2d:93:f8:c6:8d:35:75:
         36:54:d9:bf:85:52:8f:7e:eb:22:94:b8:98:d5:bb:3c:46:26:
         f9:95:81:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:03:18 2024 by rpki-client on console-fra.rpki-client.org