Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
File:                     2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft (raw, json)
Hash identifier:          AsFs/IXmfieL2GlvzPxab0ljgz0oCTY8WwnESTGv1WM=
Subject key identifier:   2C:DD:AB:EA:EE:BE:DC:9F:37:A4:D4:83:19:60:9E:DE:40:A8:03:AA
Authority key identifier: D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D
Certificate issuer:       /CN=d959676fe138d4eb2aae19bb6731fee6292d793d
Certificate serial:       01901EC6A39F8ECDA981C9BF91176EE40228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 02:00:52 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:52 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:52 +0000
Files and hashes:         1: 2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl (hash: NFqArvnVHtL6+mqLKJs6pSamE92hT9z7yFUS0bKxyw8=)
                          2: dPO8KIWpIbuWOoVMz01WfhMGyjg.roa (hash: W0sAIpeOczBt8Ho9DSv+D0Bnuxgt9hGmLyNMLWiqpas=)
                          3: yzCOqY9vHwbqac4sMHT2ZAWKKjU.roa (hash: QhqtGL5U/rRTgxJlvWvkLChPBK9eUdmcrIi80xNB4DU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:a3:9f:8e:cd:a9:81:c9:bf:91:17:6e:e4:02:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d959676fe138d4eb2aae19bb6731fee6292d793d
        Validity
            Not Before: Jun 16 02:00:52 2024 GMT
            Not After : Jun 17 02:00:52 2024 GMT
        Subject: CN=2cddabeaeebedc9f37a4d48319609ede40a803aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:d7:a3:1a:9e:7c:41:43:6f:d3:54:1b:64:
                    85:28:35:ec:c8:fc:e4:30:da:bd:8d:9a:73:fa:79:
                    c2:76:d6:0b:2f:66:54:10:ba:98:86:f3:8b:f6:5d:
                    bc:70:0d:ab:e9:89:bb:dc:2f:0d:27:76:af:e2:07:
                    4a:c7:14:a7:ec:04:e4:df:b9:9c:b6:09:d3:b7:a3:
                    9e:5d:b3:77:5a:9f:5f:43:56:53:3c:cf:f7:4b:31:
                    9c:30:10:e1:f4:ac:b9:32:62:9f:72:1a:0d:7e:13:
                    36:51:75:de:e1:f4:9e:2c:7d:ee:63:1b:28:e0:dc:
                    0d:67:ce:07:04:04:61:6e:65:85:db:47:ff:b6:72:
                    a6:95:18:8f:a2:ff:d1:6d:f4:c2:f9:e3:c9:a8:12:
                    e8:b7:fd:b6:03:ea:1b:2a:39:1d:02:43:48:fb:24:
                    bb:24:13:35:27:ac:e3:d3:74:5e:9f:53:f4:4a:f3:
                    55:21:a9:1e:ba:50:a1:4e:79:0d:03:78:2b:06:08:
                    91:60:c2:65:ef:17:58:a2:c8:6c:01:c4:8d:02:45:
                    4f:4d:3b:4b:91:56:f0:c3:b1:88:47:54:eb:54:f9:
                    c7:34:d2:01:12:eb:27:c1:e3:b7:ef:e2:cf:2a:2f:
                    01:85:8e:b5:91:ba:01:5b:a9:bf:9d:35:22:41:0d:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DD:AB:EA:EE:BE:DC:9F:37:A4:D4:83:19:60:9E:DE:40:A8:03:AA
            X509v3 Authority Key Identifier:
                keyid:D9:59:67:6F:E1:38:D4:EB:2A:AE:19:BB:67:31:FE:E6:29:2D:79:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Vlnb-E41Osqrhm7ZzH-5ikteT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cf028e-757e-4843-a1ea-4c74d332ea58/1/2Vlnb-E41Osqrhm7ZzH-5ikteT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7b:ca:0c:95:73:20:42:af:d2:08:d7:72:d0:77:a3:84:24:
         bb:fa:4c:a1:64:c1:0f:85:9d:29:eb:82:d8:ac:e4:90:18:3d:
         32:d4:a0:7b:e7:27:50:3e:ef:51:ca:54:21:b7:4f:89:4e:99:
         af:04:a3:81:b6:98:e9:7d:af:4e:6c:f1:6d:e9:00:9e:68:36:
         76:df:34:61:ad:58:ab:a7:8a:17:6c:80:f4:a7:2b:61:03:6b:
         51:1f:bf:c2:61:4d:4f:19:53:ce:46:5b:53:85:88:c4:41:15:
         b0:d3:f5:4c:dc:d9:dc:21:ac:1c:80:12:38:cf:44:27:9f:ea:
         eb:97:fc:b3:38:08:52:3d:71:a4:e0:c2:e3:ed:e9:af:c8:dc:
         cd:48:2e:f1:14:ab:ee:1e:91:24:89:1e:c4:6b:f2:f5:eb:03:
         88:34:34:80:eb:a6:6a:90:8e:a1:86:b9:cc:26:ac:b5:d3:99:
         2c:ea:f3:0a:71:1d:93:50:32:67:96:d8:1b:87:af:6c:fa:a9:
         44:ee:36:df:28:d2:d8:f4:72:97:43:d7:fa:fb:2f:a7:61:31:
         00:83:54:de:5c:05:c5:29:21:34:33:7d:df:67:f9:43:d1:0e:
         ae:e5:b9:5a:c0:2e:ec:e2:35:8b:79:31:e1:f4:61:3d:78:a9:
         c4:02:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:00:48 2024 by rpki-client on console-ams.rpki-client.org