Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
File:                     sKT8KvOK9bT1hh4n_QB-YktfmwI.mft (raw, json)
Hash identifier:          fTzgUur02I3NLB6FPKhY4cAIR+vQUwdVM+MHio2k5G8=
Subject key identifier:   FD:B5:21:ED:0A:48:BE:6D:7A:21:3B:0C:4A:F8:D9:4B:69:F7:93:97
Authority key identifier: B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02
Certificate issuer:       /CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
Certificate serial:       019044C1465726076AD672388EBFBAA07025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
Manifest number:          10A9
Signing time:             Sun 23 Jun 2024 11:00:35 +0000
Manifest this update:     Sun 23 Jun 2024 11:00:35 +0000
Manifest next update:     Mon 24 Jun 2024 11:00:35 +0000
Files and hashes:         1: CKYxHGe_r5qermXLJrW3PthgQIU.roa (hash: GuGNkGiCWUw/H93B23xCWyZe23gkcac/lftUsf3VH1s=)
                          2: sKT8KvOK9bT1hh4n_QB-YktfmwI.crl (hash: NOB2tENHFs57+zcin0c87sZhf6P/Sr1h/ENCy/66/50=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:c1:46:57:26:07:6a:d6:72:38:8e:bf:ba:a0:70:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0a4fc2af38af5b4f5861e27fd007e624b5f9b02
        Validity
            Not Before: Jun 23 11:00:35 2024 GMT
            Not After : Jun 24 11:00:35 2024 GMT
        Subject: CN=fdb521ed0a48be6d7a213b0c4af8d94b69f79397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b1:14:3e:a3:42:ba:da:ef:72:44:4f:7c:df:
                    71:74:27:54:8a:9a:a9:de:bb:cc:19:dd:8f:86:4f:
                    3f:bc:94:bf:06:1d:77:f9:7e:b0:13:b7:76:7a:07:
                    da:39:47:24:7f:62:a2:29:d6:3d:1b:23:68:13:87:
                    6d:83:e2:68:26:ac:46:19:fb:eb:5c:a5:d7:39:28:
                    44:0f:03:45:8b:45:d6:33:85:b0:b6:c1:7e:68:13:
                    c1:10:d8:71:5e:f4:cc:19:92:13:60:4f:0b:8a:0e:
                    d2:d9:4f:30:d1:e4:a2:17:70:df:6c:17:40:5d:a2:
                    0c:33:3d:c7:31:4d:4d:ca:a2:1d:d5:ec:5b:ac:c1:
                    ec:69:00:95:3d:6c:17:a4:c2:ec:3d:9d:38:8a:97:
                    1d:68:5f:a7:30:07:06:b0:f7:02:f5:8a:5f:28:fb:
                    5d:c2:64:db:a5:c5:b5:8f:7e:83:c6:bd:49:c4:a3:
                    26:75:fb:e3:81:7a:8c:26:15:1e:e0:aa:66:7c:ab:
                    f0:81:29:b1:6c:07:46:9e:8b:e9:cf:c3:19:89:a0:
                    b2:76:64:b8:e3:ea:14:b4:a1:66:30:65:3b:83:45:
                    55:20:d4:ab:4e:bb:e7:86:47:83:a2:9e:91:a8:2d:
                    7b:65:93:0d:9d:0d:6b:4c:30:75:5e:09:ea:b4:df:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B5:21:ED:0A:48:BE:6D:7A:21:3B:0C:4A:F8:D9:4B:69:F7:93:97
            X509v3 Authority Key Identifier:
                keyid:B0:A4:FC:2A:F3:8A:F5:B4:F5:86:1E:27:FD:00:7E:62:4B:5F:9B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKT8KvOK9bT1hh4n_QB-YktfmwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a80dbf-5cb4-4e26-adaf-68fe08622614/1/sKT8KvOK9bT1hh4n_QB-YktfmwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:07:e7:5e:69:ca:8c:cf:1d:04:95:72:36:b7:05:60:de:e8:
         1c:0a:7b:e0:fa:a2:0c:fb:87:39:2a:74:95:86:e6:2e:56:4d:
         80:d8:14:07:11:4b:f6:8b:4c:be:59:67:9f:ff:86:9d:0e:d9:
         3a:b8:67:7f:70:c1:88:95:e5:f7:8a:4a:c6:90:39:51:19:e2:
         4c:3f:ef:9e:d1:fb:aa:a1:cd:07:50:3b:d5:6c:ff:1c:1b:23:
         22:54:44:70:dd:a6:97:e1:8f:06:c1:18:5d:b4:81:e2:6e:0b:
         ad:1a:3a:38:73:15:19:87:85:75:c1:ff:41:bd:c1:64:20:23:
         c2:ed:0a:9f:a4:50:8f:3b:5d:44:55:c9:79:cd:5a:7b:35:62:
         67:36:22:a7:13:3d:bd:bf:0c:c0:6b:a2:f7:c0:d3:cf:31:50:
         6e:16:10:e6:f9:ee:eb:ec:10:aa:8c:80:21:24:64:e2:f5:72:
         07:de:a4:8e:97:c3:d8:d9:90:f8:db:93:2a:01:45:1e:da:c0:
         51:3a:e9:9e:1e:74:51:4e:84:f5:18:18:d0:8a:1c:27:2c:e1:
         51:ee:10:14:8d:bb:22:c7:b4:87:ab:42:01:9b:c2:80:3e:5a:
         60:c4:f5:3b:98:10:bd:42:25:00:9c:86:fc:24:bc:54:09:8c:
         17:f2:a7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:20:22 2024 by rpki-client on console-fra.rpki-client.org