Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
File:                     gTADAN5QBa2iu2bCaJmKQMM60js.mft (raw, json)
Hash identifier:          FwUgeykJkwSH1m5vEyzJnrBsamsTZTTXbmRoy/NlPf4=
Subject key identifier:   2A:D4:DA:E1:85:FA:1B:8A:26:0F:93:87:96:A0:3E:50:BF:18:14:77
Authority key identifier: 81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B
Certificate issuer:       /CN=81300300de5005ada2bb66c268998a40c33ad23b
Certificate serial:       01901DEC6C6E1F124C9460F2C0327A37E1CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
Manifest number:          081C
Signing time:             Sat 15 Jun 2024 22:02:31 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:31 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:31 +0000
Files and hashes:         1: WkOXk29GIGxV1mXN1SmmMdmARWs.roa (hash: TFHgetHnoc1O/OLhpxzHup39TTrZ7ezRt/JcI0r7+rI=)
                          2: gTADAN5QBa2iu2bCaJmKQMM60js.crl (hash: befmmRwW15uzwFob7Z1xhwJ4Ktn0uZGz+iJEVyg8ovg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:6c:6e:1f:12:4c:94:60:f2:c0:32:7a:37:e1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81300300de5005ada2bb66c268998a40c33ad23b
        Validity
            Not Before: Jun 15 22:02:31 2024 GMT
            Not After : Jun 16 22:02:31 2024 GMT
        Subject: CN=2ad4dae185fa1b8a260f938796a03e50bf181477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:ee:cc:0d:69:b4:c6:37:bc:a5:04:d8:88:
                    35:fc:2f:f8:61:c8:81:88:52:9a:2a:62:ad:08:81:
                    5b:b1:fc:d6:6f:c3:ef:3c:99:67:9a:3d:0e:9c:ca:
                    01:8c:62:19:81:d1:f9:92:fc:da:1c:04:d8:55:17:
                    ab:b9:95:f4:00:da:cd:02:b6:a4:27:57:99:74:e9:
                    3f:d1:c0:8f:67:f0:2b:97:99:95:23:c9:5d:3d:53:
                    09:05:f7:3f:c0:60:c4:ee:56:ff:57:91:83:0e:70:
                    0b:be:5c:e7:09:ea:fa:55:20:58:ff:bc:16:f2:7a:
                    5b:73:a5:13:47:e3:0d:ef:0e:20:6d:c5:a7:31:2b:
                    00:46:35:e3:c4:28:f7:8a:67:39:9d:07:94:05:14:
                    23:d2:34:f5:1d:08:c2:88:56:52:b0:e7:8a:ff:f4:
                    a3:23:5a:96:9c:b3:d9:36:41:ac:35:81:52:69:42:
                    c8:77:8f:c5:99:e1:78:4e:3a:a6:cb:ec:b9:ed:ae:
                    e4:cd:31:32:6f:a2:fc:af:5f:af:6a:cc:b9:30:ef:
                    16:dd:b7:89:34:c1:1d:12:ed:6b:1c:be:46:9a:96:
                    7c:0a:1e:f5:7a:b5:71:07:9f:7f:24:1e:85:39:28:
                    af:6e:b8:35:15:f5:dc:c7:2f:47:56:ce:38:3f:4c:
                    a4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D4:DA:E1:85:FA:1B:8A:26:0F:93:87:96:A0:3E:50:BF:18:14:77
            X509v3 Authority Key Identifier:
                keyid:81:30:03:00:DE:50:05:AD:A2:BB:66:C2:68:99:8A:40:C3:3A:D2:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTADAN5QBa2iu2bCaJmKQMM60js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/dbad88-f818-431e-87a6-dfee984037ac/1/gTADAN5QBa2iu2bCaJmKQMM60js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7c:0a:7e:b0:41:48:61:c6:f9:8d:b0:0b:41:ff:1c:c1:b2:
         aa:dd:a6:da:f9:6c:1f:21:7c:8e:36:6a:16:a9:79:a3:3b:96:
         04:79:6e:bb:11:a0:f6:4c:9f:b8:68:ce:9a:17:0c:e1:50:08:
         01:35:a5:cb:ab:d7:43:bf:fe:4a:23:4a:e1:e5:d5:b4:f4:48:
         09:7e:46:4d:44:da:6e:0a:c5:d4:f4:ff:e7:54:ae:ab:d2:a1:
         82:70:33:67:98:9a:33:84:a2:3d:fa:63:17:3d:2b:18:50:37:
         29:4f:b0:55:34:32:e1:5c:21:60:b9:61:bb:87:e7:bf:52:5b:
         95:22:d7:36:8e:b6:93:87:73:e2:b9:1b:16:a5:32:88:87:67:
         10:9c:df:fb:26:89:fb:e5:67:19:51:2e:de:bb:09:bd:b2:31:
         be:14:8c:db:02:ec:eb:3f:a2:4e:d2:72:de:1f:d3:e9:2e:9f:
         36:3c:64:d2:e5:45:cc:5d:fd:86:e3:43:82:c9:66:51:6f:e4:
         11:8e:0a:5d:0b:3b:07:41:51:29:ce:ca:7c:e1:a7:1b:2e:59:
         b1:ee:77:42:b7:67:14:88:8f:b9:20:d6:c2:54:9b:77:49:05:
         43:92:74:15:6e:00:7b:29:2e:f7:6e:6a:ef:fd:6f:67:d6:1b:
         d2:f2:83:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:05:02 2024 by rpki-client on console-fra.rpki-client.org