Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
File:                     cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft (raw, json)
Hash identifier:          u9WMjQYepslyoAjB+LZYJGZ808zrzIkpVXof5J9BDwU=
Subject key identifier:   94:A3:98:86:DF:BA:C1:B4:9E:20:EE:D3:56:A9:DD:84:D0:3A:F4:1D
Authority key identifier: 71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5
Certificate issuer:       /CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
Certificate serial:       01901E8FDA45439E680ED9BB1B86D62588E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
Manifest number:          1157
Signing time:             Sun 16 Jun 2024 01:01:02 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:02 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:02 +0000
Files and hashes:         1: 7DOmT_GsF89I_kyhL2XoCnTXi5A.roa (hash: 15KV1uIJGEqeGT/SxNapUYOFY0qGw7CMbR3VcJp7Jdk=)
                          2: cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl (hash: fYnfQZM2hVwE9LHmAbptdNXhuQ66WHnPEipTsZ/9RkQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:da:45:43:9e:68:0e:d9:bb:1b:86:d6:25:88:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71b90c83d90f3d4ef22db828502e6152b6d5bfe5
        Validity
            Not Before: Jun 16 01:01:02 2024 GMT
            Not After : Jun 17 01:01:02 2024 GMT
        Subject: CN=94a39886dfbac1b49e20eed356a9dd84d03af41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:28:67:19:9d:3f:de:27:5e:2f:20:7e:ef:
                    8c:52:42:32:31:79:81:7c:e3:49:bd:64:73:8d:5c:
                    d9:5c:a2:4a:2c:08:bd:b8:47:9e:83:86:92:13:e1:
                    6f:c1:ab:ab:a8:6c:4e:52:ad:ef:b9:f0:a6:ff:89:
                    64:86:6d:cc:ad:a3:98:40:03:0e:09:b6:c7:e6:46:
                    89:90:25:b1:e3:eb:cd:e4:da:c4:dc:87:26:5c:26:
                    8f:46:0c:68:cd:0d:22:7d:ae:cb:98:9e:ce:a3:14:
                    d5:49:c6:02:43:cb:14:db:72:42:e2:82:5a:a5:fd:
                    1f:63:79:33:85:b0:c7:b9:68:48:2a:23:cf:dc:42:
                    21:e3:99:8b:a5:5c:8d:89:30:68:97:10:57:b7:f4:
                    0a:2e:72:67:85:30:09:4d:01:6c:82:13:9b:92:11:
                    b6:e9:7e:dc:7d:78:76:87:7f:c1:c7:ce:70:f2:c6:
                    80:eb:45:1f:da:7e:2e:a2:5e:f6:7d:96:7e:61:47:
                    dc:9b:24:c5:fc:0b:57:9c:70:7c:6d:89:9e:b5:b5:
                    2a:93:50:bc:ff:11:ae:5d:25:1d:b1:8c:dd:50:d1:
                    86:a3:b6:6a:7e:4a:f5:f7:e7:7c:55:9d:bf:26:ae:
                    44:8e:eb:9f:5b:34:41:3d:0a:ac:6b:59:c8:69:66:
                    89:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A3:98:86:DF:BA:C1:B4:9E:20:EE:D3:56:A9:DD:84:D0:3A:F4:1D
            X509v3 Authority Key Identifier:
                keyid:71:B9:0C:83:D9:0F:3D:4E:F2:2D:B8:28:50:2E:61:52:B6:D5:BF:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbkMg9kPPU7yLbgoUC5hUrbVv-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7022dc-356e-44d6-a3eb-7cfb9b07f40f/1/cbkMg9kPPU7yLbgoUC5hUrbVv-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:5c:12:d3:34:3b:eb:38:d0:3a:72:14:5b:c0:21:1c:dd:af:
         18:6e:ed:e3:ba:e4:0c:5d:99:ec:76:af:08:3b:b1:20:74:d9:
         f3:a4:a4:4f:c9:90:c2:d9:1a:0c:87:54:08:ca:a3:03:94:08:
         f9:75:07:71:6d:f5:45:37:0a:ba:b9:5d:87:bf:6f:6e:0a:45:
         55:b3:4c:f0:d0:18:3d:d7:55:19:05:7a:14:97:d2:08:40:65:
         86:49:af:83:78:4b:07:bc:5d:de:0e:9b:2f:a8:9b:af:fe:43:
         9a:a7:73:36:2b:93:4c:29:70:9e:e8:ff:9f:8f:59:f1:f2:78:
         44:94:bc:56:c5:1f:05:81:26:bd:81:80:81:0d:1f:79:48:11:
         40:09:0c:da:dc:f2:24:50:fe:6b:50:03:c6:2a:5c:1e:be:33:
         8e:3f:61:da:7f:a6:1c:9d:bb:de:69:38:99:dd:54:ed:f8:d2:
         f2:e4:df:8e:9f:7e:1e:79:f3:45:cc:e1:0f:9e:a4:4c:c9:3c:
         f9:b0:f6:01:b7:6a:b5:9c:9b:01:49:ea:35:63:40:3b:bc:e0:
         e5:79:7f:e0:23:a6:69:85:08:29:f5:33:b3:ad:96:50:9c:56:
         0e:b7:ad:5e:5e:1f:ee:51:18:be:ab:83:d9:3c:6b:c2:9d:36:
         34:b6:bc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:02:37 2024 by rpki-client on console-ams.rpki-client.org