Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
File:                     cCw58YaCB38HK2IRb9TxaQh0r5Y.mft (raw, json)
Hash identifier:          d2SzbeLU2hKg0mIYjhuYJM6IwzknwQ1xTLvHdD5d5zU=
Subject key identifier:   38:A8:5F:C1:C3:38:FC:E4:D6:AE:9A:C7:22:D9:5D:3E:54:ED:C9:29
Authority key identifier: 70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96
Certificate issuer:       /CN=702c39f18682077f072b62116fd4f1690874af96
Certificate serial:       01901DEC310CC5CC95F47884489EDEA08E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
Manifest number:          0507
Signing time:             Sat 15 Jun 2024 22:02:16 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:16 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:16 +0000
Files and hashes:         1: aQWoBe2SEFl3Lh6yqUH9D_pdq1g.roa (hash: ypasa4jTYYlaSIlhOEEAjw9RrKwo8caWXT8sxE1DxJo=)
                          2: cCw58YaCB38HK2IRb9TxaQh0r5Y.crl (hash: baLT8gVGE0F+xwDiRcTxeFyelv6uSLG7F0vy5ETNf00=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:31:0c:c5:cc:95:f4:78:84:48:9e:de:a0:8e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702c39f18682077f072b62116fd4f1690874af96
        Validity
            Not Before: Jun 15 22:02:16 2024 GMT
            Not After : Jun 16 22:02:16 2024 GMT
        Subject: CN=38a85fc1c338fce4d6ae9ac722d95d3e54edc929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:cc:38:bf:61:d3:ab:c8:d4:01:10:ae:88:
                    bf:f6:33:86:0e:44:14:a1:90:49:a1:3a:89:49:9e:
                    8a:5e:80:ea:9b:2a:d4:dd:14:c2:d4:45:1d:f2:af:
                    a7:5c:83:47:54:27:f6:6d:37:bb:66:30:da:cd:84:
                    10:99:de:8b:27:3c:c9:e3:5c:09:c2:83:59:23:da:
                    e3:36:2d:04:b3:2a:de:46:cb:5c:09:d8:c8:da:64:
                    8c:ed:5e:9c:e7:75:6e:f4:00:49:f7:78:36:5e:24:
                    f3:c2:a9:9b:83:48:93:1a:77:28:89:27:fa:b6:27:
                    32:e5:e2:01:09:0c:b4:f1:fc:b8:19:ea:5e:0f:b1:
                    2e:96:c9:29:b0:53:24:35:47:68:82:36:9c:97:dc:
                    19:bc:8e:ec:7c:06:61:20:01:5f:0c:72:69:77:7a:
                    69:2c:01:d1:13:63:9a:29:25:60:03:4f:80:98:02:
                    4f:f7:7e:08:ca:99:59:15:f2:08:f8:49:40:fc:03:
                    20:ab:27:86:38:3b:16:f9:9e:ed:31:fd:a0:c2:2e:
                    1b:3f:75:4d:03:11:5f:af:27:58:d9:1a:d0:87:a1:
                    38:cd:53:80:5d:7d:d0:a0:f8:ae:0e:b9:c1:1b:d4:
                    86:14:7b:d5:f8:3c:8d:bc:2b:3f:74:47:5b:24:70:
                    af:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A8:5F:C1:C3:38:FC:E4:D6:AE:9A:C7:22:D9:5D:3E:54:ED:C9:29
            X509v3 Authority Key Identifier:
                keyid:70:2C:39:F1:86:82:07:7F:07:2B:62:11:6F:D4:F1:69:08:74:AF:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCw58YaCB38HK2IRb9TxaQh0r5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8365af-f851-4b7c-a891-38805dbff719/1/cCw58YaCB38HK2IRb9TxaQh0r5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:09:41:0e:c9:24:38:c7:f2:e6:70:13:b0:92:b7:30:1b:f7:
         22:a9:2f:e3:04:d3:d8:62:d3:33:0d:94:30:1d:4d:a8:a3:a3:
         cc:5e:94:db:46:8b:19:08:43:dd:f4:b2:cf:67:31:27:e3:08:
         7b:d1:b1:fd:fd:70:18:f7:5c:ec:04:ad:61:a3:5b:c4:06:e1:
         21:4e:95:14:5b:6b:b3:20:df:f8:be:2c:18:5b:1b:83:b5:b8:
         49:ec:c6:fc:9e:dc:ab:75:e4:88:d4:b0:dc:ed:cc:b6:44:61:
         f3:ce:18:ed:83:e2:f3:38:b9:4b:dd:76:96:e7:16:30:77:9c:
         b3:1e:3e:ca:07:da:e6:d5:51:22:25:52:23:1e:76:15:c0:ad:
         be:3e:4d:68:cc:8b:ed:31:0a:7d:bd:7d:4e:a3:40:cc:44:ce:
         df:9f:47:4e:29:9d:48:cc:d7:3e:33:bc:53:6f:22:c5:a2:5f:
         1a:f8:e8:77:a5:9b:4f:d0:ef:d0:cd:78:75:8d:a6:a6:ad:af:
         48:a9:a9:5c:0b:75:59:7c:74:72:69:39:5d:51:f9:43:00:0d:
         10:43:a3:d8:f6:08:ea:0e:95:ca:30:be:e9:26:a2:c0:25:df:
         96:da:c3:2d:90:cc:3a:af:3c:fb:b7:e2:84:b8:66:9d:08:c7:
         7e:aa:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:04:58 2024 by rpki-client on console-ams.rpki-client.org