Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File:                     vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier:          yC/l0owazFYoghqtHg64FcrB+0D4r69aVOT0G8abdJ4=
Subject key identifier:   D3:FC:19:B5:15:D6:C5:1D:05:E2:F5:5B:98:67:1B:22:0E:74:99:88
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer:       /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial:       01901D45FB56590AB91581B08B91FFA238F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number:          09DE
Signing time:             Sat 15 Jun 2024 19:00:43 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:43 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:43 +0000
Files and hashes:         1: ItlKXyPwGNslZV0hhZQrPQkGIDo.roa (hash: QAM+Z8SJJ8j3z9V119Wg+WZbsc2qc/EyTR472e7AXMs=)
                          2: XH8MwnrRriAgwi0t1qOmRFgJcFM.roa (hash: uceifxPtHcuJ0q8bUqyN45WPCASQILcRmI8LqzeVrw0=)
                          3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: gNIScR1PB8TmH9CzNfKVh68oC6d4/XEJgkLBnuozHRA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:fb:56:59:0a:b9:15:81:b0:8b:91:ff:a2:38:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
        Validity
            Not Before: Jun 15 19:00:43 2024 GMT
            Not After : Jun 16 19:00:43 2024 GMT
        Subject: CN=d3fc19b515d6c51d05e2f55b98671b220e749988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:cb:1c:57:7f:60:86:50:a7:0e:4f:07:f3:
                    3e:50:c9:43:92:cd:af:13:2f:28:cb:55:87:c9:e2:
                    13:5b:fe:48:c8:0c:21:41:91:f7:e3:67:25:42:02:
                    a7:c6:ab:a5:ac:28:dd:f3:f0:c7:c7:ac:a4:0d:40:
                    00:0c:0d:1f:11:a7:34:45:5b:d6:24:5a:e2:f9:ea:
                    cf:01:29:2f:b9:4a:dd:10:b8:65:7c:8b:11:28:0a:
                    cb:d7:a4:b4:4d:3f:e3:3b:f0:1a:14:8a:06:85:f4:
                    ef:b8:53:be:22:ec:19:66:ac:47:75:75:aa:85:85:
                    f8:d6:7c:29:23:7f:91:52:78:87:cd:d8:85:c0:ad:
                    e6:ea:9c:32:ee:2c:6e:97:33:cf:5d:54:97:23:05:
                    d0:7d:17:3a:95:25:21:74:da:72:e5:81:d6:20:02:
                    bc:3a:55:a9:1e:b1:a6:c1:ba:7a:9e:14:52:f9:84:
                    77:d2:5a:6a:40:cf:eb:91:87:a2:88:ce:88:b7:ba:
                    ec:06:40:0a:28:3d:5d:4f:d7:b2:0d:93:50:89:7c:
                    32:85:45:6f:47:55:e1:53:53:1c:ee:93:1a:80:9f:
                    e8:2a:f4:a7:2a:26:c1:a4:a7:9c:f4:ae:c5:70:51:
                    16:25:60:b0:42:8b:65:de:e2:94:44:20:d7:30:d2:
                    63:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FC:19:B5:15:D6:C5:1D:05:E2:F5:5B:98:67:1B:22:0E:74:99:88
            X509v3 Authority Key Identifier:
                keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:84:4c:b0:b1:5a:55:9e:aa:03:68:9f:f4:ec:67:19:5b:1a:
         b6:c5:cb:2b:f5:01:aa:9a:c2:e4:16:59:e3:42:57:2f:a8:d1:
         8c:f8:e3:58:9a:1b:39:3e:ef:5f:a3:d2:85:18:ab:1d:d3:fc:
         89:db:5d:93:fe:59:58:fd:4b:00:dd:75:d4:df:e5:f9:8e:ae:
         38:40:9a:2b:09:72:53:84:a0:e1:90:23:4d:b0:93:d8:ce:36:
         5c:11:aa:89:18:d3:3f:f8:95:08:8d:23:45:ba:58:3c:52:ce:
         ff:94:68:13:2c:55:06:3c:9e:fb:70:81:fc:e9:34:22:04:55:
         32:a8:ff:4e:20:e6:5f:19:2b:96:2b:01:fc:12:ea:8a:52:5a:
         44:56:88:2d:8c:b4:2f:38:f0:7d:61:ff:a2:02:b9:92:8d:7c:
         1c:e9:e8:ad:2b:31:53:e3:fe:8c:3c:48:d2:42:c1:8e:8c:5e:
         ac:d0:3f:e0:5f:09:b4:4c:a1:16:e5:ab:b2:b3:38:fc:3d:9d:
         13:ea:4e:1f:de:e6:84:1c:a2:25:91:53:55:79:00:6c:c2:e0:
         a8:e5:41:d7:22:2d:72:2e:59:a9:ac:bf:f4:0b:99:60:29:16:
         ca:62:82:8d:32:8e:29:94:1b:8e:48:e4:97:1c:4b:af:d4:a7:
         b4:49:ce:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:08:45 2024 by rpki-client on console-fra.rpki-client.org