Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File:                     vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier:          pgmjEs7acp2uSDgEUGvD50Qgc0Z025mvqcq5w2ZZFSM=
Subject key identifier:   61:A5:2E:54:35:5D:E1:DA:22:09:93:FF:AB:74:F4:0B:19:F5:B7:E3
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer:       /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial:       019045D4187BEA1B3FC524E430112396D23C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number:          09F3
Signing time:             Sun 23 Jun 2024 16:00:45 +0000
Manifest this update:     Sun 23 Jun 2024 16:00:45 +0000
Manifest next update:     Mon 24 Jun 2024 16:00:45 +0000
Files and hashes:         1: ItlKXyPwGNslZV0hhZQrPQkGIDo.roa (hash: QAM+Z8SJJ8j3z9V119Wg+WZbsc2qc/EyTR472e7AXMs=)
                          2: XH8MwnrRriAgwi0t1qOmRFgJcFM.roa (hash: uceifxPtHcuJ0q8bUqyN45WPCASQILcRmI8LqzeVrw0=)
                          3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: ng1x95fQD8uJLKMzbaDFjb6GNdkeGr8puQSNHmpcsxE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:d4:18:7b:ea:1b:3f:c5:24:e4:30:11:23:96:d2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
        Validity
            Not Before: Jun 23 16:00:45 2024 GMT
            Not After : Jun 24 16:00:45 2024 GMT
        Subject: CN=61a52e54355de1da220993ffab74f40b19f5b7e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:82:bf:59:af:55:0a:e4:67:49:f3:91:80:
                    26:e1:a9:25:17:79:98:83:ca:d2:22:fa:0a:4e:ac:
                    7f:2d:b2:d1:a3:f8:c0:78:bd:a4:41:d8:0e:68:c5:
                    1e:19:25:45:b6:6d:5c:64:21:bc:a9:db:70:34:bd:
                    28:34:7d:3e:bd:93:74:7b:58:6e:81:48:5a:32:f4:
                    4e:1a:01:ee:03:7a:81:85:85:a7:9b:96:45:99:b1:
                    2b:6c:e7:00:58:d1:88:9e:8e:2e:97:e9:4e:fc:c5:
                    1b:bd:61:ac:80:7f:26:8d:02:57:0e:65:07:27:cf:
                    fd:e2:ec:de:cd:12:99:81:d3:46:c9:75:01:5a:8c:
                    b7:7f:69:03:b2:ac:b3:fe:fe:7b:2c:1e:df:b8:82:
                    6d:69:ed:9a:84:a8:f4:ac:d2:ef:bf:dc:5e:af:81:
                    ed:09:67:68:dc:b2:f1:70:ad:cd:07:eb:65:f3:ba:
                    76:c2:b5:aa:38:c9:0a:ab:8e:8a:c4:81:4a:ae:73:
                    9a:ba:c7:65:dd:2d:21:ec:ea:5f:c6:09:20:0c:3b:
                    c2:22:60:cd:07:28:50:04:70:71:28:c1:54:4a:d0:
                    74:da:aa:3d:d0:68:83:94:e4:02:4b:b0:21:50:af:
                    ef:3c:98:c2:bd:5b:13:8d:86:b0:8b:67:9f:25:60:
                    bd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A5:2E:54:35:5D:E1:DA:22:09:93:FF:AB:74:F4:0B:19:F5:B7:E3
            X509v3 Authority Key Identifier:
                keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4b:fe:a1:76:3e:a1:8f:c0:62:a0:c4:89:11:69:56:4b:9d:
         ff:b3:e5:be:68:0c:a2:96:7e:ac:17:7f:dd:a1:87:bb:b5:ed:
         ad:05:cf:e8:04:5d:d7:2a:cf:0d:1b:32:4a:2e:5d:02:fc:5e:
         dc:40:bc:0d:a7:a5:d3:80:34:01:44:c8:31:14:0e:8d:66:b2:
         b5:c4:68:56:37:c6:dd:44:05:e4:34:ca:c5:d6:5a:47:1b:7e:
         6a:c5:4a:c0:9d:78:cf:d5:49:ad:4d:72:0b:5d:32:cb:0d:31:
         29:a8:47:a7:f4:b3:07:e7:d6:ed:08:63:ea:ef:0d:1b:fb:07:
         81:97:ff:6e:4f:9b:2d:38:ef:dc:b8:4d:98:0a:7b:f0:e9:bb:
         0e:64:90:d7:4a:ba:68:46:3d:2c:6d:c3:9e:6a:78:b6:3c:a1:
         fe:9f:9e:5e:3a:a0:79:04:43:6b:e5:74:4e:12:75:2d:e3:f1:
         72:4f:4f:bb:5b:e6:2b:05:f3:f6:64:ea:c3:ef:3b:ad:cc:d5:
         26:a5:b9:89:da:fe:cc:70:0c:55:90:98:be:6d:1d:3c:17:7c:
         fe:8e:d9:f0:e6:65:d2:61:5e:a9:dd:20:e1:82:0f:3f:a3:a4:
         73:c8:fb:e1:d1:4b:03:92:7e:d4:c5:1d:75:0d:9e:d9:cb:cf:
         95:7f:e5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:56:12 2024 by rpki-client on console-ams.rpki-client.org