Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
File:                     mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json)
Hash identifier:          rihowVNGspEfFkbMx0/hGuc2EgUAHv9yEzLgg0qmBxI=
Subject key identifier:   25:D6:5D:A9:7F:2D:DA:E5:F5:80:93:56:6B:66:D0:25:C3:03:41:2C
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Certificate issuer:       /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial:       01901D469650BAC91B1789C5B57566E2654B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
Manifest number:          0EFC
Signing time:             Sat 15 Jun 2024 19:01:23 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:23 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:23 +0000
Files and hashes:         1: bc2pyK5I9eW8K2_jeRfJEQ3q0Jw.roa (hash: akC2dAQKaNteLESO3JC/MqI7terDk9uiPvifN8ZuI+4=)
                          2: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: x1MlI8QQqUUsr10qBRlBFlssEJ777XG6r7HDyAN8+j4=)
                          3: nl8JNrxUnzEGMdNS2WVtOgO2Ru0.roa (hash: FAOHLMEk9dcz04oGFUCUq0eKxAD6ftAhzdG1dbge1w0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:96:50:ba:c9:1b:17:89:c5:b5:75:66:e2:65:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
        Validity
            Not Before: Jun 15 19:01:23 2024 GMT
            Not After : Jun 16 19:01:23 2024 GMT
        Subject: CN=25d65da97f2ddae5f58093566b66d025c303412c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:9a:51:ce:f7:60:d4:9e:64:67:13:b0:85:
                    19:f1:2b:4d:51:29:2c:07:98:a7:32:eb:ea:f7:43:
                    db:10:42:9a:89:91:4e:62:a1:ed:e0:3c:81:ab:20:
                    82:eb:e0:52:13:db:a7:6f:1a:28:99:b2:e4:a3:c0:
                    80:8b:42:1e:6c:4d:a7:71:75:1e:a4:98:4e:2f:51:
                    47:7e:2a:bd:fe:4c:06:3a:e6:01:00:61:3d:57:4b:
                    79:39:d5:36:33:89:61:22:94:74:a5:28:7c:cd:67:
                    50:9e:f0:af:b9:02:d4:63:31:2e:18:10:4b:d6:50:
                    b4:82:46:83:b2:cb:4e:0a:46:ab:54:45:97:21:c5:
                    fe:2c:8a:5a:ad:19:e5:45:f6:1a:97:ce:88:d2:17:
                    bd:7d:72:88:6f:14:76:60:6c:41:a5:e6:6a:09:55:
                    b1:22:71:a7:9d:25:80:56:f0:3d:af:88:37:e3:78:
                    8e:28:f6:f6:a3:85:0c:a2:85:41:48:8d:06:7d:c4:
                    f5:01:3b:eb:9e:11:7c:d4:50:4d:3d:bb:8a:e0:93:
                    90:0b:9a:70:8b:04:fa:2a:e4:99:32:70:ea:63:93:
                    41:fd:25:00:d7:e6:3c:f2:26:53:51:26:4b:2e:f0:
                    50:a3:7b:0b:96:b2:0b:dd:bb:9a:f5:17:ae:14:59:
                    01:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D6:5D:A9:7F:2D:DA:E5:F5:80:93:56:6B:66:D0:25:C3:03:41:2C
            X509v3 Authority Key Identifier:
                keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:72:d7:22:e3:83:8a:12:0c:d6:0f:f5:7e:a5:92:f9:6c:43:
         62:99:58:f2:f5:9c:4f:a6:6e:d9:79:5b:b1:bb:f3:40:c9:ef:
         34:c6:6b:fc:dd:1d:ba:98:0e:fb:14:23:ed:3c:4d:43:9f:eb:
         53:7a:27:4e:4c:bb:5d:d4:81:6d:5d:be:eb:b5:a4:32:33:c3:
         21:5f:2c:48:85:4f:ae:19:07:b9:4f:71:ea:35:b8:a2:09:fe:
         15:aa:64:9d:a5:68:f9:b9:fc:d0:38:e0:2d:47:d3:94:c9:a2:
         4b:82:92:db:90:6b:3e:4b:8e:c4:e7:69:4e:06:b6:f2:2d:50:
         fb:f2:18:01:27:3f:eb:82:26:0a:ce:a1:93:7a:f3:d7:0d:b5:
         f8:2c:d9:62:8f:9b:93:69:42:0b:21:65:f2:1f:26:0f:48:89:
         4f:9d:46:e9:a6:16:59:d3:01:10:56:e6:99:85:f6:1e:2c:62:
         3c:b1:07:fe:90:dc:24:6c:23:d9:6c:f4:a0:4b:0f:d3:94:54:
         b5:74:71:e0:16:0b:a6:44:aa:0c:0b:37:56:53:44:13:f7:2e:
         c8:6d:9f:ce:89:d4:55:59:c8:56:29:39:33:0c:91:5b:42:db:
         a4:ea:ac:dc:08:b7:28:cc:5c:4a:5c:64:16:60:d0:fb:39:1b:
         7e:7e:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:59:42 2024 by rpki-client on console-fra.rpki-client.org