Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
File:                     ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json)
Hash identifier:          EJ66daDFJAw/tPGErlmYZ0Z/ZztRUnfwlmm6KLr8Yr8=
Subject key identifier:   3C:12:15:73:29:BA:50:71:D8:32:B3:3F:A3:77:73:61:E5:2E:C4:2F
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Certificate issuer:       /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial:       01901CD8A11839362F514BBB5B0A45620D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
Manifest number:          11DE
Signing time:             Sat 15 Jun 2024 17:01:17 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:17 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:17 +0000
Files and hashes:         1: 1b1sfeuUrI6kHZZcru0rVUPN6xs.roa (hash: 5DXVyGF9+ODXXosS3KiNDVTiRt7dAPB8oE2s8NuxB14=)
                          2: 3huFFsbphldObsDJWECB2zJOaPo.roa (hash: R2WXSrRbSzKlIoFxTRfVS07hf5RvC1wJrGu0kv/Yw6E=)
                          3: 7AUCOp8doWAnFtkF84ohyXaw_V8.roa (hash: 1Aa9w+YLf7szXydvZ6yQdvFkVOWBB1ppD9PDcmJ0bOM=)
                          4: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: er0Xvh4cjDcWRs0NJb7XKODgxRK56GucZ76sw2EwKwI=)
                          5: RYIPtWVXSSza31HEB8r_uZmgeTI.roa (hash: 42kcuynvlcrgmsVZFXRCGdLIO5CNKUaxgM8+2Wb840c=)
                          6: a4YsGT-AwRqEZqUc_gFJdMQqb1M.roa (hash: U3agAORIA0H2LAsf5q7/o3vqT0lHAYKjazdYqGzW2pY=)
                          7: aMcI3IXm06cgbR_KJnqGt28zZ-8.roa (hash: chb/OvRT2T3jcGSvoKb8dvp5jFoWeKhTTEO6gGR8PXU=)
                          8: ljErZIQ9clzEzn49eM6c8voNk-s.roa (hash: 9ntGoDtDwvb/cekg1nOWuu+4MJOEpG0mVAnyAT7jlco=)
                          9: nevZ6euM76WMVvW6gwVEf5P2BW4.roa (hash: SieEc8r9ZNxd7n2oeA+DFz5OR5VkyV28urJmNXP7muU=)
                          10: sfQZPpGpNeYVWXlyQqqfFO1t7t0.roa (hash: ri3ZVcjnGr/qNykNmEWEMclDO7bE40245vOX+J8H8QE=)
                          11: wMsOz3AXQOjBsWoWLodPOyFasfI.roa (hash: WeOKxjC6hdXry8MmMzVaE2aKLRmjlNMw2ySRYlYGpXk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:a1:18:39:36:2f:51:4b:bb:5b:0a:45:62:0d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
        Validity
            Not Before: Jun 15 17:01:17 2024 GMT
            Not After : Jun 16 17:01:17 2024 GMT
        Subject: CN=3c12157329ba5071d832b33fa3777361e52ec42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:65:27:03:d5:9c:36:b4:94:83:e1:5c:ab:95:
                    2e:cf:57:29:b4:83:fe:89:2f:08:3a:44:26:af:bf:
                    8b:7a:66:e0:ef:99:26:78:8b:f6:73:aa:15:c1:6a:
                    03:1c:62:93:cd:49:5f:b2:41:7a:6a:fd:70:66:0f:
                    92:01:71:94:65:0f:5c:cb:72:da:64:c3:bf:d0:84:
                    7e:d2:fb:0f:8a:c3:cb:a2:f6:62:86:c7:79:84:9b:
                    8d:b1:2b:33:a1:d9:fd:fd:7a:f3:68:0f:64:3f:00:
                    50:69:3b:fa:a1:90:68:b7:5a:47:d6:f2:22:50:ef:
                    08:f1:bc:8e:ef:ff:13:4a:fb:18:5c:4b:ec:6a:d3:
                    d3:a9:49:6e:ae:50:ce:f3:7c:b6:01:60:6c:d0:a5:
                    a6:f2:8f:de:82:15:ae:a3:aa:df:25:8f:f4:d4:7a:
                    d5:28:dc:57:25:cf:a9:f2:6f:8e:1b:80:e9:5d:61:
                    c9:34:86:11:41:3f:8f:06:fa:ba:7e:79:42:69:3c:
                    64:d7:71:0d:7c:f6:b3:12:0d:0d:98:ee:8e:b3:df:
                    ac:ac:1f:66:b5:03:63:27:9d:3f:33:16:da:73:b6:
                    60:0a:ac:b9:20:30:91:e1:b1:14:dd:a2:50:24:9d:
                    12:2b:03:5f:0b:2b:fb:97:13:fb:86:82:11:bd:f1:
                    15:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:12:15:73:29:BA:50:71:D8:32:B3:3F:A3:77:73:61:E5:2E:C4:2F
            X509v3 Authority Key Identifier:
                keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c9:13:42:71:94:f5:a2:cd:6e:a3:d7:8d:75:f5:33:55:70:
         90:ae:f0:f0:79:2d:41:5c:82:fc:11:46:e9:a4:43:3d:61:6f:
         69:9b:d6:79:6f:33:11:0a:54:78:3d:e3:11:f6:31:a0:30:a4:
         fa:7c:65:91:c1:c5:fa:70:ff:16:29:ee:0c:55:bc:60:36:9e:
         04:e3:0d:88:67:50:c2:e1:b3:21:7a:81:9d:4a:2a:1f:d9:79:
         17:98:9a:d5:ab:df:d4:6c:06:1a:ad:09:cd:8a:e4:0f:6f:61:
         52:83:e4:93:ee:84:ae:8d:7e:a1:08:0c:22:af:fa:10:d8:38:
         41:af:b2:24:e4:88:3d:89:4d:cf:ae:86:c1:20:91:91:23:64:
         cb:c6:a7:56:68:25:cc:1c:e2:eb:f9:ad:56:2b:39:b1:88:9f:
         5f:44:88:ee:96:83:52:7e:9a:bf:2c:30:67:e3:d3:48:4f:fd:
         52:ef:37:59:ee:22:49:6d:7e:4c:b4:51:d7:e4:b0:4f:2f:bd:
         f0:89:b2:7d:bf:10:aa:97:54:32:20:85:ae:fe:a7:83:41:6e:
         f3:13:56:ed:b0:fd:2a:f3:be:7c:b1:f1:34:a0:ca:f0:cd:ee:
         9f:6c:fe:16:74:f9:ed:28:3f:94:84:59:a8:50:77:98:b7:24:
         29:b2:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:26:38 2024 by rpki-client on console-ams.rpki-client.org