Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File:                     ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier:          M4ZY+xVZNPrNQe4BmmD7MMGSnouFCqWDmh/9OO/qGZU=
Subject key identifier:   B4:99:1D:64:0C:16:D8:4C:07:27:89:D2:AB:82:CE:31:84:9C:CA:94
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer:       /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial:       019072E5C7B76B62113E81983A4C0FDE707D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number:          0A0E
Signing time:             Tue 02 Jul 2024 10:02:59 +0000
Manifest this update:     Tue 02 Jul 2024 10:02:59 +0000
Manifest next update:     Wed 03 Jul 2024 10:02:59 +0000
Files and hashes:         1: 2rnZDzU_vrcAGZDGm0vSQkxiizk.roa (hash: HbNnS8Y/e1XkHVn+Q3cbTutIRW+9Bx9Dy19ix8rIo50=)
                          2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: IvYp8Kw/yAbgEJDL9RvrMocrfHNxVHdIsF02yaFFsLs=)
                          3: fF7gjJfryX9t3WhI9PVv9fWB1gs.roa (hash: UXAsnxOMzJR3B3NvYNhS7BvXDghj8ctTIq9g8OOOYwk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:e5:c7:b7:6b:62:11:3e:81:98:3a:4c:0f:de:70:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
        Validity
            Not Before: Jul  2 10:02:59 2024 GMT
            Not After : Jul  3 10:02:59 2024 GMT
        Subject: CN=b4991d640c16d84c072789d2ab82ce31849cca94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:8b:51:ca:d6:61:88:7e:e2:3b:8b:45:b3:
                    fd:54:ff:c1:93:bc:3e:83:ed:6f:6b:37:1c:60:75:
                    4e:cd:9e:80:0d:27:ff:2b:94:a2:fb:f6:a7:d1:7d:
                    bc:aa:28:f0:79:28:63:6a:74:25:0e:b7:12:85:65:
                    62:6a:fa:eb:09:41:1d:50:40:c9:00:a6:18:e0:bb:
                    65:ed:23:29:6d:75:ff:4b:f9:93:c0:be:96:26:1f:
                    19:d6:98:12:c1:17:20:ec:b0:57:bf:8d:63:d3:25:
                    43:8c:f6:9a:ed:ac:1d:2e:1e:78:74:a6:cc:1c:52:
                    22:a8:c1:42:17:06:69:7d:33:66:36:6b:8f:01:86:
                    6d:7c:92:10:48:2b:c6:9c:cc:bf:bd:e8:8d:65:8b:
                    1e:32:b6:ac:ad:ec:2e:c2:6c:ff:17:9e:e0:3b:8d:
                    c1:8a:8f:ec:a7:53:79:45:89:a9:fa:15:f1:27:76:
                    47:0d:8c:c9:f0:c6:d4:c6:77:1c:a4:2e:9f:b4:79:
                    01:93:af:0b:83:e8:30:67:23:b2:a6:f9:87:f9:7e:
                    9f:1a:cb:b9:73:f3:c5:58:be:68:fa:31:44:ce:29:
                    9e:6e:33:12:ac:cf:0c:5a:b3:b6:b2:6f:ea:cc:55:
                    e2:a6:46:67:cd:c8:4a:7d:6c:25:76:6e:6c:db:ec:
                    ca:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:99:1D:64:0C:16:D8:4C:07:27:89:D2:AB:82:CE:31:84:9C:CA:94
            X509v3 Authority Key Identifier:
                keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:58:b1:fd:63:02:71:7b:6e:f8:53:ac:de:34:e0:d5:9a:e4:
         fc:97:5a:e5:49:9b:8d:eb:8f:5d:05:36:ca:17:79:1a:f5:69:
         bd:aa:44:81:8a:5d:46:85:b1:08:83:6c:a0:9e:4b:68:bc:16:
         b4:12:33:ab:24:cf:5c:9a:8b:10:c8:2d:f7:d4:bb:73:f3:7a:
         90:e0:de:25:ec:e3:4d:30:50:7f:e7:31:04:1b:80:5b:b8:dc:
         1b:7a:9e:68:4f:8e:bb:a3:53:6a:00:8e:aa:8a:59:1b:2f:43:
         64:00:b9:08:e9:1f:f8:5e:65:b3:98:3a:47:58:e9:bc:cc:56:
         da:fa:a7:cd:7b:84:7b:d1:ab:bc:71:fe:51:73:54:c5:cd:4d:
         e0:ea:b4:fb:26:77:e2:0e:02:ca:81:3e:77:58:19:0b:cc:21:
         5b:a9:86:a7:a2:cd:b6:24:4f:74:d5:a3:6d:2d:5c:2a:93:5c:
         66:e8:30:72:fc:18:20:55:ba:ed:28:59:a4:39:7c:4d:1e:5e:
         9f:5a:1d:87:7e:09:1d:cd:fa:8b:ae:4c:f8:ba:78:40:24:8a:
         6e:a6:cc:73:ea:e4:5b:75:91:8e:82:8f:42:1f:bb:7b:bd:17:
         1a:cf:62:2d:5e:a5:9d:22:a1:5e:2f:6e:74:3b:0b:c7:e1:cd:
         8a:68:74:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:37:43 2024 by rpki-client on console-ams.rpki-client.org