Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
File:                     zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft (raw, json)
Hash identifier:          Pe8Nkgdnr0kEBOsJydPnYF8AQ+nlQGwz0xdsEcgCL8Q=
Subject key identifier:   E2:DC:4A:E2:97:23:44:9B:1A:13:A7:7B:0B:46:37:44:98:06:18:10
Authority key identifier: CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84
Certificate issuer:       /CN=cc8df88054060df685bba9739123e8342d479e84
Certificate serial:       01901EC6D701E4E5C859E3152440E12C6ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
Manifest number:          115F
Signing time:             Sun 16 Jun 2024 02:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:05 +0000
Files and hashes:         1: Zj80c-jabmgqBmuwT7BHYAk2ltw.roa (hash: nm3tNI/DFrq35tjcjDojC7wNLZ9/058qVzzK6kahNEM=)
                          2: zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl (hash: vtZ7BC0CwD43MRkMuFS2u0rPe10vKK3o+NW2Li/rLKs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:d7:01:e4:e5:c8:59:e3:15:24:40:e1:2c:6a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc8df88054060df685bba9739123e8342d479e84
        Validity
            Not Before: Jun 16 02:01:05 2024 GMT
            Not After : Jun 17 02:01:05 2024 GMT
        Subject: CN=e2dc4ae29723449b1a13a77b0b46374498061810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:d8:84:f7:0e:58:21:39:c3:6f:46:d2:2e:
                    ea:ba:a7:e9:b5:05:7c:53:7e:1c:52:79:85:b2:6d:
                    5f:82:ed:62:e4:19:8f:ea:60:cb:01:6a:d0:68:c2:
                    b2:60:51:aa:15:d1:d8:69:87:67:44:f3:f6:44:6f:
                    be:91:65:bf:73:b9:ca:7a:29:54:4c:52:0f:81:b3:
                    a8:13:ca:29:e3:ae:bd:bd:88:64:eb:1d:f6:ce:7a:
                    b8:fe:e9:05:6e:84:3e:55:f4:19:24:90:f5:80:50:
                    10:e5:8d:8a:02:8d:27:70:af:42:e2:ef:d9:6c:62:
                    e2:d3:b6:73:d2:1d:50:aa:cd:22:bd:6a:31:a8:f9:
                    d0:78:24:97:81:92:85:b2:df:ff:5e:4a:b6:6f:b6:
                    9b:ba:ab:ea:8a:bb:1a:21:7f:57:ee:ed:87:97:4f:
                    e9:91:2d:b0:5d:68:3a:4c:6b:90:14:ef:1b:e0:a1:
                    0c:52:f7:17:49:aa:cf:d0:2d:f2:df:c5:38:f1:81:
                    db:dd:f9:9a:f4:91:6b:e9:6f:fc:e5:74:da:42:b1:
                    86:9f:dd:d4:4d:ed:b4:bc:59:1d:fe:84:aa:61:14:
                    a6:fc:1c:38:64:67:44:a4:f9:05:05:3b:ce:9c:f3:
                    18:51:96:d4:e3:d1:eb:ad:e1:f4:b6:b0:13:05:52:
                    5f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DC:4A:E2:97:23:44:9B:1A:13:A7:7B:0B:46:37:44:98:06:18:10
            X509v3 Authority Key Identifier:
                keyid:CC:8D:F8:80:54:06:0D:F6:85:BB:A9:73:91:23:E8:34:2D:47:9E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zI34gFQGDfaFu6lzkSPoNC1HnoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db8d38-077f-4d77-9383-dc781cc2a258/1/zI34gFQGDfaFu6lzkSPoNC1HnoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:90:58:ca:e2:85:c2:56:f2:3a:95:f1:68:d2:fd:fb:17:0f:
         57:63:e3:bc:e2:da:2b:53:81:b1:65:10:6b:49:97:af:68:16:
         5e:46:50:3d:3a:6c:8b:a8:39:4c:f9:89:f3:f4:4d:d2:90:08:
         23:21:d9:a2:d7:df:6e:61:90:d9:aa:ee:03:9d:be:d2:73:7c:
         6c:2f:23:ab:2b:9f:70:ed:c4:52:40:fd:8c:cf:d1:06:71:e6:
         6a:38:d5:6d:2a:6e:13:69:a3:cc:aa:65:e0:2b:4d:bb:99:71:
         cc:11:01:2a:1f:98:d7:48:60:e8:7c:bd:88:14:46:f2:a7:bc:
         ed:4e:04:ae:34:39:5f:86:3d:7a:8b:4c:6f:4e:9b:61:b8:bc:
         94:86:58:4f:63:85:77:c1:36:e1:4f:ff:25:4a:b3:80:f2:6d:
         3c:ea:88:1b:80:66:01:c4:61:71:8e:dd:24:90:f8:3d:7e:e3:
         b4:75:ac:7b:b8:98:27:e2:2b:df:38:38:bb:7b:6d:c1:37:3b:
         6b:a6:37:90:aa:21:ce:45:28:a0:e4:2a:08:47:1f:ef:ef:5d:
         36:39:48:03:13:89:d2:1d:e6:6a:b6:da:a1:9d:47:b2:77:f5:
         29:eb:58:6b:77:5b:07:86:2a:ff:ec:d0:33:e2:16:08:ec:c9:
         80:1b:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:12:32 2024 by rpki-client on console-fra.rpki-client.org