Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
File:                     fQIT4-fr5hcKNgCo465k7ZYsDjY.mft (raw, json)
Hash identifier:          B4W1JuG4eEcqWDUyaz7iccjZn0qxXnxX73R+pcpecqQ=
Subject key identifier:   BA:4C:99:D2:54:87:5D:E8:8A:E0:E0:4B:78:3D:A5:B4:C3:88:A6:C3
Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36
Certificate issuer:       /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
Certificate serial:       01901DEC3433AA79F0DCDC26972EB15E3C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 22:02:17 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:17 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:17 +0000
Files and hashes:         1: 7ju5VKN0E0FiqdP-LDUOY5M__8w.roa (hash: rBU4Nu1gjgldS0IJ8cdxt+V/WJStRioaRDp1CcQs/v8=)
                          2: bCECztefDqNckRMKhu3EvGKWy-k.roa (hash: PMwWRMNE27K1r5bOq454TeZQFBvA1NF0FT3ceqtT37w=)
                          3: bZc8SS4gZDfbDlrMyhOU6_swaLI.roa (hash: RA+bYQzbHDvP8AF1PFL4CRjQRmxqFazVFlPKcZW6IdI=)
                          4: cNgiZM2H5Cgl-Jiu4wfcycgt_1w.roa (hash: c9g7N6SRffLSOypXRFWno44C8IsxXr95VTYyJwQWRXE=)
                          5: fQIT4-fr5hcKNgCo465k7ZYsDjY.crl (hash: dgP6YNulNX8aA1DByPpfHsMku4mv9FdmnVwswCqmd2M=)
                          6: sVVp4U7lEL0JZ1VPK_IGm_d7lqw.roa (hash: xuxZcqbHsCUdp4Zohe0GQvoQzNkOgfJilKn6l3EmI8Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:34:33:aa:79:f0:dc:dc:26:97:2e:b1:5e:3c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36
        Validity
            Not Before: Jun 15 22:02:17 2024 GMT
            Not After : Jun 16 22:02:17 2024 GMT
        Subject: CN=ba4c99d254875de88ae0e04b783da5b4c388a6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:4d:c3:e6:72:42:bf:fa:b1:7c:da:e1:78:
                    4b:af:8e:a4:b5:be:1e:78:a9:8a:2a:a8:e5:49:ba:
                    8f:72:bb:d7:99:4d:f6:d4:14:0d:e2:88:3e:82:c5:
                    7d:4a:b3:bd:5e:0f:19:e6:3f:fd:46:00:85:97:45:
                    b9:41:a6:1f:6b:7b:5c:ab:5f:16:ea:bf:b0:2d:c5:
                    9f:a6:ef:b5:46:4d:d6:12:7a:e6:d1:0d:48:49:9b:
                    94:ba:01:31:e5:5f:72:2c:1e:0e:e2:14:ff:86:2f:
                    bd:27:82:d5:74:35:0e:6d:36:2c:67:08:18:94:0a:
                    a6:26:85:33:f4:58:90:68:34:8a:b1:47:a3:3c:16:
                    f3:88:c8:52:79:2a:2b:45:94:5e:5f:55:e9:1f:5c:
                    5c:d2:45:d0:e5:ca:8b:36:90:62:8f:b2:fc:ab:34:
                    db:96:3d:94:67:f8:10:d6:89:59:69:39:90:f9:64:
                    b2:19:3a:3c:08:a2:6b:cf:55:99:6b:8a:2d:53:28:
                    73:fe:e1:19:4b:36:5c:71:c9:6e:c9:b7:63:94:17:
                    59:05:0f:9a:e1:c3:ba:f8:81:4c:1f:28:f8:54:1e:
                    4e:2f:bd:ab:67:c5:b1:a8:18:97:ed:0f:c7:2c:e4:
                    8f:0f:ad:2c:12:0e:8d:4a:a7:70:ff:ec:c3:2c:95:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4C:99:D2:54:87:5D:E8:8A:E0:E0:4B:78:3D:A5:B4:C3:88:A6:C3
            X509v3 Authority Key Identifier:
                keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2e:b4:f4:f8:0d:e6:1b:ea:90:ba:82:b1:fa:70:dd:57:bf:
         39:8f:09:41:aa:86:b1:df:49:d6:d6:dc:26:16:b4:95:0d:b0:
         41:d3:fe:0e:37:fd:42:e4:5f:88:70:68:eb:c7:9e:69:f3:f7:
         12:a2:91:ed:ec:54:71:eb:d7:c2:2f:01:11:0d:31:3b:82:25:
         d0:fa:91:e5:7d:05:ce:aa:15:72:23:e1:62:d9:07:22:82:85:
         be:e3:4a:7a:70:cc:74:29:5f:39:1d:72:f9:0c:e8:d2:d6:1a:
         12:c3:65:0a:76:fc:e0:1d:86:8e:dc:77:58:68:02:c2:7a:f5:
         c2:2e:73:d9:7e:2c:35:48:44:f4:b1:5c:08:f9:21:13:13:b4:
         8e:18:e3:7e:b6:1d:f9:91:cb:82:61:bb:58:1c:7c:7d:be:1a:
         fa:8f:14:e1:47:f1:8f:9a:fa:52:a0:a5:65:ca:8f:24:68:79:
         a9:ea:61:15:af:16:d9:91:8c:5f:1b:e3:98:27:50:79:25:e2:
         58:9f:f4:5c:95:04:7a:f5:bd:8f:6b:94:e1:5b:52:20:c6:72:
         5c:31:d3:88:9f:0b:a8:1e:6e:b9:9f:7a:bd:ed:19:d9:a1:76:
         4a:ee:ae:f7:8e:14:a9:a4:7b:b0:d0:f2:47:96:31:17:39:2e:
         ce:6d:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:42:28 2024 by rpki-client on console-ams.rpki-client.org