Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
File:                     MsAnS8F_nHXNP8EPi1gloZOCq08.mft (raw, json)
Hash identifier:          ae2jgYL7e5HIWVp09MBRDYjlRv+6nZD43VAZqeMHdZA=
Subject key identifier:   40:C9:82:D7:03:66:D8:19:21:7C:70:C9:B2:93:EB:AC:45:4F:17:94
Authority key identifier: 32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F
Certificate issuer:       /CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
Certificate serial:       01901DEABCB46B0BB4ADBFD95F32E8A9F524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 22:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:41 +0000
Files and hashes:         1: K1u6G52Oo071fcKWRbqDbYSdKYs.roa (hash: YVuRttXvNUekNB/VUm7CL48HDikmhcLikJuYYtlehT8=)
                          2: MsAnS8F_nHXNP8EPi1gloZOCq08.crl (hash: 1uR/zea8TUG4lQDaWiyz3RRGGVjBnXlzVW5MO4Y1OFk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:bc:b4:6b:0b:b4:ad:bf:d9:5f:32:e8:a9:f5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32c0274bc17f9c75cd3fc10f8b5825a19382ab4f
        Validity
            Not Before: Jun 15 22:00:41 2024 GMT
            Not After : Jun 16 22:00:41 2024 GMT
        Subject: CN=40c982d70366d819217c70c9b293ebac454f1794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d8:53:3c:36:42:c3:4a:f5:0f:c4:96:e8:a6:
                    8f:4d:2e:d6:27:00:8c:10:27:84:4a:8e:2f:9b:40:
                    ad:53:24:6a:da:b9:48:eb:f7:fb:83:af:1f:99:2e:
                    28:98:a5:e2:13:3b:b8:51:fe:33:ba:d1:f8:e2:60:
                    e1:f2:07:4a:ef:a3:1c:54:75:38:9f:36:cf:e9:00:
                    8d:33:ee:f2:56:a2:95:fb:a0:ae:65:92:4b:cc:60:
                    4e:a2:b3:d1:f1:ec:f9:8c:8b:47:f3:23:09:04:93:
                    20:14:77:dd:db:a7:31:3c:63:50:b6:46:31:4d:5c:
                    26:fb:9d:bf:18:09:2f:d9:75:0e:df:4b:e1:19:24:
                    de:64:d2:db:25:e0:2f:49:e6:3b:53:82:6a:cf:c9:
                    f8:ee:b7:31:ab:d8:45:de:9c:8d:7b:ce:c3:ee:02:
                    27:6c:5a:73:95:32:3d:34:dc:44:98:90:69:ac:10:
                    04:f5:d6:58:a0:cc:04:70:46:2b:31:38:39:22:ef:
                    0f:97:2e:d4:9a:2a:ea:d3:92:68:21:e6:75:e3:d9:
                    2e:71:72:31:77:fe:4b:3a:a9:12:83:5c:d2:73:fa:
                    45:a5:60:5f:25:10:ee:96:24:cd:34:ba:54:35:47:
                    7a:66:a2:b8:20:4e:30:bd:4d:9d:b5:36:40:74:e5:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C9:82:D7:03:66:D8:19:21:7C:70:C9:B2:93:EB:AC:45:4F:17:94
            X509v3 Authority Key Identifier:
                keyid:32:C0:27:4B:C1:7F:9C:75:CD:3F:C1:0F:8B:58:25:A1:93:82:AB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MsAnS8F_nHXNP8EPi1gloZOCq08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/416aaf-8602-4196-b51d-41d087b3828b/1/MsAnS8F_nHXNP8EPi1gloZOCq08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ee:65:25:2b:9d:2d:9b:ae:d4:c9:92:f6:e0:48:52:ef:93:
         0a:45:bf:27:5b:dc:46:83:74:8d:f1:52:5b:e9:33:f2:6e:1d:
         e1:0f:20:38:81:ee:ab:00:65:74:8c:93:c7:37:6c:69:bf:64:
         9a:af:66:92:52:2a:dc:ed:03:df:fe:ef:df:79:21:12:56:e9:
         f8:ef:c2:68:87:3d:9a:78:06:a3:23:d0:e1:d2:1f:db:6a:5e:
         3c:e0:9a:fc:aa:e6:98:c3:51:80:59:bd:b2:37:5e:8e:78:97:
         66:4d:83:f1:8d:b6:04:6b:d0:2c:e0:a0:bb:7e:ed:cc:ee:bf:
         8b:7c:f6:bd:44:04:03:a9:b7:9f:a3:03:8a:5a:09:e9:8e:ad:
         d8:2b:6c:1a:ef:31:f1:77:82:13:7a:8d:43:84:b4:e0:9b:a8:
         c3:8a:07:d1:b8:8a:dd:af:f2:e2:ba:1d:2c:d2:62:d0:df:e8:
         d6:08:81:12:f0:09:72:c1:09:66:dd:9c:bb:3b:56:11:b3:2b:
         c3:d1:4b:a6:e0:33:3d:05:31:8f:c4:06:ba:a0:18:43:1f:78:
         76:92:a1:50:45:7e:f2:f7:d6:69:34:9f:9f:58:10:83:7e:10:
         d2:8f:54:5f:ec:2a:59:f8:13:92:2b:25:18:e2:ee:67:72:d2:
         69:cb:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:42:40 2024 by rpki-client on console-ams.rpki-client.org