Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File:                     8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier:          OZHLYFSiYzmv5qFdNEAqIk7N+SSHPyrGSzf34a+0kG8=
Subject key identifier:   CA:3D:01:EF:0C:21:FC:EF:05:2E:07:69:DA:0E:52:3E:1A:8E:07:88
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer:       /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial:       01901CD868F8C0A5671ED6D7C9E0DD35D209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 17:01:02 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:02 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:02 +0000
Files and hashes:         1: 0sckWjhwp_hjGVrUPt27XERmGjI.roa (hash: osnVg78hVWjgzdGE1gZPYukh5r6I4N2Nn6icOIX02/U=)
                          2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: O4hIbT859S06E0InOecHHfxt5A0TfQrY1VXVYoFlUlY=)
                          3: msuImJO_o4oR1O6uUQOxkSVzufw.roa (hash: bSWP60/C7CScbo4rxaKvStncSJiR2QfZOjdD6gVT8tg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:68:f8:c0:a5:67:1e:d6:d7:c9:e0:dd:35:d2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
        Validity
            Not Before: Jun 15 17:01:02 2024 GMT
            Not After : Jun 16 17:01:02 2024 GMT
        Subject: CN=ca3d01ef0c21fcef052e0769da0e523e1a8e0788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4d:ea:9c:6d:ce:91:6c:6e:d0:a0:37:b0:8e:
                    be:c6:41:90:9a:e1:ae:a8:23:24:ec:16:f8:72:7c:
                    7a:e6:1b:75:4a:da:19:ca:b4:52:38:22:3f:32:43:
                    02:57:ce:9a:19:df:16:63:d3:46:02:11:4b:71:41:
                    93:f7:ba:d3:99:27:f1:05:41:a3:7f:ed:06:2d:0c:
                    a8:01:e0:91:92:73:76:50:eb:a1:37:33:3f:bc:3e:
                    82:87:fc:c3:1e:cc:05:32:1d:67:7f:c0:e0:9c:3a:
                    ab:68:a1:50:87:6f:b8:d5:38:34:7c:3e:ee:af:fd:
                    e7:91:82:76:ce:7d:e5:0b:36:ae:26:55:09:dd:af:
                    38:e1:cf:96:fb:de:41:ed:f0:4f:43:34:55:60:30:
                    83:af:c4:dc:62:fc:99:4b:cf:bb:e0:b1:f3:2b:27:
                    77:4e:a8:2d:3b:ee:c1:2c:b5:06:f5:b7:6f:30:4d:
                    6a:67:51:74:17:fe:c1:9a:3a:e1:62:e1:c2:d5:62:
                    6a:e7:83:d5:0f:9d:08:22:1f:14:b0:ec:4f:07:bc:
                    6d:23:d7:52:80:10:e6:70:f4:44:2e:82:c2:1d:ec:
                    43:0d:46:b0:9e:37:85:2b:f4:c0:05:24:e7:4c:b2:
                    7a:fd:6a:41:62:f0:61:f1:ed:e7:58:2b:62:08:c0:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3D:01:EF:0C:21:FC:EF:05:2E:07:69:DA:0E:52:3E:1A:8E:07:88
            X509v3 Authority Key Identifier:
                keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:73:5c:71:cb:76:32:90:54:17:9d:33:bf:eb:38:da:81:c3:
         1a:e4:8e:1a:a5:cf:57:db:48:61:b2:38:a1:13:a2:e3:19:f6:
         78:58:5c:4f:1f:bb:fd:25:13:0c:65:19:a6:d2:ad:a1:8a:dc:
         57:c0:92:3d:35:f7:72:5d:a3:56:cf:6b:fc:9e:1c:34:c6:71:
         d3:8c:68:ff:b2:4f:67:47:c7:50:e8:32:cf:23:64:42:b5:6b:
         3f:e2:0f:8f:90:ab:bd:48:17:b8:df:b9:d5:d0:3d:8a:4f:84:
         a7:bb:e4:71:a3:b3:8f:75:d7:56:80:e1:9b:8d:ce:24:f1:c4:
         45:f0:e0:03:1f:15:6a:67:b1:04:ff:50:2c:3c:52:2a:49:63:
         57:80:03:6b:83:4b:c3:b8:9b:96:d9:10:dd:46:2e:4c:f6:64:
         7e:90:b8:7d:63:9e:45:fc:00:cf:88:b3:84:0c:d7:90:e7:e4:
         bf:ab:46:7b:3a:01:97:a8:91:c4:14:ff:47:40:86:9d:a8:85:
         d0:f4:26:f3:a2:07:66:ee:65:93:6f:2e:ef:9f:06:cb:46:c8:
         12:77:d8:d0:36:33:c2:ce:22:c1:30:4f:72:4f:86:30:3c:83:
         3f:8c:97:6f:b8:17:40:10:c3:ea:41:29:fb:21:e6:e3:a2:5f:
         26:4f:8d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:31:35 2024 by rpki-client on console-ams.rpki-client.org