Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File:                     Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier:          1hDb5pmrwFflFEFErli2fs+cFIiua6R5fVAhVJHS8Dk=
Subject key identifier:   09:4C:ED:76:94:E9:88:59:77:7A:65:B7:D0:BD:E2:C5:88:3A:18:DD
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer:       /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial:       01901D45F3262471B365432279C80782B952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number:          BD
Signing time:             Sat 15 Jun 2024 19:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:41 +0000
Files and hashes:         1: 5Bt661qfR5rb9KKZqk97lUGYZAw.roa (hash: Gwecprg6ZviqbhmQ/rX9NFsll8ganQl3FvKt2m/ueWY=)
                          2: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: 2mbkHY7aaynj13c8kFf43vs/CYtVYs8WjQu3r82le2E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:f3:26:24:71:b3:65:43:22:79:c8:07:82:b9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
        Validity
            Not Before: Jun 15 19:00:41 2024 GMT
            Not After : Jun 16 19:00:41 2024 GMT
        Subject: CN=094ced7694e98859777a65b7d0bde2c5883a18dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4e:5a:a0:98:23:4d:ed:0e:94:f0:23:5f:34:
                    0d:e8:1e:13:ca:f1:72:7d:ea:5f:66:bf:0c:ba:62:
                    69:4e:14:a6:78:dc:8d:92:45:31:75:98:c9:ad:04:
                    ee:9e:67:fc:a8:8b:70:6e:6c:e8:cf:3b:c2:cd:21:
                    de:94:a1:ee:45:e8:46:e6:2a:91:9d:4e:a0:52:85:
                    6a:7e:3d:68:10:77:af:e2:54:de:0d:2c:da:8a:0f:
                    92:f3:ad:2a:9a:48:67:36:c8:dc:ae:79:cf:91:18:
                    41:c3:75:8a:fb:5c:39:cb:8d:44:4d:c2:22:cb:25:
                    b7:66:7d:81:a0:db:7c:77:65:90:7f:ce:71:46:8e:
                    c3:a7:b5:20:fa:0e:92:52:e3:9b:75:11:5f:af:23:
                    a1:9f:87:f8:ad:42:d6:a3:e4:42:85:ab:2c:1a:18:
                    24:de:31:a9:d3:17:55:c3:ae:3a:0a:80:15:03:3f:
                    36:c2:b8:05:10:c1:85:00:1f:5e:19:55:55:41:34:
                    53:bf:db:5c:b2:e4:45:75:94:1b:ab:7b:ae:19:e4:
                    e2:85:46:d6:58:0c:99:65:77:b9:44:1b:5f:72:d7:
                    63:93:cc:08:67:dc:62:56:d0:43:d3:b5:10:08:cd:
                    73:69:b3:49:7a:49:f0:a2:03:e1:cd:c4:8c:c3:55:
                    da:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4C:ED:76:94:E9:88:59:77:7A:65:B7:D0:BD:E2:C5:88:3A:18:DD
            X509v3 Authority Key Identifier:
                keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:dc:8f:4f:88:84:75:87:c3:64:15:3e:12:e2:76:ea:05:1f:
         ea:a4:0f:4a:34:a1:8f:52:be:ea:bd:ea:7b:fe:3b:e3:bf:ff:
         65:ee:9f:ea:be:d8:e5:18:fe:c8:4d:e7:fe:fb:30:13:d6:31:
         6a:c7:48:64:94:7a:7d:9f:87:ca:66:c2:8b:36:b6:5f:8e:e1:
         b1:de:ab:39:36:b0:fc:1a:32:25:a1:a5:0a:6b:a5:41:c6:c2:
         05:c5:55:b9:6b:cf:8c:3f:81:80:63:04:f3:a3:70:4c:35:47:
         f2:75:a6:f0:d9:54:aa:f6:5c:71:6e:f3:a4:9d:93:92:15:e0:
         71:a8:cd:f2:81:78:3b:cb:ce:be:11:9b:f7:e8:fb:fa:a4:72:
         e3:33:b5:33:a6:c3:d9:f9:83:d2:e6:76:66:b8:03:15:73:ed:
         59:2d:69:ec:93:48:2b:f7:01:8d:77:81:e8:ba:40:1c:df:23:
         17:c9:72:10:38:cd:0b:52:ed:aa:ce:fc:b8:83:b2:6b:03:00:
         67:2e:0f:f8:21:f9:00:ad:2c:c7:df:50:23:1a:16:1b:e5:c1:
         8f:8b:02:95:57:ca:02:6e:aa:dd:54:72:5f:d6:cb:a9:f4:f2:
         70:62:d5:69:ee:59:a1:80:24:13:ce:09:fa:92:88:92:1d:2b:
         ce:e1:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:54:54 2024 by rpki-client on console-ams.rpki-client.org