Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
File:                     a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json)
Hash identifier:          o84hbSobXckDHyz1TaafOsnwswseLyECKwmz3uVOsSg=
Subject key identifier:   77:21:BC:8A:99:D2:77:84:69:B8:18:5D:B1:AA:5A:E5:AF:33:0B:EA
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Certificate issuer:       /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial:       01901B580BF8BA5C08E287BD3A346DBE9C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 10:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 10:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 10:01:13 +0000
Files and hashes:         1: GiHq7CoyCY1uiDowR3R7tn6d8pc.roa (hash: 5Jux2bagYrHNN0hEGe9B1DgAF4qxlXmIPW8VMBN2CYI=)
                          2: RZP--5G2dEuHEZ6RsOnbSd9cBTk.roa (hash: I1lG/wsgJHXIcv+9byLqARn0vAd7bcyO21gP0xVb230=)
                          3: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: de9jNGahla1FLuOvmzGE1LxDK8RS3+u16qks/oV6uvY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:58:0b:f8:ba:5c:08:e2:87:bd:3a:34:6d:be:9c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
        Validity
            Not Before: Jun 15 10:01:13 2024 GMT
            Not After : Jun 16 10:01:13 2024 GMT
        Subject: CN=7721bc8a99d2778469b8185db1aa5ae5af330bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6d:73:46:c6:f9:64:74:8c:b1:3a:70:ae:2e:
                    f4:24:10:25:d9:e9:fe:3b:f5:f4:6f:05:2c:7f:ac:
                    50:a9:eb:2f:8b:23:37:ba:9a:1f:84:4a:0d:b8:7b:
                    77:e4:fc:47:f1:13:7b:c3:a4:3f:b7:72:07:da:06:
                    6c:9a:91:80:f8:44:b7:b4:82:98:ab:7f:fb:bd:23:
                    23:d6:da:a9:76:ff:d8:55:de:03:19:76:b6:c2:e2:
                    57:a7:15:58:76:94:d0:07:d0:d0:ef:2f:95:3b:d9:
                    1c:35:c5:f3:32:0b:65:a5:3d:d0:5e:e4:46:5e:95:
                    9b:6d:1a:21:fb:c5:27:37:ec:57:7c:7c:e2:f3:69:
                    95:ad:0f:a2:c0:bf:9c:a0:50:1a:10:f7:96:ca:d3:
                    f7:89:55:69:5a:fd:60:1b:b5:4c:eb:da:8e:2e:0e:
                    eb:16:c5:48:96:79:ab:cb:20:b7:9e:7b:4b:04:ce:
                    4c:11:04:c1:64:ba:59:3d:4c:bf:a2:81:88:a1:c7:
                    8c:c3:8e:d4:9a:20:e9:de:a1:43:b9:fb:76:63:b4:
                    10:c1:00:07:cc:27:57:05:2f:81:a4:0b:40:25:b2:
                    82:f9:10:d1:ed:44:5d:a7:c4:f8:e4:e0:df:d1:86:
                    59:26:91:a1:5f:9d:a8:c2:ed:26:8b:1c:ee:e2:62:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:21:BC:8A:99:D2:77:84:69:B8:18:5D:B1:AA:5A:E5:AF:33:0B:EA
            X509v3 Authority Key Identifier:
                keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:84:08:cb:51:39:07:21:3b:e6:f5:b3:32:fb:cf:c0:90:
         b3:4a:95:42:d3:71:d6:f0:62:f5:9f:a2:62:6a:87:6b:07:2b:
         3f:6e:dc:5b:06:82:ab:9e:ef:c1:32:9a:5b:eb:c8:fe:0c:d4:
         06:3f:4c:dd:eb:c6:34:e4:a9:60:b5:d5:3d:af:aa:53:ca:bc:
         f0:81:dc:94:54:b9:28:73:44:12:63:22:5e:f1:75:be:9b:e5:
         83:56:39:4d:60:6a:80:68:79:e0:d9:6f:5d:00:fc:67:cc:7c:
         65:33:7d:b8:f1:1d:48:04:ce:ff:51:dc:9e:a4:13:0a:4f:38:
         20:db:f7:ba:2e:1d:1d:8b:ca:7a:d1:8f:30:03:25:d4:9e:ae:
         a2:f5:bf:45:08:10:09:e7:e7:8d:fa:0c:51:a3:ba:0e:0a:70:
         12:96:d3:62:5d:0d:af:93:5f:b0:e5:e3:0b:f0:6d:c2:ab:9d:
         94:10:7a:2a:05:d9:02:c3:2e:b2:fe:de:24:68:36:3e:2b:e4:
         5a:fa:b1:74:a5:3d:80:cc:85:8b:cd:03:de:5e:2e:90:28:b9:
         b4:de:0b:4e:bc:74:1b:86:cb:1e:ba:65:e0:87:cc:06:73:85:
         01:f7:2c:30:33:63:a0:4e:d7:c2:9f:5d:41:cf:72:11:d1:31:
         63:e7:c0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:57:03 2024 by rpki-client on console-ams.rpki-client.org