Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
File:                     dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json)
Hash identifier:          cjhTPQBdK0rVt+Xb/ZL7puOWutMJRcYlH7IHpeXDebI=
Subject key identifier:   BE:DF:03:38:04:14:B3:89:6D:E8:B7:A6:2D:94:C0:CA:F6:F5:B9:2B
Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90
Certificate issuer:       /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
Certificate serial:       0190441C92E3DB96B5EE3DF1A5619A3ECC2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
Manifest number:          0276
Signing time:             Sun 23 Jun 2024 08:00:41 +0000
Manifest this update:     Sun 23 Jun 2024 08:00:41 +0000
Manifest next update:     Mon 24 Jun 2024 08:00:41 +0000
Files and hashes:         1: Eyn-eJyC5gKOyPAKbnh2r9F73JY.roa (hash: +9aJxVdeUCliblEYOL1HaqXO4Z9tD0wmRem5AmqwRrA=)
                          2: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: iujlJzDEKjN6XdKpuKj2vBTaTTM17YFSjkO9/s6R9ww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:1c:92:e3:db:96:b5:ee:3d:f1:a5:61:9a:3e:cc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290
        Validity
            Not Before: Jun 23 08:00:41 2024 GMT
            Not After : Jun 24 08:00:41 2024 GMT
        Subject: CN=bedf03380414b3896de8b7a62d94c0caf6f5b92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:bf:aa:cb:6c:6a:83:8b:c9:c8:76:f6:66:
                    4b:69:66:a8:d2:89:21:f4:4a:8c:af:e4:df:0e:3f:
                    06:56:4d:e0:b0:45:b4:84:ca:44:23:54:bc:d6:53:
                    31:f5:91:bc:f7:6c:ee:06:94:1a:1b:5e:ae:fd:5c:
                    df:a7:63:4a:cb:0c:d6:26:70:18:cf:78:03:8f:3f:
                    13:f5:2d:6b:6c:37:f8:94:91:71:18:ca:de:cf:19:
                    27:7c:3e:91:63:e1:fb:19:b3:30:41:d9:8f:c0:71:
                    38:76:57:8f:b7:e5:11:a1:9c:5b:e0:cf:bf:32:85:
                    f1:58:3e:a6:57:cb:4d:96:a6:06:b0:f9:44:70:46:
                    b5:48:1a:e1:a9:49:6b:6c:5c:a2:d0:fd:91:64:03:
                    e2:f4:73:3f:87:90:d8:4c:ae:94:3a:96:d0:43:e4:
                    e0:71:3d:7f:36:39:74:d3:a8:1f:f2:68:f2:40:c0:
                    9f:88:65:c1:6c:6f:a3:8a:f4:e9:22:12:20:e2:a9:
                    b7:5c:11:fd:0b:b3:30:e4:f7:ce:fa:a2:38:42:3c:
                    4e:2f:77:15:5f:75:98:e3:de:0c:eb:d5:85:1a:ed:
                    3c:98:79:9e:3d:2d:d1:85:be:90:ff:82:07:e2:1c:
                    b6:d2:e9:90:4b:0d:5a:31:b9:8c:05:38:ef:0e:d7:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DF:03:38:04:14:B3:89:6D:E8:B7:A6:2D:94:C0:CA:F6:F5:B9:2B
            X509v3 Authority Key Identifier:
                keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:66:30:3d:2b:06:fb:4d:70:f8:78:8e:ba:d3:f4:8c:a9:d2:
         27:be:72:39:d9:65:87:d4:16:ec:9c:12:a1:6e:4f:ce:6a:c8:
         fa:d4:89:f4:85:f6:87:c5:4e:83:81:ad:b4:6a:8d:8e:fb:a2:
         a4:90:b1:61:31:a2:3b:20:d4:90:d9:79:62:bc:46:e8:0c:8c:
         35:65:c5:04:f6:21:3a:69:7b:ae:7f:86:77:f0:8e:9f:1d:c9:
         f9:e4:96:7c:73:76:97:9e:2b:71:aa:73:8f:45:1b:1f:5d:87:
         51:a6:d2:d6:fb:48:6a:3f:25:bf:a3:8a:31:f4:aa:60:27:53:
         9c:fd:73:89:17:2a:a0:ce:ca:db:de:7b:2c:33:b8:bf:d5:30:
         47:d0:56:30:d5:36:5b:71:58:16:96:21:9c:25:15:ab:78:0d:
         d5:d4:04:24:78:5c:95:42:f2:1d:a8:93:70:2c:7b:9d:74:62:
         63:ae:f0:be:b3:ee:8e:78:23:ef:f6:ad:ab:14:18:1e:f5:6d:
         2b:02:eb:96:d7:f4:aa:0c:13:21:10:bc:11:1c:95:30:f1:e5:
         d4:99:c7:ea:44:db:f4:ac:c5:65:f9:4d:7f:ea:74:49:35:f4:
         68:c8:b8:0d:61:45:50:1c:c8:0d:38:9e:8a:ae:99:d9:b5:db:
         fc:0d:81:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:38:35 2024 by rpki-client on console-ams.rpki-client.org