Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File:                     pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier:          31gs93v9/qbBi+4mc4z63lAbhrmCRXoL7Ea8OL2LAUw=
Subject key identifier:   7C:65:2A:B8:49:6B:30:B5:69:0A:5F:FF:6D:CD:9A:D7:E9:A8:0B:CF
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer:       /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial:       019044F848482EE0D3E8E5A74A234BF360A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number:          11DA
Signing time:             Sun 23 Jun 2024 12:00:40 +0000
Manifest this update:     Sun 23 Jun 2024 12:00:40 +0000
Manifest next update:     Mon 24 Jun 2024 12:00:40 +0000
Files and hashes:         1: hT0rFbu5ZsFKvwGoBtn6rt2RnGM.roa (hash: EG4hyVPwuMQTGvjnbVUiKNinAwuV64cs/vbkR/vpYRo=)
                          2: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: pxbi56bq1DU3d4rxanMhodD0tflAKxZvzTJ3wdy+ccg=)
                          3: s-Wsv7TovzAl56f0K_oGzQGqhEg.roa (hash: L3mhYjPcyWGGh7pdq6w30+XReu6MbFFfvTV6X1ZBk3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:f8:48:48:2e:e0:d3:e8:e5:a7:4a:23:4b:f3:60:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
        Validity
            Not Before: Jun 23 12:00:40 2024 GMT
            Not After : Jun 24 12:00:40 2024 GMT
        Subject: CN=7c652ab8496b30b5690a5fff6dcd9ad7e9a80bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c8:96:fe:39:d2:10:db:93:64:8f:a9:6b:2c:
                    37:af:60:5d:2c:a1:68:12:8e:90:b3:5f:20:8b:16:
                    86:d3:74:80:69:5e:fc:1f:51:c6:48:1d:1a:21:be:
                    1e:b0:06:20:1a:8b:38:96:8c:7f:c9:c5:ca:66:44:
                    7a:7e:b2:d2:b0:6d:42:2b:0d:d6:ff:da:5e:8d:86:
                    82:eb:55:86:fb:4b:7d:42:63:c3:e2:5e:79:f0:0a:
                    62:22:5b:e6:b2:0e:ba:e8:f9:4a:14:6f:a5:de:8b:
                    d4:ec:08:ab:3a:43:70:89:c1:82:e7:df:9a:c5:0d:
                    3d:e5:c5:c8:77:f0:98:9b:bb:77:9b:d2:a9:c0:bd:
                    e3:d9:22:0d:cc:79:72:7f:6a:9e:04:b9:8e:0a:bd:
                    42:f1:5a:5d:0e:d2:98:32:b8:f0:69:13:d2:3c:97:
                    a8:ef:38:43:30:9f:4e:25:c3:3c:bd:b4:9d:95:27:
                    cd:77:ba:5f:4d:24:42:4b:6f:58:ca:3d:8e:ff:4f:
                    76:7e:ab:d2:02:49:25:ca:29:12:34:19:1c:96:2c:
                    7a:c8:b2:d9:1f:44:90:73:a9:52:8e:14:c6:29:70:
                    14:c4:16:d5:df:31:92:dc:8e:4c:20:11:da:61:60:
                    65:75:81:29:13:9b:bf:0a:39:32:81:c7:c3:7d:e8:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:65:2A:B8:49:6B:30:B5:69:0A:5F:FF:6D:CD:9A:D7:E9:A8:0B:CF
            X509v3 Authority Key Identifier:
                keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:62:c7:97:fd:73:b2:48:69:88:09:29:d1:f7:11:85:f0:d1:
         5a:bd:1b:88:4b:6e:7b:0f:fc:08:66:ad:52:3a:61:34:92:64:
         e6:f7:64:12:e2:de:52:28:32:9b:92:9b:2d:1b:1c:ed:30:40:
         48:e5:d8:f4:40:f4:71:bb:16:5e:82:43:be:36:84:d0:37:64:
         1e:93:65:d4:3d:30:90:76:31:e0:98:38:ae:20:58:b3:ce:fb:
         02:25:aa:b5:6d:cf:f5:9c:8d:98:b5:5f:43:00:e3:a2:d6:91:
         85:0b:f4:78:cf:57:0a:df:b6:ba:28:4f:38:4b:70:f1:1a:07:
         42:50:e1:e0:d3:27:08:56:2f:83:a1:f4:0b:b9:37:19:9f:04:
         81:9a:c7:27:ba:cb:70:78:01:69:f3:a0:16:a3:c3:53:ea:e4:
         00:8e:61:b8:f8:16:b2:2c:2d:00:d6:c7:ea:2c:d1:4d:dc:d8:
         90:9f:98:c2:bf:c4:b3:e1:25:4a:c6:20:dd:2a:3d:a4:49:b3:
         a7:3c:4e:36:99:56:7a:26:9e:90:5c:a0:e0:58:c2:e4:b2:ac:
         e2:1f:41:50:bf:42:43:fc:1a:06:79:85:30:79:1d:7c:d1:2f:
         f1:67:1b:26:01:e1:38:38:0f:39:61:20:45:f7:83:71:a5:3a:
         63:ad:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 14:50:35 2024 by rpki-client on console-ams.rpki-client.org