Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
File:                     zmdqMChOFLAsxt2qA053VAbkYaY.mft (raw, json)
Hash identifier:          eygFkmRIBINW521GjbgwxIx9ljLtyiPbjWtrXFonUtU=
Subject key identifier:   D0:1C:FB:2B:33:2D:06:DE:FB:E2:7D:23:00:E2:CE:1B:B0:DB:6C:56
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Certificate issuer:       /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial:       01901DED040A2F0DA4029EF52F054069BB73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
Manifest number:          055E
Signing time:             Sat 15 Jun 2024 22:03:10 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:10 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:10 +0000
Files and hashes:         1: GIIn6gB4WGyrYi8kevc6logItv8.roa (hash: eSiKQ5MZghqoynGvXHrSXL8lZ1c2qiggIYyLtEJ6EOs=)
                          2: zmdqMChOFLAsxt2qA053VAbkYaY.crl (hash: dVWcod364P3gng6Vsj2aeXwSY5cv/dGAUgvgpi0cFdM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:04:0a:2f:0d:a4:02:9e:f5:2f:05:40:69:bb:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
        Validity
            Not Before: Jun 15 22:03:10 2024 GMT
            Not After : Jun 16 22:03:10 2024 GMT
        Subject: CN=d01cfb2b332d06defbe27d2300e2ce1bb0db6c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a1:7d:1f:85:6d:de:76:1b:8a:c3:d5:e9:6b:
                    99:ff:7c:9c:ef:b6:e4:d1:bb:c3:69:ce:7e:48:68:
                    97:a7:44:0f:e6:61:78:bc:d3:3f:68:2c:de:0f:5e:
                    82:44:74:1f:75:ed:3b:c3:15:f7:f6:fc:7a:fb:ac:
                    76:2e:6f:a2:4b:4a:1d:5d:27:7b:a8:64:ca:49:6b:
                    c8:54:b3:fe:1c:c8:db:ed:8e:a9:85:83:fd:73:41:
                    f9:5d:4d:31:25:f3:3c:35:0e:7e:8d:5c:d0:55:4b:
                    a3:68:fb:ba:55:53:ea:f3:e8:ad:9f:cb:ad:0e:3b:
                    26:a4:1b:a0:f1:c5:cf:29:a5:f7:76:14:d6:2f:55:
                    c5:ef:e3:03:62:04:97:1e:82:dc:51:5e:2f:09:c1:
                    9e:0a:ae:ca:72:3d:e6:3b:60:f4:dd:51:a2:70:e9:
                    cb:9f:17:68:a3:b6:7d:82:4b:27:5a:f9:aa:45:22:
                    80:82:10:b1:0e:51:dd:18:e0:d9:9a:d2:be:21:c7:
                    3d:07:67:6c:e1:b9:b5:e0:a7:10:06:36:7d:4b:09:
                    db:d0:d4:53:86:4b:b9:f8:61:34:42:a4:60:b6:ae:
                    40:08:93:d3:42:55:3c:d9:1b:bd:49:be:0a:ae:eb:
                    ed:21:d9:e9:8d:84:df:36:8e:83:d3:c1:24:cd:b0:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1C:FB:2B:33:2D:06:DE:FB:E2:7D:23:00:E2:CE:1B:B0:DB:6C:56
            X509v3 Authority Key Identifier:
                keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:05:07:b0:ab:72:e9:49:4b:37:06:88:d9:d0:bc:81:38:30:
         31:34:22:ed:17:28:bd:e1:ee:de:fd:21:7c:1c:97:ec:6e:3a:
         ac:63:a5:f3:66:2e:b2:77:50:23:9d:2b:72:8c:c9:3f:47:1f:
         47:6c:a9:d2:a5:a6:4a:93:95:27:a4:0a:4b:47:f7:a5:a9:79:
         49:15:6c:69:39:2d:36:6e:65:18:c9:9e:69:1e:18:13:c2:17:
         ca:19:c6:f6:11:85:99:45:c4:83:d2:c8:49:f7:84:ef:a4:60:
         39:fe:ae:2c:a2:ad:2d:4f:fb:85:e0:65:11:7b:a0:aa:7d:fc:
         c7:72:a8:74:14:9d:5a:85:4c:2c:57:e7:04:8f:a3:5e:18:be:
         35:c5:4b:90:a2:43:39:23:c0:a3:c8:37:52:85:da:bb:be:e0:
         6e:f9:b5:11:75:a5:1d:eb:c5:b8:f3:2c:36:ea:8f:9d:fd:00:
         a7:9b:c9:52:c0:29:d3:4f:ce:69:f4:cb:4f:c4:2f:67:c9:a6:
         ec:24:aa:d8:51:e1:ea:40:b1:e1:18:39:99:3b:55:54:f0:3f:
         cd:51:a3:6c:da:c8:0c:ef:06:74:03:7e:57:bf:75:b7:c3:6c:
         bb:c4:3c:60:ff:97:5c:a2:71:ce:0b:db:27:0f:a5:7c:5b:7c:
         0e:9f:84:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:59:26 2024 by rpki-client on console-fra.rpki-client.org