Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
File:                     zmdqMChOFLAsxt2qA053VAbkYaY.mft (raw, json)
Hash identifier:          Ru/8uHD7E2qfsYnc9eDfWMmX2P4G6QHRhGvLzWpbmIY=
Subject key identifier:   B3:B2:7D:F9:EF:27:40:43:2C:91:B1:41:02:9F:09:FB:5D:F4:FB:43
Authority key identifier: CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6
Certificate issuer:       /CN=ce676a30284e14b02cc6ddaa034e775406e461a6
Certificate serial:       019040B02E35D75201B9D511E37FE7753019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
Manifest number:          0570
Signing time:             Sat 22 Jun 2024 16:03:26 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:26 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:26 +0000
Files and hashes:         1: GIIn6gB4WGyrYi8kevc6logItv8.roa (hash: eSiKQ5MZghqoynGvXHrSXL8lZ1c2qiggIYyLtEJ6EOs=)
                          2: zmdqMChOFLAsxt2qA053VAbkYaY.crl (hash: 9CExoV1a4vkGmh94hSmQifU6bYehxFRdEknNOMIDRwQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:2e:35:d7:52:01:b9:d5:11:e3:7f:e7:75:30:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce676a30284e14b02cc6ddaa034e775406e461a6
        Validity
            Not Before: Jun 22 16:03:26 2024 GMT
            Not After : Jun 23 16:03:26 2024 GMT
        Subject: CN=b3b27df9ef2740432c91b141029f09fb5df4fb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:62:f2:3b:c0:c6:bb:99:54:ab:02:1b:a2:
                    ef:02:d0:fd:3c:72:37:b4:7f:84:17:d7:9a:8b:f8:
                    e6:d0:bc:1e:f3:8f:ea:94:cb:71:b4:fd:ac:ac:2d:
                    d2:eb:a8:99:56:3c:f1:b3:b4:95:33:39:13:89:a7:
                    ef:2c:5b:cb:72:e7:c7:9c:36:dd:10:98:28:7c:2a:
                    2a:af:bb:38:fc:b6:82:fa:f2:dc:eb:fd:f9:87:5c:
                    4c:cf:53:fc:ab:1e:57:c9:ba:66:47:26:8a:de:c3:
                    15:ce:75:97:4b:56:42:02:61:b6:51:4a:9d:cb:3b:
                    06:53:57:3e:ec:95:a3:fc:87:f0:20:7c:42:e5:85:
                    09:3b:8a:0e:f8:db:c7:9c:e3:2d:8d:1a:b6:e1:14:
                    d9:3f:fe:5a:15:50:3b:e5:f8:16:d7:8b:ba:49:46:
                    c3:f0:60:56:a7:83:c8:53:52:ce:10:1b:29:17:d5:
                    09:71:d5:2e:62:c4:ee:ca:8e:54:8f:21:41:e0:07:
                    de:59:99:25:21:1a:35:35:60:8a:1c:72:16:e6:53:
                    f5:ad:c4:d3:7b:cc:4c:28:5d:8c:06:00:0a:e1:d0:
                    af:73:b1:12:d3:a2:e1:b3:5b:77:d0:36:82:8b:01:
                    ad:02:79:ac:4f:ee:8f:3b:60:e5:4f:d8:ce:4b:fc:
                    2f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B2:7D:F9:EF:27:40:43:2C:91:B1:41:02:9F:09:FB:5D:F4:FB:43
            X509v3 Authority Key Identifier:
                keyid:CE:67:6A:30:28:4E:14:B0:2C:C6:DD:AA:03:4E:77:54:06:E4:61:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmdqMChOFLAsxt2qA053VAbkYaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8605a-2136-4389-a405-ea606570946a/1/zmdqMChOFLAsxt2qA053VAbkYaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8c:b6:67:31:2b:26:8c:ed:24:f5:21:b3:9b:5d:fd:06:56:
         bc:d3:27:f4:38:9d:76:cd:44:09:2e:c2:d7:97:ee:c7:d6:a9:
         0f:47:ea:c4:4e:86:a3:43:b7:f4:9b:1a:3a:1c:92:07:5e:42:
         ee:4e:6d:92:c2:24:08:58:dc:60:27:90:a4:86:52:19:9b:99:
         65:84:5d:ce:be:85:3f:f2:83:72:76:b6:82:a6:f8:a7:e9:95:
         6e:4e:f1:d9:ba:43:1b:92:cb:a4:a2:fa:ec:c4:74:06:65:ac:
         c9:8f:9b:6a:28:2f:8d:4f:81:82:15:b0:30:74:59:d4:0c:e7:
         aa:c5:5c:f2:ac:b0:15:5f:ee:a0:03:db:ee:43:09:c3:31:d0:
         1b:0f:d4:3b:e0:6c:f2:25:79:6e:a4:be:40:dd:06:34:8c:7f:
         63:44:25:f9:7f:f1:c5:c2:76:2e:3a:78:14:76:fc:81:c8:e0:
         1c:85:d0:ac:a9:32:e7:46:12:ad:3e:07:e6:10:05:f3:cd:46:
         b6:6e:aa:59:1d:aa:de:de:f9:fd:db:f2:15:2b:97:61:ef:a8:
         9f:e8:12:e5:7e:2e:78:bc:f4:32:08:08:86:07:d4:4c:94:e4:
         e4:7a:ef:43:67:3c:c0:0c:64:28:db:da:f1:06:e7:f0:25:c2:
         bf:46:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:39:31 2024 by rpki-client on console-fra.rpki-client.org