Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File:                     GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier:          XbFsizwbdjr/k6fkXdLByURnZP3Z+TBgQ1i8R++5ZNo=
Subject key identifier:   F4:53:38:94:D2:68:DF:B9:4C:5B:8A:F3:F6:CE:64:20:2D:94:92:BB
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer:       /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial:       0190452F67156F0CC5AF264773E96CC4E54B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number:          06B7
Signing time:             Sun 23 Jun 2024 13:00:52 +0000
Manifest this update:     Sun 23 Jun 2024 13:00:52 +0000
Manifest next update:     Mon 24 Jun 2024 13:00:52 +0000
Files and hashes:         1: DjiehCg8a9rTDLsC51aJnA38h64.roa (hash: 2MV7hnfoMOfK5uDY/Ofa+3NIqG9DFg+AZ4Oy1Tr3q4s=)
                          2: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: vXseu7CqvWUWzU1zgrWLXQy0rfbEpJzyc86nXCVJ9dw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:67:15:6f:0c:c5:af:26:47:73:e9:6c:c4:e5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
        Validity
            Not Before: Jun 23 13:00:52 2024 GMT
            Not After : Jun 24 13:00:52 2024 GMT
        Subject: CN=f4533894d268dfb94c5b8af3f6ce64202d9492bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:27:61:cf:17:c7:d3:e2:cf:7d:11:ae:00:52:
                    bb:aa:cd:1f:e3:30:25:0a:ad:ff:f6:e4:ec:22:43:
                    42:4b:4c:58:33:4b:ce:67:95:18:c9:9a:ad:43:a6:
                    b9:09:e7:9e:f9:ad:c4:0c:cf:1c:fb:ee:8c:57:ee:
                    34:a3:b3:a8:81:43:90:03:b9:fc:1e:81:44:2e:00:
                    cc:e9:bd:29:57:26:74:a3:83:6c:20:af:00:88:a1:
                    1d:83:a8:d3:ac:aa:54:d9:58:ac:db:cd:c9:ad:ea:
                    52:49:2b:67:36:c6:fb:7f:f7:99:46:3e:9c:2c:9c:
                    fa:3f:9c:7d:54:bf:69:9c:b9:f0:4d:4a:9b:56:c1:
                    42:3e:db:d4:4b:45:a6:5b:ec:3d:04:1c:0a:9b:ab:
                    0f:26:27:82:2a:31:0c:1b:8f:49:26:fe:2f:c6:97:
                    01:89:a8:0d:1a:58:c4:0b:a6:e7:00:bb:a0:3a:4f:
                    e4:f9:10:fa:16:c2:ff:cc:5b:af:75:32:a3:da:14:
                    3c:8c:ec:08:60:38:3e:a9:47:c4:f1:63:f3:ba:04:
                    0d:1f:4e:b7:82:a7:a1:a0:36:e4:39:7e:f9:32:8f:
                    ba:cb:d8:10:79:2a:0a:20:bf:dd:60:27:11:d6:d6:
                    ef:2c:ab:a1:e5:39:8e:99:35:12:97:10:20:f3:5e:
                    78:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:53:38:94:D2:68:DF:B9:4C:5B:8A:F3:F6:CE:64:20:2D:94:92:BB
            X509v3 Authority Key Identifier:
                keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:25:3c:e0:21:a3:79:39:62:2a:33:66:45:b8:42:05:64:0e:
         f0:28:72:d0:02:a3:06:91:e1:bb:ae:f3:08:64:da:b5:7b:21:
         e2:3e:9f:92:48:c9:95:ce:bd:58:50:fd:50:fe:5c:39:15:c7:
         7c:77:e1:3d:c6:0d:94:99:04:d0:d5:6b:3e:8d:ec:04:84:91:
         c3:9d:da:24:9c:d5:6f:9c:e5:c0:75:62:b9:60:a4:5b:63:d4:
         20:f7:41:56:0a:15:11:8a:23:32:3a:da:2c:0a:cf:df:20:2a:
         58:c3:a6:88:c8:63:21:1c:c3:b4:f4:92:47:e3:61:d8:cf:1f:
         8b:1d:03:15:7f:49:2f:a3:46:99:24:9f:b1:01:bb:e5:6e:76:
         42:94:e4:78:b9:e9:74:f5:79:7e:9b:d0:75:80:ea:45:36:75:
         06:9a:e1:82:9f:53:81:f7:71:a3:8a:8e:52:c0:e5:d5:c5:8c:
         52:5f:f9:53:7e:26:bb:93:9c:a8:0a:68:d3:64:4a:eb:04:d4:
         c8:bc:37:17:f8:61:90:be:ba:0e:9d:a4:91:8e:87:11:9a:50:
         b3:e3:ad:db:2c:12:f8:dc:ae:e4:e0:3e:22:ce:55:76:91:a3:
         89:6c:5f:cd:e3:46:ef:77:25:2e:3f:79:45:27:e6:79:b8:70:
         a3:34:54:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:42:58 2024 by rpki-client on console-ams.rpki-client.org