Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File:                     GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier:          OQD3KKrDml1lPufgVpWbNUuhkjRCOJW9i8a2XN6ypKU=
Subject key identifier:   8F:00:90:BE:47:98:08:CA:21:EB:D3:15:8D:7F:E8:D8:31:CA:6A:9C
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer:       /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial:       01901E8FEE4FA0AED3BEE5D3C4C821BB3538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number:          06A3
Signing time:             Sun 16 Jun 2024 01:01:07 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:07 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:07 +0000
Files and hashes:         1: DjiehCg8a9rTDLsC51aJnA38h64.roa (hash: 2MV7hnfoMOfK5uDY/Ofa+3NIqG9DFg+AZ4Oy1Tr3q4s=)
                          2: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: S2w3FLtGkI24zvCFsMmJzdTFpBEYxrC/hWSEcEKYKNA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:ee:4f:a0:ae:d3:be:e5:d3:c4:c8:21:bb:35:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
        Validity
            Not Before: Jun 16 01:01:07 2024 GMT
            Not After : Jun 17 01:01:07 2024 GMT
        Subject: CN=8f0090be479808ca21ebd3158d7fe8d831ca6a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:01:46:e3:ca:28:6d:48:88:4d:1e:d5:3b:
                    a4:42:b1:ba:52:e8:f3:fe:d6:4d:00:20:57:4c:e1:
                    f2:32:0d:56:f4:b7:81:8d:dc:92:75:b4:de:d5:d7:
                    43:d8:19:3d:2a:07:5f:b8:2a:2d:55:f5:03:2d:55:
                    fb:98:97:1f:58:52:9f:8e:cf:3e:c3:29:dd:69:61:
                    cb:9f:01:af:47:8b:87:1c:1d:52:54:55:81:42:e6:
                    25:17:ee:1a:29:53:a8:d4:f4:30:40:41:38:55:2d:
                    1e:7f:05:6f:71:9a:92:24:89:b6:41:7a:f7:c0:a5:
                    db:ce:38:9e:3c:f7:00:96:68:29:f4:80:e4:46:66:
                    87:61:f0:6d:50:4c:ea:9e:48:66:a9:0d:5f:f0:56:
                    f4:2f:12:9a:2b:0e:08:f1:53:d0:87:9b:01:87:dc:
                    ef:c9:c3:d0:36:4f:2d:6f:84:6d:3b:3a:01:a4:c0:
                    9b:62:e1:cb:65:ca:17:58:af:db:da:e4:a8:1c:60:
                    3a:02:bf:aa:a3:7c:74:81:1d:00:67:95:3d:ae:5b:
                    0f:8e:ab:b8:6b:37:ae:f1:fd:80:6a:c8:3e:2e:b2:
                    26:29:2c:99:3f:78:45:bb:ed:02:66:87:9e:88:62:
                    3d:0c:81:fc:7a:ba:af:82:4f:11:c5:8c:21:bb:54:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:00:90:BE:47:98:08:CA:21:EB:D3:15:8D:7F:E8:D8:31:CA:6A:9C
            X509v3 Authority Key Identifier:
                keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:eb:b0:03:95:43:ca:cc:7b:9f:19:41:82:00:5b:6a:9e:b4:
         65:ef:42:8f:7d:07:2c:69:de:17:f6:af:db:d1:f5:81:e2:c3:
         c3:a5:13:93:1b:d5:91:73:c5:c5:b5:8b:e0:ae:2d:83:87:c1:
         d0:11:da:37:29:c4:fe:49:23:66:02:2f:fe:df:5b:5e:1b:29:
         98:6b:07:72:0a:ea:40:46:ce:82:9e:db:05:22:a9:b5:0a:dd:
         9f:9f:d3:c1:ac:ad:a0:77:80:8b:fd:4d:6e:cc:1b:5d:c6:50:
         06:b4:f7:fe:3a:22:70:59:1e:3b:6a:b7:c3:75:74:23:f6:a8:
         da:5e:6a:c0:1b:97:56:c1:22:51:72:2e:34:c0:cc:7b:8d:67:
         86:b0:18:26:92:40:8d:d0:42:21:e1:d3:0b:3e:76:59:09:67:
         39:ae:9d:47:95:20:4c:7d:7c:f5:29:6b:6b:54:25:95:db:bf:
         be:b4:da:a1:e4:3e:68:a2:25:36:a0:c0:8f:f6:7a:42:93:8b:
         05:a3:04:19:98:93:7f:55:25:ed:41:2e:45:39:4d:3c:ef:3a:
         3f:d2:5b:6f:ba:18:6d:50:58:35:c1:f5:ac:80:22:d7:a0:44:
         f5:d8:ea:d0:a7:b5:6b:90:b4:63:8e:a3:ed:29:a0:f0:88:8e:
         72:23:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:53:23 2024 by rpki-client on console-ams.rpki-client.org