Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
File:                     rMGajH8XQRRJx9SP-TCNJIMulSs.mft (raw, json)
Hash identifier:          ql0f2GeQKjKsLUz85Q0HPThafqLX/Czvw7X5ac0sTPU=
Subject key identifier:   87:A8:50:B1:F3:B3:B7:93:17:7E:D4:CC:12:3E:77:08:BC:C2:FD:10
Authority key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Certificate issuer:       /CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Certificate serial:       01901CA1642CC7534C684B30D47E9E227C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
Manifest number:          11C6
Signing time:             Sat 15 Jun 2024 16:00:57 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:57 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:57 +0000
Files and hashes:         1: 4tid_d8uupJds-2nEk67KXxKdiM.roa (hash: fwB3mHaZfVqnTof35x/TtV29sVq2Vh5ZGjusqY57QiI=)
                          2: rMGajH8XQRRJx9SP-TCNJIMulSs.crl (hash: plEq9ZspbkZGIS2JijA0idHlXnj5QePVuht9Oq5eeL4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:64:2c:c7:53:4c:68:4b:30:d4:7e:9e:22:7c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
        Validity
            Not Before: Jun 15 16:00:57 2024 GMT
            Not After : Jun 16 16:00:57 2024 GMT
        Subject: CN=87a850b1f3b3b793177ed4cc123e7708bcc2fd10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b2:72:6f:65:63:6a:f2:6e:a5:8e:f8:57:c9:
                    e5:1b:c4:c4:35:70:67:6e:5d:88:7f:fd:ab:1b:e9:
                    70:63:ad:63:5f:b0:bf:6e:3f:e2:80:8b:37:d3:07:
                    d4:6e:4c:7b:64:23:33:a4:d3:c6:02:11:41:91:e6:
                    2a:34:9c:0a:1a:29:19:98:ed:8d:f6:38:75:87:4d:
                    d4:a1:a8:a9:8c:28:cb:f7:a6:80:29:f4:a0:17:bb:
                    01:fe:96:01:cc:77:89:14:db:f6:cf:e9:b4:06:d4:
                    2e:00:f3:c7:ce:50:9c:34:25:be:ae:78:55:0d:96:
                    07:6c:a9:38:5f:7f:4e:48:22:3f:10:6f:14:65:64:
                    4d:ee:1a:89:77:d5:32:67:82:97:9d:83:6f:b2:50:
                    9b:0c:16:44:87:c0:6f:45:23:67:0c:16:70:d9:ed:
                    b8:68:05:07:92:d3:43:9a:10:08:d0:48:4c:11:1d:
                    38:00:7c:4b:a6:af:c2:3d:1d:11:41:5d:f3:0d:86:
                    88:3b:18:cb:66:a9:ab:d6:71:fa:f3:25:24:3d:4b:
                    42:cc:21:a5:91:24:f5:72:d6:1a:a4:d8:95:18:14:
                    eb:bc:51:04:ee:68:60:1f:f8:5a:f7:05:13:b7:ad:
                    c6:dd:4f:09:cc:ea:45:ad:29:64:b7:24:87:a6:09:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A8:50:B1:F3:B3:B7:93:17:7E:D4:CC:12:3E:77:08:BC:C2:FD:10
            X509v3 Authority Key Identifier:
                keyid:AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c2:05:57:9d:29:9b:06:7d:a4:5e:43:67:ec:00:42:ea:3a:
         a4:39:88:49:a0:53:e3:91:aa:95:ee:09:a6:18:b1:ef:38:2a:
         31:38:f5:dc:c9:e1:23:6d:d9:15:3f:7a:6a:2f:39:4a:33:41:
         e8:89:d6:b2:29:ce:b6:22:e9:46:dd:32:12:a2:e1:88:27:66:
         70:47:1b:ff:11:cb:36:71:88:98:40:30:be:2f:40:f6:53:d2:
         f7:31:91:73:99:20:f9:a1:6f:35:86:e0:e2:e8:26:42:0d:b5:
         4f:93:c0:9c:99:a5:23:04:83:b8:ce:77:43:e9:e6:e6:38:b0:
         b8:94:a3:cd:bd:02:35:3e:61:75:22:00:6a:dd:18:67:bc:38:
         42:cd:91:06:4c:2e:99:f9:99:c8:0e:30:da:81:bb:79:6b:0b:
         89:25:13:5e:f9:7e:5a:6b:a2:26:da:52:ef:09:eb:c2:71:5a:
         38:d2:ef:73:9a:a7:d1:f6:94:a6:e9:7f:02:6d:27:c6:9c:27:
         ad:b3:dd:c6:2b:5e:a9:cc:c3:b5:21:76:cf:93:1e:6c:17:d2:
         14:d7:f3:70:3a:5a:a8:78:65:bb:58:0f:69:5e:0a:1f:2c:c1:
         fd:80:0a:5c:3f:42:55:21:38:58:4e:45:a8:b9:ce:fa:5a:b6:
         1c:32:1b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:29:59 2024 by rpki-client on console-fra.rpki-client.org