Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
File:                     zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft (raw, json)
Hash identifier:          95Yam+d9KM5+J0JP7F0utRMFK7x1jVnPCV4bx//2VgE=
Subject key identifier:   62:FB:B0:55:6F:7D:B7:E2:6A:5A:13:52:02:01:29:60:D9:5B:E8:85
Authority key identifier: CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16
Certificate issuer:       /CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
Certificate serial:       018FB610814D72CDDC2D6AE8DA82C24BF8B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
Manifest number:          119C
Signing time:             Sun 26 May 2024 18:01:25 +0000
Manifest this update:     Sun 26 May 2024 18:01:25 +0000
Manifest next update:     Mon 27 May 2024 18:01:25 +0000
Files and hashes:         1: WDvBq0OEBcBJxq4LPUOhUYvTwKE.roa (hash: mT1561gUeku7u3tc8XWQhtv+WRasEn/srxVlKiVvmHI=)
                          2: dzc9c1bV1t3yIgLLDd6XwMk8U3o.roa (hash: Rg0ozvWn+eY1mk3HFE3dkPjFkdRdKk+WeULNQ9x2dRQ=)
                          3: j9F7RRqTjYDVQPTKG82GXn72icg.roa (hash: FbdSDJ6J/69s0UEyel2LYxTNW5svZXenyF/miI5dNjw=)
                          4: naSc2RUoFgLf-QaTE_pHNlPSmL8.roa (hash: o72Ch/R6q/oCxKDJPLhCAHRaPWLChOyC0710KAaCIR0=)
                          5: u-lG6h5_lKcNfKXFpfH1ARaMLsQ.roa (hash: nPzizsUGmIU3P5qZBIzytDSJ2JCgk6b9O3c38IyqGDM=)
                          6: zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl (hash: BOQNIKMr91RBe0kmoUQAgv+wWCNPtZJAwsmaFf0a2VE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b6:10:81:4d:72:cd:dc:2d:6a:e8:da:82:c2:4b:f8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2eb5b38bb62ede5c98cbfbcff9532852180516
        Validity
            Not Before: May 26 18:01:25 2024 GMT
            Not After : May 27 18:01:25 2024 GMT
        Subject: CN=62fbb0556f7db7e26a5a135202012960d95be885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:cf:a6:56:ad:22:40:8c:f1:75:d5:e2:c4:
                    8e:8a:04:23:6e:84:40:cb:e2:2a:aa:eb:1b:0b:b6:
                    ca:39:c1:ae:3b:31:e5:7a:b5:2b:47:8e:60:bc:3c:
                    8a:ff:ab:76:10:0c:15:1e:98:10:80:68:01:86:93:
                    98:15:e7:f7:90:51:71:8b:5f:7e:12:03:0c:f1:16:
                    04:24:a6:76:3e:67:e2:2a:3d:8e:4a:21:0c:07:63:
                    e6:8f:ea:c7:fc:ac:49:80:dd:f2:42:6c:79:19:dc:
                    64:35:b0:78:09:e0:75:fa:60:f5:0c:98:2a:25:40:
                    4d:21:6c:e0:3a:89:95:23:d1:b5:fa:4d:57:92:64:
                    97:fa:4f:81:d9:fa:d4:08:d8:ad:61:f9:ba:f2:8c:
                    73:d3:5f:08:58:7f:a8:b5:a3:d8:56:8a:68:ce:b7:
                    c9:80:25:09:83:32:17:d1:36:9e:9a:e2:bf:63:7a:
                    4e:e5:e5:21:ec:41:40:ec:b2:8b:5b:3a:db:4d:5a:
                    0a:37:d0:48:1f:8d:ec:e7:e6:4e:42:77:e6:fd:00:
                    4c:a1:7a:19:22:fd:8f:88:23:4e:ff:be:83:09:b9:
                    95:59:5e:b9:68:eb:7f:07:3c:2d:8c:91:dc:38:e2:
                    0a:69:05:51:31:ac:79:eb:f9:f6:84:43:11:85:13:
                    d9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FB:B0:55:6F:7D:B7:E2:6A:5A:13:52:02:01:29:60:D9:5B:E8:85
            X509v3 Authority Key Identifier:
                keyid:CC:2E:B5:B3:8B:B6:2E:DE:5C:98:CB:FB:CF:F9:53:28:52:18:05:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zC61s4u2Lt5cmMv7z_lTKFIYBRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6f0269-834e-47c5-98e1-f1f802e6613b/1/zC61s4u2Lt5cmMv7z_lTKFIYBRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e7:89:f9:63:58:6e:26:d4:37:fd:79:9f:1a:51:86:be:4f:
         13:b2:3d:83:71:d0:5c:6b:62:ba:b0:00:79:59:9c:83:65:bc:
         10:37:39:06:dd:93:08:cb:c2:4e:2c:3f:92:f8:41:89:fa:0a:
         cb:58:56:b7:ef:ed:5f:e9:9b:3f:35:2f:27:0b:b3:c0:62:13:
         26:be:43:3a:d8:9f:4f:ce:bc:5a:80:72:53:dc:ec:f7:05:86:
         82:29:00:76:9c:6d:a9:3f:8b:d6:b6:04:0f:27:d0:00:cb:3c:
         ac:f9:5c:80:66:a7:0e:a0:2b:95:0e:77:e2:5c:81:50:d6:d5:
         7f:e8:a1:81:f3:c2:8b:41:da:91:2c:76:ea:66:5b:8c:25:52:
         e4:a6:1c:5a:98:4c:10:3b:df:c5:3d:6a:aa:7c:10:ca:d2:87:
         0f:58:4b:79:19:59:03:fe:dd:e2:0f:6b:58:35:f2:5f:70:df:
         0b:b8:ca:59:9d:92:55:ad:93:9e:f2:0e:7a:c3:ee:ea:c8:c8:
         87:86:46:da:66:37:13:3b:e2:7e:ad:4b:d7:b0:0f:62:a5:45:
         d1:de:fa:08:40:67:da:bf:63:90:57:30:1e:3f:c9:44:0a:44:
         89:6d:81:60:a6:00:bf:cc:b5:4f:0b:97:88:fe:cb:c5:f8:27:
         bf:0a:08:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 21:27:47 2024 by rpki-client on console-ams.rpki-client.org