Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File:                     snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier:          lO2lp+TEWhuF6BQ+zxT0NWPbsvj8AM7EiKg5cEq0zMA=
Subject key identifier:   F8:06:FE:38:69:35:94:59:1B:38:6C:2A:CB:33:08:86:F0:3E:CF:31
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer:       /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial:       01903BBE4C4FB756EFEA92735F00A2B86DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number:          0A08
Signing time:             Fri 21 Jun 2024 17:00:45 +0000
Manifest this update:     Fri 21 Jun 2024 17:00:45 +0000
Manifest next update:     Sat 22 Jun 2024 17:00:45 +0000
Files and hashes:         1: Xhn2w9vFSDcYfW0E6h97MFOSlOs.roa (hash: zNLL2MARZ388bl8vlZwPSkBlOzEe3inJCQPHhMe6d10=)
                          2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: wHPwJq0gR465wIMjDaYsTpYNjSqHNKxfCO+G7ABWyhE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 13:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:be:4c:4f:b7:56:ef:ea:92:73:5f:00:a2:b8:6d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
        Validity
            Not Before: Jun 21 17:00:45 2024 GMT
            Not After : Jun 22 17:00:45 2024 GMT
        Subject: CN=f806fe38693594591b386c2acb330886f03ecf31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:62:14:13:4f:d9:8d:e8:e3:69:4e:30:f2:c4:
                    09:74:e8:79:51:95:a6:e2:97:4d:21:bb:24:96:4e:
                    73:5d:af:4f:4d:14:2b:ce:21:27:ea:68:b9:d0:7d:
                    53:06:e6:08:d6:6d:46:9e:b3:2d:19:27:d4:2e:14:
                    37:4b:94:f3:3c:db:59:75:bb:38:63:0a:bc:e1:1a:
                    fd:65:3b:b0:19:16:a9:37:75:53:ca:81:8e:f9:78:
                    38:dc:fd:5a:0e:fa:c6:14:0a:b8:13:b9:40:29:7c:
                    26:37:68:03:31:a6:e7:ff:96:80:57:74:43:78:56:
                    23:36:fc:d0:80:47:b2:35:6a:fa:d8:9b:07:86:56:
                    84:f8:78:6a:02:aa:08:10:d0:0f:1e:50:29:19:a6:
                    41:dc:7c:c8:4d:a1:cf:09:66:9c:c6:3f:38:47:1a:
                    19:b8:d9:d7:47:cc:ef:24:82:15:72:43:d7:0a:b7:
                    c8:1d:c6:d7:71:aa:78:47:d6:89:31:ec:e3:59:27:
                    4d:0a:d7:d0:22:81:82:e3:d5:18:89:19:57:5e:82:
                    fe:6c:d7:a2:df:61:23:29:2b:1b:8a:eb:13:6e:b2:
                    a8:aa:4d:6e:86:28:89:5b:d9:69:16:be:7f:e0:b0:
                    36:13:b1:39:f3:e3:68:03:c3:44:bc:21:49:f2:d0:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:06:FE:38:69:35:94:59:1B:38:6C:2A:CB:33:08:86:F0:3E:CF:31
            X509v3 Authority Key Identifier:
                keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:09:47:9a:6d:32:ec:d8:95:45:68:5e:94:35:64:d8:38:d5:
         b6:0c:b3:13:1e:67:86:19:34:a4:7d:19:0a:4b:f8:5f:6d:1c:
         7e:fc:bb:75:aa:b9:bf:be:bf:f2:08:95:44:a8:df:40:0d:75:
         c5:f3:c1:02:a1:8c:b6:60:74:89:23:f0:f0:4a:9f:8e:dd:69:
         bc:7d:c3:60:e8:54:a3:ba:fb:e8:89:07:2b:c7:30:67:0b:9c:
         d4:e6:1e:a5:89:e3:e0:5f:ae:ec:62:3c:fd:ad:b3:ef:bb:e4:
         7b:16:f9:88:80:1f:8e:ae:1b:b3:fa:30:25:da:cd:16:8d:f5:
         fd:f9:25:a3:b4:d4:37:77:2a:88:0b:bb:ca:32:54:69:0f:a7:
         0f:32:03:31:67:e0:cf:54:5f:83:04:69:3b:a0:23:a8:74:63:
         97:6b:90:0b:b2:aa:11:bd:91:5b:ad:d0:51:c3:49:d1:d1:ea:
         6d:e2:40:e2:c8:32:08:80:27:54:ec:5b:f6:a9:07:bd:bd:18:
         55:f9:67:e6:43:3c:71:d2:00:3e:2a:ea:05:45:52:9e:47:c0:
         85:1e:1f:2f:1f:cf:d5:9d:3b:7a:9a:78:b4:64:f2:26:4c:37:
         9b:77:52:b1:a2:d9:6c:1d:49:e8:af:51:b2:7b:6b:45:6c:d0:
         e9:1e:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:10:02 2024 by rpki-client on console-fra.rpki-client.org