Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          gYv/dOVQl071NtKRW1pK0QY1fM5bNKQKjA1u/F792b8=
Subject key identifier:   F6:F3:AB:3D:85:79:77:E5:79:41:82:1E:52:E7:71:60:D9:16:25:C4
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       01901DEB216ED9DB64FFD9E69A2C359DDA92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          11CD
Signing time:             Sat 15 Jun 2024 22:01:07 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:07 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:07 +0000
Files and hashes:         1: 7pWVtFmCQ2PTszNoLN851c45cKQ.roa (hash: Dcw9mBzq2kuKDVh4XbSA1++dDUQuXC0bJhWrSAYpjJ4=)
                          2: MD63urejUVAM75kTtVM8Ng3ldUs.roa (hash: mJOHj4LcaTOR5pVvPZSd7bIae69KPLrz9Zbcj0boBuU=)
                          3: NB4y9qxp089Hr5-uo2n531iG1hw.roa (hash: AzCreiq1n8zMxugluakrtWvV2/BO/IatNhSEXorqnJk=)
                          4: PIK3wDnBHYAHVcvyWpjaoJCPvpQ.roa (hash: yIPFPIkJZgudj7Trqv5SrFBxxIb9YaFAcxoe2N/MXyo=)
                          5: SQzgKYqcxQT6pwmJkusO1zb6KaU.roa (hash: /fJ942ACiq358vfrKWNTuESYcFxiCC11HRf4kNTasWk=)
                          6: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: F7Ci4lLKL9l2eOcjJVuYn099wXi5GePRax26c/Hhpa8=)
                          7: TJ1UjMUcvjY60KyBqfwkDFM6tZ4.roa (hash: SyFmwIpnptOlGDB03IEK7Ln2RguSbprl2g2QnLCtXbM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:21:6e:d9:db:64:ff:d9:e6:9a:2c:35:9d:da:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Jun 15 22:01:07 2024 GMT
            Not After : Jun 16 22:01:07 2024 GMT
        Subject: CN=f6f3ab3d857977e57941821e52e77160d91625c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:97:eb:9b:d8:55:27:98:59:3b:a4:cd:08:
                    fe:e8:33:1f:30:d7:2b:9f:74:65:b8:19:92:88:09:
                    44:92:ea:9a:d8:76:e4:eb:0a:5e:bc:87:ca:97:1e:
                    f8:f1:9e:46:83:b4:d2:46:04:f9:e5:e0:d1:e7:64:
                    62:64:71:f1:3a:9f:87:8c:70:80:91:ac:70:d6:69:
                    36:ad:d8:28:1e:5c:b6:88:22:ff:fd:f3:2c:37:f5:
                    d8:15:fb:a0:b5:f4:df:ec:19:c1:28:1e:55:a3:1c:
                    ef:9f:be:ff:ee:28:56:22:6f:a0:a6:e7:c9:6f:52:
                    45:3d:3e:9b:d0:b9:ba:61:bf:b0:e8:48:ef:d9:9c:
                    dc:62:d1:a1:c9:f2:20:32:ae:11:90:8d:45:0b:55:
                    06:57:1d:14:66:71:7f:51:72:82:42:50:6c:57:d8:
                    36:90:d6:88:05:3b:e1:bf:5e:a3:35:41:40:08:9e:
                    5c:ed:bb:59:59:dc:75:eb:d0:02:4e:2c:ab:3f:4a:
                    61:65:85:8c:dd:1b:32:e4:36:fb:02:7e:84:52:34:
                    03:3b:fd:a3:cb:78:87:e5:69:e0:a5:64:de:23:7b:
                    17:a7:0a:4a:79:3d:1f:a1:1f:4b:18:ef:25:c3:c6:
                    16:55:9a:21:ef:1b:56:d8:6e:1a:a9:98:bf:2e:4b:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F3:AB:3D:85:79:77:E5:79:41:82:1E:52:E7:71:60:D9:16:25:C4
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c5:5e:60:3c:be:a2:9d:46:eb:6d:61:48:b9:36:54:e7:23:
         b5:e7:ff:39:d8:37:b9:24:51:e4:7f:7e:eb:43:cd:e3:30:bb:
         aa:e1:d1:81:36:17:70:a1:33:2d:1d:17:43:e9:f4:6b:ca:37:
         93:20:bf:3b:7a:fc:d9:35:3c:c6:17:48:47:fd:6b:0b:62:31:
         58:58:7d:41:ac:6e:6a:67:9c:8b:2e:9d:99:c2:e9:61:01:1d:
         2e:bb:08:8b:6d:b9:a6:c7:ef:0e:d0:d5:e4:c2:a4:16:ee:d6:
         63:0d:f9:2b:7c:7b:9e:c3:cf:76:ac:96:ac:a4:19:86:96:ab:
         a9:8b:65:85:64:76:b6:03:20:ae:e4:78:c8:b5:41:f9:02:5b:
         0a:cd:11:54:3f:1e:48:ab:55:26:50:1a:53:7a:61:64:01:cf:
         50:0a:2f:4d:b5:55:ff:09:50:d6:5b:6b:c5:c5:45:7c:08:96:
         e6:33:42:4c:f2:29:5d:ca:ec:4e:fc:99:a2:58:b0:64:de:b4:
         f9:da:6f:81:b0:2a:26:88:83:ce:ca:e2:69:c0:34:51:90:80:
         5c:ae:84:ef:3e:c0:ea:5b:ff:3b:fb:d2:49:e6:6a:02:60:8a:
         9b:68:b9:f0:58:42:60:a7:31:a2:8f:7c:2d:01:34:f3:3e:19:
         f1:5f:9d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:59:44 2024 by rpki-client on console-fra.rpki-client.org