Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
File:                     sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json)
Hash identifier:          jobeXSaaSv3o80QFLDTeYGV25olj5mTyfhIStRjQ5k0=
Subject key identifier:   9C:20:19:78:92:A0:34:87:F8:0D:1F:4C:35:E9:6C:7D:E2:AB:11:E5
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Certificate issuer:       /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial:       01901DEC21905A2A42787A2B00801211D88C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
Manifest number:          11D8
Signing time:             Sat 15 Jun 2024 22:02:12 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:12 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:12 +0000
Files and hashes:         1: 1gqUxqgUn2J2yUfphn8_eh_c78I.roa (hash: Wg24wxLdJ2LIWsBpTs+5MRjvTYj1eCfiPR3apwTJab0=)
                          2: 5SEq9tqIZ31oCkILPpPvtUc9zDQ.roa (hash: J9rEG7UFH4iktFH0Cny3i+W8HFwoUVlcfhz3v1F6Yuw=)
                          3: 60htSXVdIE64_r55gTnuS6cHuTM.roa (hash: E7gTtgGFynRqE4aX/zmVDHVtG88DD62+2778VGcacOE=)
                          4: PtsXXx2ls7hCbLBPAS4MNTG28Zo.roa (hash: XHMY7zQy6wr71DLBIZA9qFAsJDYs54tGUJpVNoTHa5A=)
                          5: Y5tBOnYBsjtqPhDcLgPZiyIj9M4.roa (hash: 2RYCQ7+7DKVhEvwDSDftTOwFc/fPpUinfyMS4D8jTxg=)
                          6: YOwN-I--XY-TILUrPHq5w9CDRs0.roa (hash: Tl6UyGz5chIyqkC+4aY+8IzMpOpox+9jHVzHoCchbWE=)
                          7: bhx6bRQJbK4_5KO0IIRJ0ybwSaw.roa (hash: as/qS6HjB0x5pdSeNPVxPaLsP7zaGO6ndfjuFlUp2SA=)
                          8: eh2BSnNDXx41FEXbDV8ULInuLWI.roa (hash: 7l4u6AywmuvOLBschjBB2FyGGckffiZbYTBdv+G3ZDE=)
                          9: ldXu6LKJDB1I-ZmpFNOUL8AQSOc.roa (hash: 7RJU1BejIWwWtBME6/P6S3dmPtZeW5nA4GmcGUhxuxA=)
                          10: qSyqT6U8amppKFyeuWplKDvDgQ4.roa (hash: bQ6MzH911Ty487GI9eBuCFHFItUmaVVulHsJdXwl0Us=)
                          11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: 1dhBd5i1FEXPK4bTJM06FKPe5bCvijavhnmv+N0JKls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:21:90:5a:2a:42:78:7a:2b:00:80:12:11:d8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
        Validity
            Not Before: Jun 15 22:02:12 2024 GMT
            Not After : Jun 16 22:02:12 2024 GMT
        Subject: CN=9c20197892a03487f80d1f4c35e96c7de2ab11e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:39:f6:d1:e3:72:ac:fe:5c:6c:9b:05:21:
                    be:fe:c1:4d:eb:d2:ef:30:87:f4:33:ea:b6:02:1b:
                    13:d9:83:b0:27:2c:cc:16:9c:6d:97:d4:cf:84:b6:
                    0d:eb:81:39:ac:fe:84:a3:c7:d9:fb:7b:07:9a:c1:
                    c3:4f:b0:39:af:33:d2:7e:71:b8:2b:d2:f1:08:78:
                    a7:fa:ef:07:30:e3:0e:dd:a3:f2:62:69:79:d2:3e:
                    50:13:10:57:e0:80:c3:e8:8d:d8:50:d4:28:42:8a:
                    0b:2a:bf:43:87:e6:d7:ba:ae:f1:67:a4:20:40:30:
                    ec:2a:e3:3b:3f:92:f1:c3:c0:b3:4b:4d:6e:c3:7a:
                    e7:63:68:4c:7a:e5:ed:80:ab:2f:0a:55:4d:fb:69:
                    d4:bf:10:81:6b:fb:f5:18:0d:82:39:e0:9a:76:ac:
                    9d:8b:e0:dc:4e:b3:5e:ee:b3:4d:b9:a7:dd:76:ac:
                    d6:f6:0b:3e:b6:7d:f3:e6:08:05:27:d5:64:bf:e7:
                    6f:af:44:e3:ff:54:36:83:5f:9f:a6:11:b9:0a:5d:
                    6c:66:37:71:5c:e2:d3:84:ab:5d:bd:84:d7:63:c9:
                    70:0a:19:36:2c:da:1c:9b:fd:0f:e5:6b:21:3a:a9:
                    15:86:dd:31:3c:15:31:5a:55:b8:ae:a4:66:e3:0f:
                    cc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:20:19:78:92:A0:34:87:F8:0D:1F:4C:35:E9:6C:7D:E2:AB:11:E5
            X509v3 Authority Key Identifier:
                keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:04:42:9f:77:6e:ce:21:2c:8e:e0:6d:0d:38:b2:f0:7d:32:
         14:31:14:76:e7:4a:d2:3a:04:06:a9:90:2a:32:b7:25:eb:cf:
         e7:7b:9f:5c:18:df:ae:91:db:67:24:e1:99:ef:7c:44:6d:a0:
         f3:44:a4:69:b0:32:cc:0e:32:57:c5:50:a9:d5:d5:79:dc:39:
         84:83:78:e4:bd:a3:fc:ca:91:c9:f8:e9:b1:44:70:35:a8:ba:
         20:a3:44:5f:4a:7c:e0:4f:6c:da:79:8e:d6:14:a2:ae:9a:d6:
         de:f3:cf:92:c0:16:98:24:dd:43:d1:79:2d:21:82:19:de:41:
         5c:2e:f2:e6:63:1d:d3:a4:e5:66:0a:ac:39:37:ac:a0:b3:15:
         5d:e3:04:7b:b8:5e:fa:fc:2f:72:28:ef:2b:28:b2:0b:9b:6d:
         11:24:10:c3:de:a7:26:29:1c:af:19:47:7c:77:df:be:0f:14:
         58:1d:78:fd:42:ee:12:08:b7:62:9d:8d:b9:01:9d:e8:0a:36:
         85:1c:eb:24:c8:0e:95:5d:68:a5:69:35:97:f3:94:14:8b:e8:
         7e:72:a7:53:a8:30:1f:31:57:4c:87:db:5d:b4:35:71:de:05:
         03:e9:56:a9:c8:67:ac:76:a6:4b:ec:68:17:96:da:0f:70:2c:
         ca:11:f3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:59:58 2024 by rpki-client on console-fra.rpki-client.org