Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File:                     K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier:          rcBQ+wqeXG+FykKLam7q0SWS/kLeNitAOAOUmZe/fGs=
Subject key identifier:   56:CD:46:28:3D:A0:89:F9:FC:B5:BC:DE:4A:CB:45:83:1C:C4:1A:86
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer:       /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial:       01901DED83217D0F2E6A1E22D6B8C0DD5BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number:          0990
Signing time:             Sat 15 Jun 2024 22:03:43 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:43 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:43 +0000
Files and hashes:         1: 1uT0U-OBMjtzpddsJ6jfsq-SE9M.roa (hash: /f0vrr808ifIDtJxA5PEwWMeOaFuwEhM/WlsbfyWdpM=)
                          2: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: sCV9dEct8HPI0DjlJRQQK1wWW574eafp+wn3orTCJhM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:83:21:7d:0f:2e:6a:1e:22:d6:b8:c0:dd:5b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
        Validity
            Not Before: Jun 15 22:03:43 2024 GMT
            Not After : Jun 16 22:03:43 2024 GMT
        Subject: CN=56cd46283da089f9fcb5bcde4acb45831cc41a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:dc:20:45:ac:20:dd:2b:24:a3:d3:af:ac:
                    62:f3:49:0c:5c:94:0c:80:76:21:53:21:9b:a6:1d:
                    c7:7b:1d:a1:12:d3:56:4b:71:c9:f4:e1:0f:e2:32:
                    34:c9:82:77:50:3c:a3:12:3d:1d:99:c6:66:17:14:
                    f2:33:f9:9d:db:2b:3d:5e:66:5d:dd:1c:e1:d8:48:
                    7b:98:62:b3:be:e7:81:4d:85:ea:a2:dd:c1:68:e7:
                    65:41:fb:80:74:02:26:0e:b9:cc:2a:81:27:e9:75:
                    64:b2:94:00:d1:a2:9b:b0:3a:4a:b4:77:48:b0:6e:
                    7e:d8:83:0c:7d:01:4b:ad:9e:37:56:60:31:3c:58:
                    c1:31:e4:19:5a:aa:4d:92:d0:48:18:66:4e:3c:28:
                    ff:8d:b5:2a:70:19:b3:be:71:67:ad:fa:1e:ce:80:
                    32:c8:c3:ce:6a:9a:a7:62:63:8c:bb:84:2f:4b:86:
                    cd:bf:e2:e9:14:f1:37:45:48:10:c3:33:b8:3f:d7:
                    e4:8e:fc:dc:58:70:9c:e7:98:a1:81:a2:ba:e5:29:
                    b5:ff:81:85:74:91:bb:fb:a2:1c:77:a6:f0:03:28:
                    cf:c2:30:db:8c:0c:bf:58:7c:09:2f:a7:9b:f2:01:
                    2a:fb:e1:37:2f:16:62:ef:60:5d:8a:ae:0e:65:98:
                    4b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CD:46:28:3D:A0:89:F9:FC:B5:BC:DE:4A:CB:45:83:1C:C4:1A:86
            X509v3 Authority Key Identifier:
                keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:91:36:6b:54:b7:6c:5c:b2:66:a4:d1:8c:f6:01:64:2c:7e:
         69:0d:48:95:c9:c2:4c:12:57:29:0b:4a:f7:83:aa:f5:3e:3a:
         8b:67:ef:3b:b5:de:66:c6:26:ac:69:42:24:30:30:e8:49:87:
         ef:b3:0e:ce:42:99:08:1e:1e:ad:53:b8:fb:60:59:05:08:25:
         c2:8c:c3:54:38:17:b8:5f:47:db:e8:fb:77:e6:07:29:36:4f:
         ad:9c:a5:68:d4:c6:90:8d:2e:d5:2f:35:27:3a:34:8a:ed:b9:
         c9:cd:44:ee:17:27:09:bc:10:32:b0:d3:21:e1:96:30:b5:8b:
         03:ff:ae:c7:62:64:e6:7e:64:d7:4d:15:d4:2a:96:d7:e6:87:
         db:39:55:2d:a4:1f:59:ec:92:ca:fa:35:d0:74:ed:3f:fd:d2:
         60:77:d2:fd:e2:74:02:6f:0d:41:6d:ef:e2:b4:f3:57:cd:5f:
         b9:2f:31:64:62:dc:f6:4c:af:ac:b3:f3:6e:1c:df:ac:ad:1a:
         61:b8:91:ea:4f:78:92:67:35:1f:ec:fb:68:4d:2a:b2:41:3d:
         b3:95:56:ad:cd:ea:40:4f:20:0d:8f:f6:5a:b6:4c:15:71:50:
         39:d5:b0:eb:88:2d:a2:4c:f4:a8:66:17:85:de:f8:05:53:f0:
         fe:3e:e5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:56:15 2024 by rpki-client on console-ams.rpki-client.org