Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File:                     r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier:          4gDEDz/gHtQ4qqt+KCSyQvirIQzkk7TmerF5pJFP15w=
Subject key identifier:   78:1D:D6:FF:11:0C:18:69:CA:01:37:E6:B4:C4:0D:88:67:32:4A:6D
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer:       /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial:       01901DEB5467E64E168C1BD60EFB0A23FB5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number:          0624
Signing time:             Sat 15 Jun 2024 22:01:19 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:19 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:19 +0000
Files and hashes:         1: 1VBYGwFuuqZwkirkbCwCeghTmzM.roa (hash: naAWt0Vnm9Zfz50WxlVwDqFDYAxil/BDxkCZ/KqN01I=)
                          2: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: aj6J0+frdKWdN/6W6mc2S85UOwV5DRgRAA+JJdWsgvg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:54:67:e6:4e:16:8c:1b:d6:0e:fb:0a:23:fb:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
        Validity
            Not Before: Jun 15 22:01:19 2024 GMT
            Not After : Jun 16 22:01:19 2024 GMT
        Subject: CN=781dd6ff110c1869ca0137e6b4c40d8867324a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:ff:bc:87:e6:70:63:96:8b:50:d3:4d:ad:
                    be:50:6f:50:95:2e:62:5e:64:9b:70:af:fa:5c:32:
                    d8:13:6e:68:52:63:10:4d:74:f2:b4:05:bb:d9:72:
                    85:43:8e:9e:fd:f7:91:78:bc:76:ea:da:21:62:0d:
                    19:cc:2f:ce:f0:78:f1:00:6e:ec:8a:1a:83:67:40:
                    b1:a9:07:76:d4:4f:52:4e:b3:f4:d6:3f:7f:81:95:
                    a2:5d:86:18:1e:28:14:86:d3:4f:b2:c9:eb:37:09:
                    41:75:0b:06:3a:56:88:2e:64:46:cd:84:35:ad:d2:
                    bd:81:35:07:8c:75:2a:54:79:b1:73:1f:9c:28:6a:
                    95:b8:2b:1a:fe:4c:a4:41:99:dc:5b:71:06:59:c0:
                    ac:fd:2f:ac:0b:55:de:d2:96:9c:36:42:dd:d5:eb:
                    95:dd:ab:26:6d:26:0c:d3:bd:3e:e9:41:be:cc:46:
                    13:ae:21:77:91:91:ea:70:ea:ae:d1:db:05:55:0e:
                    c4:5d:f6:04:17:12:f1:c7:86:2a:16:26:e7:37:87:
                    16:e0:a0:c2:b8:62:e6:a8:05:94:4a:6a:8d:bc:1e:
                    64:0d:5b:df:2f:75:c6:b4:81:ed:64:2c:53:31:df:
                    d2:69:a8:03:63:ff:04:4b:45:a3:85:e3:e6:48:52:
                    73:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1D:D6:FF:11:0C:18:69:CA:01:37:E6:B4:C4:0D:88:67:32:4A:6D
            X509v3 Authority Key Identifier:
                keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:66:c2:66:af:db:27:2d:ba:c0:78:25:f7:5a:54:48:11:
         3f:14:df:80:b0:a7:f1:b3:57:36:24:fe:31:ef:0d:10:73:1c:
         b7:fb:9c:d8:b9:c6:d1:5c:b2:d9:f1:f7:45:ae:f0:45:06:6f:
         ef:d4:85:67:c4:ba:e8:09:ae:51:1e:9c:5d:f0:39:9b:af:f1:
         46:09:7a:ce:fe:31:e8:39:d3:bf:bb:74:0d:0e:b1:fc:90:cb:
         f3:41:8c:80:d6:23:70:33:97:ad:83:68:37:87:2e:2d:ac:5a:
         d3:4a:5e:0f:57:a5:02:75:6e:63:ed:08:d5:48:e0:c9:b0:bc:
         c4:5c:a8:93:39:0b:50:9f:79:39:56:72:b3:16:8b:8c:ea:62:
         3e:28:8b:85:d0:ed:8a:37:31:ed:59:46:c4:f3:8b:52:d4:83:
         00:dc:5c:18:0d:54:74:d9:75:8d:1a:25:65:2c:af:1b:20:94:
         bd:c5:fa:58:dc:69:ba:74:c4:70:d0:4f:2d:a7:4d:3a:89:1b:
         45:4f:b7:58:eb:86:76:5c:73:de:ed:3a:34:2b:c5:1f:80:f4:
         2e:f6:69:fa:b7:cd:bc:29:61:3a:b5:a4:31:86:d9:82:9f:c8:
         73:e2:f4:8f:8c:b0:9d:a0:6a:f4:00:c8:5a:9b:0c:eb:87:e5:
         19:2e:11:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:48 2024 by rpki-client on console-fra.rpki-client.org