Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File:                     MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier:          fkASy5npbVTjtfBpMMMS74ikAay0eT2WPR8doUjKNn8=
Subject key identifier:   22:9D:61:59:65:85:3D:13:EB:1B:BA:5A:9A:65:69:C4:E6:36:C7:63
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer:       /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial:       01901DEC9EF536A2B04CBEAB69242A05F11A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:02:44 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:44 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:44 +0000
Files and hashes:         1: 9lTT0rmSAXNh6pI1sy9hUULy3tw.roa (hash: BRyAdpR0YLLK9uYHXQG8vQmq4EE5r8ozlviun4mFfRc=)
                          2: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: 4zfFBCKLf3AVmD05xYaQ1h/w4H2KQ3EoCHfa8a/2/iQ=)
                          3: PwYmPRGdhIdaMXgFM7wNik7wOTI.roa (hash: dejVYZd1n5hhf2GBODzyK70eMQi0nCnn43Jh2VNOBms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:9e:f5:36:a2:b0:4c:be:ab:69:24:2a:05:f1:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
        Validity
            Not Before: Jun 15 22:02:44 2024 GMT
            Not After : Jun 16 22:02:44 2024 GMT
        Subject: CN=229d615965853d13eb1bba5a9a6569c4e636c763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:f5:75:12:31:e0:12:91:dc:44:af:fc:3c:
                    f4:02:22:5d:1c:46:50:00:7a:1a:c9:2a:f3:56:bd:
                    61:50:b7:97:ea:64:b9:6f:86:05:96:31:05:d2:d3:
                    db:4a:54:34:70:81:7e:5d:17:60:8b:a7:66:38:f7:
                    f2:f5:f9:c9:05:1e:1c:24:47:f3:e6:5b:af:79:17:
                    ff:8a:ee:80:f7:29:42:d3:63:e1:6c:67:41:7b:c6:
                    93:61:55:70:d4:67:05:77:97:a8:d7:c1:ca:54:80:
                    26:01:8a:72:a1:19:34:20:2e:69:0d:c8:2f:c8:6d:
                    86:12:80:be:b1:6c:7b:9b:59:26:72:58:a9:8f:b0:
                    b9:5a:0f:a4:03:76:2b:9b:61:c4:41:9f:23:50:77:
                    25:89:6d:2a:aa:52:1e:26:f3:a1:5b:69:e9:ea:06:
                    fd:f8:38:96:8f:f5:d9:26:aa:5c:f0:c6:5d:a5:04:
                    12:4f:6c:31:e3:ec:35:9c:27:fb:cb:31:8e:1b:2f:
                    25:52:2e:11:fa:22:f5:11:df:36:a0:50:96:44:8b:
                    af:a1:2a:1d:ac:75:15:6d:7b:c6:53:77:a9:4a:67:
                    aa:cb:cf:b5:c3:d9:a3:8e:14:85:e4:65:e6:57:ef:
                    ed:c2:18:f6:87:43:5c:e3:ce:05:89:ad:94:87:6d:
                    29:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9D:61:59:65:85:3D:13:EB:1B:BA:5A:9A:65:69:C4:E6:36:C7:63
            X509v3 Authority Key Identifier:
                keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:69:21:73:c8:7d:ca:82:1e:9b:63:c6:ff:6f:90:1a:2b:bb:
         05:d5:ef:e4:27:a2:ff:db:f2:1d:c1:ac:bd:92:bf:1c:ad:3e:
         d0:4a:3c:d9:12:46:76:66:1d:a5:62:5f:fd:8e:21:70:3b:1f:
         80:d4:27:08:4e:b6:7c:96:a4:ba:4d:bb:dd:35:59:92:6c:3c:
         e0:f1:57:cc:19:cf:54:b0:a9:03:28:4e:dd:84:f6:c6:79:67:
         1e:83:59:8f:f2:95:d0:1c:ed:03:21:45:42:03:0e:0e:5e:0a:
         a1:09:51:a5:00:0c:00:12:10:e6:36:50:0b:3e:7f:5c:a7:c7:
         dd:11:72:73:cb:22:f7:5e:eb:53:69:5f:94:c5:1d:d5:04:88:
         0c:d2:b7:03:c0:d0:c7:8c:18:19:f3:94:92:b2:df:8f:27:fa:
         b1:e9:fc:7d:97:76:f2:9d:0b:a1:0f:8a:2c:f9:bf:56:65:a2:
         c5:b8:2d:46:bd:1f:57:5f:8b:b0:fe:18:58:7e:04:b7:00:9a:
         bd:01:8d:54:d3:f1:03:e4:cf:a3:dd:bd:e3:3d:2c:53:b9:96:
         6a:3a:e5:f9:70:10:b4:55:70:68:9b:29:ad:ae:73:87:72:b4:
         ed:7a:2c:6c:05:b5:c2:47:99:eb:06:eb:08:c1:79:e2:d0:da:
         29:1f:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:58 2024 by rpki-client on console-fra.rpki-client.org