Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
File:                     MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json)
Hash identifier:          mLYAvo3auTV7rnqt/4FCALo1iRBoy4AnhM4V1fBSpkQ=
Subject key identifier:   6A:FB:8C:66:0F:4A:EF:13:94:3F:D8:A4:1D:36:EE:14:D1:AD:88:A4
Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64
Certificate issuer:       /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
Certificate serial:       0190448BF4EEAB259F9DD35ED92CE47CE1CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
Manifest number:          11DB
Signing time:             Sun 23 Jun 2024 10:02:21 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:21 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:21 +0000
Files and hashes:         1: 9lTT0rmSAXNh6pI1sy9hUULy3tw.roa (hash: BRyAdpR0YLLK9uYHXQG8vQmq4EE5r8ozlviun4mFfRc=)
                          2: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: Nc90HKGyns7tIXUgWSTYLbcckvB3d2JIvUBiBSp2S6Y=)
                          3: PwYmPRGdhIdaMXgFM7wNik7wOTI.roa (hash: dejVYZd1n5hhf2GBODzyK70eMQi0nCnn43Jh2VNOBms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:f4:ee:ab:25:9f:9d:d3:5e:d9:2c:e4:7c:e1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464
        Validity
            Not Before: Jun 23 10:02:21 2024 GMT
            Not After : Jun 24 10:02:21 2024 GMT
        Subject: CN=6afb8c660f4aef13943fd8a41d36ee14d1ad88a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:93:a5:7d:4e:b0:30:72:99:9e:c7:f0:39:
                    1d:dc:35:82:46:21:27:05:de:64:da:ec:09:e7:c1:
                    4e:32:ae:03:56:41:d9:b8:a2:ba:c5:ed:a6:cd:2a:
                    a1:8c:b9:90:6d:f3:0b:d1:27:7e:c2:40:87:3c:d7:
                    d0:fe:9b:ea:4b:ed:d5:18:38:2a:fd:cb:30:f2:42:
                    25:50:8d:44:28:15:08:80:3a:69:5f:a2:d2:d9:2d:
                    4e:e9:46:48:30:9e:a4:9f:0f:d9:bd:c2:80:b8:7d:
                    3d:7b:91:9a:06:97:ac:f9:b1:02:b4:06:aa:9a:e2:
                    51:67:bb:f6:f7:1f:59:47:08:8c:11:a9:26:0e:83:
                    67:f9:34:1f:4a:04:fa:dc:8b:71:f5:b4:0c:a2:97:
                    4e:2a:e6:b5:0a:c0:5c:35:af:0f:9f:a8:fd:e0:1f:
                    cf:4d:b7:b5:48:3d:3b:cb:53:fe:5a:4f:b6:48:01:
                    ad:8d:17:86:41:b7:a9:96:9b:6e:99:a5:b8:8f:83:
                    2e:3f:80:da:0c:71:07:7e:87:58:cd:23:ba:b8:a2:
                    c9:3d:58:7c:2a:14:18:76:d5:20:cd:b3:dc:2e:b2:
                    1c:35:8c:81:95:d6:f2:33:af:d7:d9:c6:51:32:e7:
                    9d:d0:71:89:ab:fa:b4:ba:7b:52:ab:25:7a:24:02:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FB:8C:66:0F:4A:EF:13:94:3F:D8:A4:1D:36:EE:14:D1:AD:88:A4
            X509v3 Authority Key Identifier:
                keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:5b:1c:8f:bd:e9:83:1c:f1:a4:f9:ee:cd:a2:b6:ae:56:
         09:12:98:76:df:fa:15:ae:3b:2e:af:2d:e1:5f:a5:f1:52:b5:
         1a:7f:55:d9:78:d5:7e:47:e1:5e:68:89:5c:c2:13:0e:dc:21:
         6d:5a:fd:77:a6:13:05:3a:48:64:8c:13:4a:6d:f9:03:85:03:
         5b:14:78:34:5a:cf:75:b9:7e:b9:99:3f:73:d4:ba:e7:5c:bf:
         20:17:aa:7d:7a:4b:97:b4:8e:62:32:fb:c8:27:02:85:34:5d:
         09:4d:67:49:77:d6:46:39:c7:fe:fe:39:3e:c5:e8:d4:9f:c0:
         0a:a5:1c:8a:5b:f4:79:95:e6:56:e0:56:70:21:4a:69:e6:b9:
         fa:71:1a:f4:33:6f:6a:ac:e2:73:d1:68:61:65:25:08:fe:70:
         3f:08:ad:d1:0d:32:46:6e:1e:ee:59:0c:b0:a0:39:da:6f:73:
         00:28:d8:a5:c5:a4:a4:32:4e:2e:3c:ce:ce:84:38:49:4a:60:
         e6:e9:dd:98:5d:91:8a:d2:05:f7:cb:3a:c9:5b:e1:69:c1:e7:
         d7:c5:65:7b:3e:d3:75:bb:53:a0:da:05:9c:a9:97:24:87:10:
         f1:d3:33:24:43:53:ac:3f:b5:41:38:58:8e:aa:54:cf:4a:da:
         13:d3:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:59:57 2024 by rpki-client on console-fra.rpki-client.org