Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File:                     rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier:          lc1TsETJw2JDs+Ps29atMMdlb0R3vJJdnuHfb396kDI=
Subject key identifier:   71:52:A0:EC:92:5D:73:0D:0B:D3:0E:56:A1:D8:30:CF:E2:5B:A6:5D
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer:       /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial:       01901BFEB5395E8763AE3F9AFC3CEA1864FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number:          0A59
Signing time:             Sat 15 Jun 2024 13:03:15 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:15 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:15 +0000
Files and hashes:         1: NlGTgRxSWyTIyIz4YsPoE9DjZtk.roa (hash: zbc1A2J5SGirVHi69d9ev+xxHYfp6fZBmbAL6LfG8gg=)
                          2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: rDgJxgmUx/Z0AzvMu2Gx9bPRfr9+hrcoJZYqxISojmU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:b5:39:5e:87:63:ae:3f:9a:fc:3c:ea:18:64:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
        Validity
            Not Before: Jun 15 13:03:15 2024 GMT
            Not After : Jun 16 13:03:15 2024 GMT
        Subject: CN=7152a0ec925d730d0bd30e56a1d830cfe25ba65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:00:6f:30:c2:20:a5:c1:c6:c4:ca:fb:1f:
                    eb:29:e7:fb:a6:83:e9:ad:11:39:a4:23:44:06:6e:
                    61:83:31:5c:e9:19:30:43:5a:78:07:b8:7e:3c:16:
                    de:a7:65:3c:45:96:f1:11:2c:47:1a:7c:b7:b5:5a:
                    7b:d4:1d:b5:6e:81:84:ab:32:36:df:a6:47:fe:20:
                    7e:d9:cb:6c:0c:c6:0b:7e:88:aa:8b:1c:d4:99:1e:
                    2c:e8:d6:ee:01:f7:32:1c:ac:59:b4:32:a7:2d:f3:
                    df:a0:3d:9a:c4:4c:79:39:ce:ef:e0:80:56:1c:75:
                    b5:ce:ba:60:52:40:46:b4:c0:79:61:4c:af:3d:02:
                    16:80:62:2c:27:9b:ff:76:b5:e0:54:0e:7f:7b:5b:
                    87:29:2b:be:1c:00:15:65:de:e8:e7:b8:2b:4e:e8:
                    e7:56:f3:1b:c0:3b:15:bd:cb:b6:8f:8b:7f:a5:ce:
                    9b:34:37:4a:7f:f0:39:25:54:a8:9a:1e:63:77:ba:
                    51:da:49:f2:55:16:da:96:c7:36:78:b0:65:7e:c1:
                    31:d5:c0:49:0a:af:49:12:d4:4e:e0:59:38:a9:0e:
                    9e:33:a5:3a:55:9b:34:c4:12:56:43:76:8c:92:21:
                    0e:2f:67:f5:7a:d3:8b:d7:70:66:67:5a:36:29:70:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:52:A0:EC:92:5D:73:0D:0B:D3:0E:56:A1:D8:30:CF:E2:5B:A6:5D
            X509v3 Authority Key Identifier:
                keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b0:18:7c:c1:af:d6:8f:11:b7:5e:ca:ea:c3:54:4f:33:11:
         6a:cb:d6:c7:43:59:95:b4:1a:bb:68:14:25:ef:7a:c3:1f:2b:
         31:a0:dd:bf:9d:b7:86:74:12:de:95:98:b3:76:64:f4:de:dc:
         44:19:a2:0a:30:6c:d9:ee:35:1c:27:cf:b2:87:1a:68:dd:49:
         4c:f7:8d:1c:bc:04:55:f2:b7:1e:69:2c:d6:1f:ef:18:75:fd:
         7a:36:d5:9d:6f:cd:49:dc:92:de:c1:ff:b2:02:05:4b:02:45:
         b2:71:a0:d3:55:74:ed:23:40:39:91:f9:53:b5:a3:f7:6e:64:
         c3:f2:76:d2:f2:e0:2b:d0:84:47:3f:00:f0:82:d6:66:10:b4:
         36:17:06:54:98:59:58:fe:2a:63:47:48:52:ca:74:cd:71:52:
         b7:b3:66:78:e7:92:ab:56:7d:e2:9f:2a:71:b1:ac:3c:da:c9:
         8c:4b:68:fe:db:98:d3:8a:e0:02:f5:13:82:2e:25:7f:1e:d0:
         ec:ff:f8:ca:86:4a:31:4c:4e:70:05:e4:60:95:c3:a6:66:70:
         32:be:7d:5f:ee:69:9e:91:47:70:4b:b6:17:30:33:45:cc:c3:
         02:3b:80:6d:a7:8c:2c:30:82:5e:80:5e:3f:3a:52:6a:0b:d4:
         e6:c5:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:50:22 2024 by rpki-client on console-ams.rpki-client.org