Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          6O4Yr+rTpGI9srsY+ImbVwgGZddqRqzihxjJoerH7eQ=
Subject key identifier:   F2:E0:9B:C5:DA:D0:72:B8:17:78:89:42:1C:C8:C8:44:45:6D:A7:B7
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       0190452F5B44D06C586820E2C5AA81E5946B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          7B
Signing time:             Sun 23 Jun 2024 13:00:49 +0000
Manifest this update:     Sun 23 Jun 2024 13:00:49 +0000
Manifest next update:     Mon 24 Jun 2024 13:00:49 +0000
Files and hashes:         1: 1-CkP3P2sf1Ypv_G7cu_FbFGaI5A.roa (hash: fEOIZphSLFPPUqisjdegyB/7bDpIGCASDC1J7yXXgEM=)
                          2: 3T8e1f6L6xHSZDA7jy5jHQHP_TA.roa (hash: RHmhdFNNnp0S7IFoSKxPxfAv912QVgsvV2w6EGkd7cg=)
                          3: F8I75rGinamNdvaRwDL0e8RafgA.roa (hash: 7esXJSpX0pKURNV7WXXRzQjrGyZpInbqF2QrGLirTPQ=)
                          4: MOH6C-4smcCKpUtyWmkfr5xd8Ys.roa (hash: 68lRyxacjm9kx2hLFoEr1Vl+extRAvCL1ScDQec3Yno=)
                          5: U1JP2MuzfSFugPsjFlFL6_kxsc0.roa (hash: IBz/FrnOV9KUQqfWB+26tXBEvOp6cEjxReGFO0wzXaY=)
                          6: a64qO5K7CkjoIWqRpzRQHF8iYTM.roa (hash: wjpH5mPzar8pksuo+XMnDQMWUAtHY+k71/jOAmx0wVg=)
                          7: bhnaTdYU4R6ZBi9dT6J5MkS2smk.roa (hash: z+DURpkPZi1+KNfwgwM9iAGLoB0HAYgtntTX0kBagU0=)
                          8: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: SDi4GlBW2+fxBv2hR3QmWM1ppIVxMcBirHshkPbAv5Y=)
                          9: oGROSml4x0mewlyC-zm4XXWt5kY.roa (hash: I4AvjYpCxX+z3B4bXtE0mIB9qvCMqMDwEt8CCX3G3f4=)
                          10: pFSML8UpDQZYC5GWogVZ_0cHGWE.roa (hash: A4Ke3Y8YMuiHc8br6ON1LdUlnmQ5C9GcnxZPOrusHuI=)
                          11: qEFvKzZJCypm7NC5Vo_LAy8mx2c.roa (hash: 9dstzrm78Ae8lqi1Mcu/meG+MXzKmephC2JxMMYAhMk=)
                          12: tuDBQSoMKmnwhB4uovh83x4jyxs.roa (hash: Whhchh8JYYLHpdAnHtF58DIiLkGlphZAVAHr3iVzLQ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:5b:44:d0:6c:58:68:20:e2:c5:aa:81:e5:94:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Jun 23 13:00:49 2024 GMT
            Not After : Jun 24 13:00:49 2024 GMT
        Subject: CN=f2e09bc5dad072b8177889421cc8c844456da7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:47:4f:63:0b:6b:7b:f5:3c:f3:cb:a3:30:
                    26:95:43:65:70:d4:51:2f:05:93:f4:21:93:e7:ca:
                    4b:0f:f6:f4:79:e8:9f:05:fe:d8:fd:86:a2:b1:f8:
                    d6:49:7e:e2:25:cd:3d:d1:51:34:98:60:3a:03:ab:
                    6e:20:a1:e8:22:83:68:81:8a:72:27:48:b7:51:0d:
                    45:3d:1e:da:05:ea:75:97:c2:c0:63:b5:a4:e9:dd:
                    fe:c2:ad:ee:45:e8:cc:55:5e:12:43:40:9d:f8:a1:
                    42:9b:e6:1a:4b:ea:c4:cd:be:35:d4:37:8c:28:29:
                    af:f8:a9:14:17:d2:22:c1:11:d4:5c:a8:42:87:8a:
                    af:35:20:64:71:97:b9:87:75:0d:0e:e1:85:e7:26:
                    b6:aa:74:50:79:eb:fb:eb:46:97:84:21:8e:25:6d:
                    a4:cb:a1:4c:96:c8:8c:a2:e4:e3:10:29:4e:b6:1a:
                    42:e4:7b:f1:e4:fe:39:e8:4d:3a:23:4f:34:e4:32:
                    8c:43:97:33:1a:62:6e:eb:53:2a:86:28:0b:29:77:
                    be:6e:95:52:e1:2f:bc:a1:7a:03:9a:f6:ef:4a:7a:
                    b7:7f:d6:e0:06:ad:a2:23:8f:43:0c:c8:f9:57:c1:
                    89:c7:af:d3:a4:aa:1a:68:66:82:c1:06:e5:4e:e7:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E0:9B:C5:DA:D0:72:B8:17:78:89:42:1C:C8:C8:44:45:6D:A7:B7
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:64:cb:7a:3d:8a:b5:73:82:b8:06:34:f2:62:86:a8:4f:d3:
         ee:6d:ad:88:9f:2f:ce:26:4d:24:d3:ff:05:6f:47:da:d0:dd:
         f3:3c:6a:b3:d6:79:8e:a6:0f:53:fa:fd:05:c0:58:5b:0b:69:
         bd:7f:c6:2b:57:39:13:1b:a7:14:6d:6f:85:e3:7f:41:8a:5d:
         45:1b:6e:93:72:51:da:78:7c:d8:6f:83:e1:ad:b4:02:6e:a8:
         55:d6:87:15:bc:11:ec:65:37:04:7e:33:ec:18:c5:9a:a9:ba:
         e8:f5:f3:17:d1:06:67:ef:2f:a5:00:86:77:37:49:33:70:dc:
         af:09:c3:18:15:37:7d:3b:ee:8b:fb:d8:d5:cb:36:6a:c6:ff:
         fd:cb:12:9a:a8:72:52:d9:b3:50:d4:27:24:ad:60:3b:18:80:
         c1:ef:11:87:ee:bb:02:6f:02:bf:36:94:43:1a:47:e7:cc:61:
         37:06:9c:b2:bc:60:ee:34:90:e4:0c:e8:5c:2d:b7:8a:77:cd:
         ca:7f:45:d2:40:6e:38:a3:76:83:ce:8c:d1:15:82:a3:bb:f1:
         a4:c8:c7:de:c9:1d:5c:fe:85:4c:47:ff:1a:d7:6f:3f:e0:6a:
         df:97:fc:95:ce:0e:73:c7:11:f0:4e:f1:c8:51:50:81:17:a7:
         db:0e:e1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:01:26 2024 by rpki-client on console-fra.rpki-client.org