Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
File:                     bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json)
Hash identifier:          J+/YkuS3y+D/Jr46wzmg0lhRWmFwW7y+MZbXEHgA9aU=
Subject key identifier:   74:C8:DB:78:03:24:7B:57:81:D3:BE:90:E8:D5:46:CE:CD:B0:A0:BE
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Certificate issuer:       /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial:       01901BFD1C0A3B1931A928FFF7F510E0E9A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
Manifest number:          1023
Signing time:             Sat 15 Jun 2024 13:01:30 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:30 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:30 +0000
Files and hashes:         1: G_2t5ELAYTWK-4Px4DzSlswmT1o.roa (hash: h2obMrAPnDhT/njIesq2w9uJRigsX2QhRclFq3Dy/TU=)
                          2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: +VQMXajbABYN7OOZ1M7Q6Ckx96ls3Cd2ySiMd7zhONk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:1c:0a:3b:19:31:a9:28:ff:f7:f5:10:e0:e9:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
        Validity
            Not Before: Jun 15 13:01:30 2024 GMT
            Not After : Jun 16 13:01:30 2024 GMT
        Subject: CN=74c8db7803247b5781d3be90e8d546cecdb0a0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:0a:f4:78:c1:a5:42:fc:53:b2:e5:6c:7d:
                    39:ce:0e:fd:b6:98:dd:ca:47:5d:4f:3a:96:8e:32:
                    95:b6:b5:d5:6e:c7:03:df:ae:bd:1d:62:e2:bd:7a:
                    37:d5:28:3b:a9:ba:92:5d:97:57:3d:e1:b0:e0:6a:
                    81:82:91:8a:e1:75:0e:b6:0e:cd:49:12:1e:8b:e4:
                    ac:ff:fc:ed:eb:c4:1f:d2:08:67:a3:60:af:04:16:
                    b7:bd:a5:f6:23:c9:f8:c3:6a:3c:25:49:a3:a4:11:
                    c5:1f:cc:17:04:92:aa:da:6d:52:ca:e7:a4:1e:f2:
                    36:a9:45:54:38:04:30:d7:c2:e2:13:b5:be:2c:8a:
                    80:2e:2e:0f:34:22:3e:b5:0b:e0:88:3d:45:51:0f:
                    9a:51:44:68:b1:4e:bf:68:16:24:53:36:91:ca:fc:
                    0a:00:40:53:fb:13:cf:05:39:ef:b7:7c:ec:f4:c2:
                    de:ba:27:f3:fd:83:0a:e7:d4:2e:09:89:63:c2:91:
                    e5:68:c2:d6:5e:11:42:f9:a5:33:63:77:1e:8f:27:
                    04:0d:53:2e:b8:74:b9:60:a0:ba:dc:12:e3:99:cf:
                    30:41:0b:2c:8c:e9:e0:34:97:f0:9b:c4:0b:b0:c1:
                    5f:a7:38:89:ad:8d:51:70:7c:e0:69:e4:ce:64:43:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C8:DB:78:03:24:7B:57:81:D3:BE:90:E8:D5:46:CE:CD:B0:A0:BE
            X509v3 Authority Key Identifier:
                keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:47:0e:17:f0:22:34:88:2c:47:2a:70:f7:e3:d4:75:c4:25:
         12:e7:3f:62:e0:ce:3b:f8:b3:a1:e8:97:a0:32:92:8f:07:43:
         e4:fc:d7:09:d0:84:c1:5f:72:6e:88:ae:c9:d1:72:24:99:33:
         4e:cd:fb:e9:4f:ca:b9:6a:2e:a9:f4:c8:a5:63:31:a9:3c:22:
         dc:76:62:08:1c:40:96:4b:fc:0d:49:fe:e2:ef:af:58:57:5b:
         66:fe:8c:8b:71:78:3f:75:d9:a5:17:ae:29:05:42:14:a0:ed:
         0a:42:e6:cb:4b:24:7a:c6:5e:d8:ed:a2:2e:fb:77:75:1b:37:
         2b:40:51:d4:4f:6c:b7:97:83:9e:e0:0a:39:6d:a0:2b:9e:18:
         17:a3:f4:94:16:19:9e:88:1a:43:13:f0:dc:54:dd:1a:02:af:
         50:ad:41:e9:91:26:9f:7c:ac:ba:4a:a5:66:f7:95:20:8b:dd:
         3d:7d:37:05:ce:98:ae:7a:51:8e:ca:d8:69:5f:95:2a:9d:86:
         75:11:ef:bb:0b:46:a7:15:5d:6e:fc:7b:2c:56:6e:7a:cd:8a:
         76:ff:bf:66:ad:f4:03:e6:28:96:d4:02:56:96:28:65:19:32:
         bf:9c:d5:31:06:49:64:6c:fa:e1:3d:37:ef:5b:42:e0:2a:74:
         0c:d0:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:08:06 2024 by rpki-client on console-ams.rpki-client.org