Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
File:                     _1opzNodyKihY6wneB6OxZfnbbk.mft (raw, json)
Hash identifier:          1Uk/nzs5fY3+9092a0XaLTd42f/lkp+7DNTrhkqz9hc=
Subject key identifier:   E6:F9:AA:E5:20:D9:DB:E4:69:D9:AA:AA:2C:E8:51:DF:56:CD:07:13
Authority key identifier: FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9
Certificate issuer:       /CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
Certificate serial:       0190343BFD116AA61411E965C83CBB235B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
Manifest number:          11D2
Signing time:             Thu 20 Jun 2024 06:01:04 +0000
Manifest this update:     Thu 20 Jun 2024 06:01:04 +0000
Manifest next update:     Fri 21 Jun 2024 06:01:04 +0000
Files and hashes:         1: OhwAiRNpDTCkNFwuIs2CxbC9kGI.roa (hash: 7+2unKH4JNpun1PsR/SQn7Cw+z/tN0QBXMC+wqFgm9U=)
                          2: _1opzNodyKihY6wneB6OxZfnbbk.crl (hash: 3izeTqF9TErQnJ1su8cRXbLKzAGcXKubDJCILsNVRMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:34:3b:fd:11:6a:a6:14:11:e9:65:c8:3c:bb:23:5b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff5a29ccda1dc8a8a163ac27781e8ec597e76db9
        Validity
            Not Before: Jun 20 06:01:04 2024 GMT
            Not After : Jun 21 06:01:04 2024 GMT
        Subject: CN=e6f9aae520d9dbe469d9aaaa2ce851df56cd0713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a6:ca:4e:cd:14:fd:03:15:d5:9d:e1:0b:82:
                    77:a7:6e:9f:a1:d5:93:fe:5e:da:c1:20:13:2e:1b:
                    f9:01:aa:b6:c1:2c:07:b5:dc:48:7e:28:40:9f:b1:
                    6b:a0:61:74:1c:77:92:d4:8a:d8:32:4d:8b:95:98:
                    dd:e2:1d:54:d2:4a:f8:3f:01:de:ac:dd:3f:c8:6e:
                    85:69:82:d6:ff:c2:b2:3a:10:6c:d1:c5:fd:f8:9b:
                    ca:48:af:70:ca:f5:45:0c:e4:d5:ce:4c:f4:b6:65:
                    4d:e3:dc:73:5d:b1:0e:5b:ce:64:49:84:8c:3e:ab:
                    bc:c2:74:ab:d9:15:b8:ed:8e:d7:f2:1d:b0:d5:9a:
                    e2:f4:55:8a:46:44:83:49:f8:3d:73:23:5c:a5:58:
                    57:64:c7:cf:64:0c:a6:2d:66:c5:34:be:eb:13:8d:
                    7e:63:d1:c7:da:41:8f:a7:16:53:37:f9:7e:ff:09:
                    32:ed:3e:fc:4a:cf:df:09:2d:cd:fd:2c:10:fe:fc:
                    6b:2b:8e:f1:8e:bd:e6:b6:8c:43:d0:33:78:af:36:
                    2c:fb:53:c1:dc:5c:7f:2e:5b:fd:ec:e1:d1:bb:db:
                    96:95:75:c1:4f:ba:8a:12:de:19:6f:04:83:49:15:
                    55:46:1d:a6:52:b8:a3:05:ff:7d:82:02:0f:40:f1:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F9:AA:E5:20:D9:DB:E4:69:D9:AA:AA:2C:E8:51:DF:56:CD:07:13
            X509v3 Authority Key Identifier:
                keyid:FF:5A:29:CC:DA:1D:C8:A8:A1:63:AC:27:78:1E:8E:C5:97:E7:6D:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1opzNodyKihY6wneB6OxZfnbbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bf17a6-d61b-493d-9a84-9bc55f62daba/1/_1opzNodyKihY6wneB6OxZfnbbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4b:62:c8:f6:e9:6a:fb:ae:b3:42:57:28:a9:ea:06:66:28:
         f3:fc:04:e8:fd:eb:93:f9:db:3e:26:1c:32:06:cf:7a:64:59:
         5b:d0:a0:52:47:87:32:8b:eb:e4:02:28:85:1a:76:b5:1e:52:
         70:76:c2:32:f9:ec:7a:98:55:60:a8:d8:0d:0b:9c:40:aa:08:
         73:f6:6d:ee:9b:c8:3f:ab:b7:e6:f1:aa:25:16:cc:c3:38:3d:
         e3:19:a7:cc:24:48:21:e6:e9:88:0b:8f:a6:95:5d:7e:4c:7c:
         d2:8b:07:ff:98:8f:fc:8b:a6:ea:8f:29:57:cd:5d:86:83:36:
         1d:d6:38:3c:80:fd:dc:79:4d:0e:ad:7f:53:f4:5e:7f:ca:14:
         6b:6e:32:24:d4:f8:cb:91:9a:79:5b:f5:1a:f2:c6:f0:18:2b:
         1a:4d:6e:68:df:5c:8a:29:eb:b7:d2:75:cf:1f:43:58:ce:c9:
         9a:00:2f:26:10:58:cb:bb:3e:a2:cf:70:28:ea:1b:6c:d4:53:
         50:55:e8:55:bb:e7:da:b6:57:9d:2d:29:39:e6:eb:49:e6:8e:
         f1:a9:71:68:f6:7e:a5:48:8e:70:ee:a5:2e:26:10:57:a9:be:
         21:37:58:b0:39:74:9d:cc:a4:4b:a8:4b:a0:f7:97:65:a2:18:
         43:1f:06:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 09:58:54 2024 by rpki-client on console-fra.rpki-client.org