Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
File:                     xn4qRuNPSRQzyLYvMZuQK9396DE.mft (raw, json)
Hash identifier:          MhaM1kEtxvFL++WGIl7OXRvuoM4QkACSMmb3PXMvy5Q=
Subject key identifier:   65:63:43:DD:09:18:8C:81:7B:EC:98:49:7C:B5:47:E5:0D:CF:5A:F1
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Certificate issuer:       /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial:       01901E901AC6059F76E50D68DF1B18684438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
Manifest number:          0EF9
Signing time:             Sun 16 Jun 2024 01:01:18 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:18 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:18 +0000
Files and hashes:         1: 46JMDzgygP8yVSQnUwnu_ScpyHQ.roa (hash: u6yXT49rOvOPXdloG/Btq422oOntzmV18qOsV5UcTxo=)
                          2: 5KcLRy-cZuSsgteyBc4ZCpbOBgE.roa (hash: vlMY9M8ZCYNSJr7C0tbuNcxuWWhYbZY+IB3rhRzuBaE=)
                          3: KssG4Wky6VtFwLpOlwssyh1QkTY.roa (hash: qjnKtpo9HoXqxoz/mmiU7Cos4RpZ169yBf/C4pFEPK8=)
                          4: xn4qRuNPSRQzyLYvMZuQK9396DE.crl (hash: TTzHKiplkUhZ3e9vLpFoOMkqs+/O9woUXGEFNV1/UNQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:1a:c6:05:9f:76:e5:0d:68:df:1b:18:68:44:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
        Validity
            Not Before: Jun 16 01:01:18 2024 GMT
            Not After : Jun 17 01:01:18 2024 GMT
        Subject: CN=656343dd09188c817bec98497cb547e50dcf5af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:ae:53:7b:c7:c3:df:e9:c1:d7:42:18:6e:
                    14:3e:e7:04:d5:10:14:a9:62:d0:77:ca:be:c8:c8:
                    d6:62:ee:2d:01:39:d9:47:0c:d0:ac:e9:f6:d7:cc:
                    95:59:fb:63:6e:fe:7d:a8:e6:aa:bd:d8:c5:16:a5:
                    12:8b:de:ac:2b:4a:13:c3:4a:d2:da:19:40:35:b4:
                    89:a9:ce:06:9d:6d:a9:8e:9a:2b:1f:ab:be:87:77:
                    72:87:e7:af:66:4b:6b:89:e5:e1:43:6f:6a:15:b1:
                    aa:a1:39:65:15:92:60:3f:55:18:97:3f:2e:3a:ad:
                    5e:7e:55:6a:f2:11:b8:1e:88:84:33:e5:6e:09:b2:
                    dd:4b:8a:73:1c:5d:84:ac:b3:06:33:3d:74:b3:e8:
                    33:6c:3f:7d:c4:0d:df:6e:db:7f:44:9d:64:14:a0:
                    aa:99:e1:57:32:69:2c:f6:7e:d5:00:4c:9a:24:c6:
                    4a:96:ec:e3:35:8e:96:f4:22:c1:69:bc:53:6c:ed:
                    52:49:7f:1a:09:16:3b:e3:43:4f:ad:0d:09:14:0a:
                    b7:9f:99:e1:51:fe:3a:10:3a:96:c5:c8:74:b3:94:
                    f6:8b:1a:69:4e:b4:46:6d:94:ce:24:83:6e:2b:27:
                    9f:e0:36:f2:8b:4b:16:ae:02:29:75:9c:d6:6d:48:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:63:43:DD:09:18:8C:81:7B:EC:98:49:7C:B5:47:E5:0D:CF:5A:F1
            X509v3 Authority Key Identifier:
                keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:01:a0:7f:b6:c6:5d:7d:4d:27:68:08:fd:13:e0:3c:af:c7:
         ff:91:29:b0:e7:b7:37:82:73:1d:9c:27:34:de:dd:c3:74:69:
         14:56:23:3c:db:d7:a9:96:6c:12:2e:4c:ee:5b:1f:53:01:28:
         bf:39:32:56:c2:86:1c:66:be:36:d0:9b:33:c9:89:f3:3d:d8:
         53:36:07:17:28:5c:28:20:39:e9:19:b6:7e:ea:7d:a9:59:b2:
         67:a4:cd:6a:ce:8e:cf:af:66:e3:bc:de:b2:53:b1:2c:52:4c:
         a3:57:5a:60:ea:57:00:40:7c:3e:aa:aa:d7:3b:ce:e6:2a:d1:
         e4:6f:a5:e0:3c:6b:8f:1d:26:28:ae:71:92:fb:bd:a3:48:33:
         4d:49:08:d9:9e:e0:b9:66:ed:5b:eb:6f:2b:8e:42:16:dd:f7:
         42:8a:fc:81:2b:a5:01:03:6d:1d:d0:20:2f:1a:91:b3:37:c8:
         9d:41:35:01:69:9d:ef:e5:ad:b7:26:ee:6f:47:63:df:73:9d:
         59:a1:51:26:d5:49:c8:61:a1:36:a8:13:07:cb:29:f1:f8:70:
         11:cf:ea:f9:17:f0:f3:31:84:90:b4:24:33:9f:4c:34:0b:f4:
         28:0c:7f:02:2d:06:bd:ea:66:49:7c:4f:0a:a4:55:d0:ee:3b:
         54:f9:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:45:50 2024 by rpki-client on console-fra.rpki-client.org