Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
File:                     rfDfdxFHQeE6F9chPmlWv5YntVg.mft (raw, json)
Hash identifier:          MnZ9CsEXh5JziznsaeGRhI4b4lZNp2YEtLC7ysVCX4E=
Subject key identifier:   98:A8:E8:15:B6:AA:08:50:45:84:44:D1:EA:02:36:C1:20:E7:2B:D0
Authority key identifier: AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58
Certificate issuer:       /CN=adf0df77114741e13a17d7213e6956bf9627b558
Certificate serial:       019041F7E6C76C6AE40BD7BBE26699FF3D67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
Manifest number:          108B
Signing time:             Sat 22 Jun 2024 22:01:23 +0000
Manifest this update:     Sat 22 Jun 2024 22:01:23 +0000
Manifest next update:     Sun 23 Jun 2024 22:01:23 +0000
Files and hashes:         1: Hg3rb_R0LC08SE1F9_IAB8sKgGw.roa (hash: YYOW51psv9z2duIB0YIOvR80+uurU5WQmBABlXVDV2c=)
                          2: rfDfdxFHQeE6F9chPmlWv5YntVg.crl (hash: rSWzzBos1uN6qnDhoN30TLghpV+k5DDd8kMgh5PNG30=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:f7:e6:c7:6c:6a:e4:0b:d7:bb:e2:66:99:ff:3d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf0df77114741e13a17d7213e6956bf9627b558
        Validity
            Not Before: Jun 22 22:01:23 2024 GMT
            Not After : Jun 23 22:01:23 2024 GMT
        Subject: CN=98a8e815b6aa0850458444d1ea0236c120e72bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3d:1d:81:93:c8:bb:d5:4c:de:55:11:c8:01:
                    f8:12:88:90:4a:37:f0:6e:f4:cc:51:c1:85:b8:84:
                    ea:0a:ed:61:3e:7f:25:c7:03:72:34:11:55:c9:2d:
                    8d:ff:55:79:02:a8:5c:cd:3c:52:f0:8e:03:ca:04:
                    94:ef:31:b9:97:f8:cd:9a:1a:4b:db:c8:10:d6:06:
                    80:9e:88:17:b3:2d:e2:c9:dc:1e:31:c6:2d:2b:78:
                    ce:95:8d:7e:54:67:fc:91:89:39:2a:8e:fe:03:83:
                    ec:bb:87:74:ef:1d:3b:59:f9:be:ab:e9:8d:ae:a7:
                    14:d5:d9:8a:06:1f:55:00:c2:9f:00:f9:a2:58:42:
                    28:04:f9:26:0d:a9:69:95:cd:b3:9e:4f:ed:30:5a:
                    b6:b3:c9:23:91:ce:9c:63:52:71:95:71:ec:8e:05:
                    4e:75:40:7d:3f:cb:76:12:2f:6f:1d:4f:fe:28:df:
                    e2:bd:c5:43:00:09:7b:92:6e:e1:40:b7:d4:59:1f:
                    c7:f9:b9:29:a2:5d:7f:4b:07:50:df:eb:4b:38:fa:
                    b5:ec:88:87:6e:d2:f7:9e:e5:63:46:c1:4e:77:9e:
                    30:86:6a:f6:0e:06:40:b9:31:bb:71:03:38:fb:c9:
                    77:51:ef:c1:47:97:f8:22:af:91:c0:cf:6b:b8:77:
                    52:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A8:E8:15:B6:AA:08:50:45:84:44:D1:EA:02:36:C1:20:E7:2B:D0
            X509v3 Authority Key Identifier:
                keyid:AD:F0:DF:77:11:47:41:E1:3A:17:D7:21:3E:69:56:BF:96:27:B5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfDfdxFHQeE6F9chPmlWv5YntVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/a30bea-9e93-4091-b6e1-e1ef27772eaf/1/rfDfdxFHQeE6F9chPmlWv5YntVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:49:ce:37:fb:43:4f:2e:19:0a:21:a5:e3:c1:78:7f:36:ba:
         3a:f3:ed:2b:db:95:35:46:18:88:8a:2e:e7:0d:dd:69:34:bd:
         d0:da:f1:ef:89:d9:74:99:12:9a:9d:15:d1:2d:9d:dd:f5:55:
         d2:02:f9:de:93:25:0c:77:10:8d:5c:99:77:fc:9f:8a:63:88:
         70:be:d1:ad:e9:d1:aa:39:78:b6:63:0e:3f:7c:3d:08:e4:b3:
         4c:42:ab:1b:2d:5b:e0:9a:0c:08:16:a5:e0:1e:0a:7c:07:d6:
         6a:79:46:0b:29:90:65:ba:c8:7b:71:d9:a2:bd:59:37:e9:0a:
         c0:61:70:e3:09:04:b6:75:8c:26:f6:bc:2f:50:09:64:8f:bd:
         7a:25:b1:e3:b4:7b:98:be:55:b1:4e:05:b7:38:5b:34:e2:cf:
         03:ed:29:51:8b:7a:31:c7:68:2e:ac:40:c3:88:e3:fd:72:fb:
         72:3f:17:ec:48:09:4a:27:58:2f:f7:3f:d2:d3:8f:5e:a1:08:
         42:df:c7:86:1d:07:dc:c4:72:f4:9e:73:cd:40:a8:6e:d6:bc:
         88:4c:9f:c1:12:25:bf:b0:92:d9:55:99:48:59:3d:3a:c6:c8:
         7b:1a:91:39:ad:62:11:b8:f1:10:b3:26:92:2f:86:8c:ce:76:
         8d:76:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:33:41 2024 by rpki-client on console-ams.rpki-client.org