Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File:                     gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier:          GcEDrVuMv7sBwqzvj8sBCHaiokH0e+Tbe/7Yqo1Hnyo=
Subject key identifier:   E6:21:60:6D:3D:61:6A:DF:FC:44:7F:AB:52:A7:A4:B1:F1:EA:58:85
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer:       /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial:       01901C334C1AF24E72A0776DE43736540C4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number:          11CC
Signing time:             Sat 15 Jun 2024 14:00:42 +0000
Manifest this update:     Sat 15 Jun 2024 14:00:42 +0000
Manifest next update:     Sun 16 Jun 2024 14:00:42 +0000
Files and hashes:         1: CKR8t3COGCFUSMeuwbzJqt392x0.roa (hash: FtshUE7nFcGGtaPukw5gBO9YvQ5X6av8auVQGhHWnP8=)
                          2: N7QXhMGNsXQLhHAvswSKNTGlgC0.roa (hash: MxdE66ICviyhO+da/jrEyLc2xfBWC61+11B8dV91c8A=)
                          3: P6GQfSCjpgWYVNV4U3D4pA7rPYQ.roa (hash: x+9cyu/TyxRHWGDYgdmkXG1C4w1TMslVryQ6qR1LFrE=)
                          4: TXIJImgfuEhoZuyJsfxFyGjuJiI.roa (hash: bOn3JD9ygvdz+82lEctQVt25UmDm6owgokJwNEgiN30=)
                          5: bdQNgurYpubZ6AUAk-VMC-ilTnQ.roa (hash: 3q5fI71M/kYWMhlKnML3MHYNyTBh+N8dy7XxpJP+15A=)
                          6: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: z/iO1Yr3/sr/THQ6brzbWjLXoquhcRlu+e4BrGUySTU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:33:4c:1a:f2:4e:72:a0:77:6d:e4:37:36:54:0c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
        Validity
            Not Before: Jun 15 14:00:42 2024 GMT
            Not After : Jun 16 14:00:42 2024 GMT
        Subject: CN=e621606d3d616adffc447fab52a7a4b1f1ea5885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:ff:0b:08:58:94:7a:2f:2d:80:f7:fc:17:
                    e5:7b:3d:44:aa:5e:ff:21:26:d4:86:28:f9:7a:77:
                    95:35:37:d0:8a:18:57:b0:6c:6d:25:93:e7:a5:f2:
                    3c:14:f3:de:21:00:56:4a:75:62:5c:1f:69:86:1e:
                    64:28:4c:cf:2c:91:44:e7:01:d6:57:59:79:0c:77:
                    d2:63:e4:ba:65:b6:3b:58:73:e4:1b:c5:10:ab:97:
                    82:86:27:b2:20:34:39:57:59:bb:53:48:0b:b6:b2:
                    04:5f:a5:11:35:f4:0c:b1:4e:0c:6a:60:75:f6:db:
                    cf:7f:e6:13:56:72:6f:36:e2:39:18:7f:6d:b8:a3:
                    7c:f8:5e:68:0a:a2:f0:a5:b8:45:ee:74:71:40:b6:
                    61:9c:47:93:4e:36:0d:39:b5:9e:d6:a2:f6:ba:94:
                    49:d0:e1:ad:e3:e5:44:76:35:21:62:65:29:62:a8:
                    4c:ba:89:3a:99:5a:fe:be:62:8a:d4:e4:c9:12:5b:
                    5f:cf:94:29:39:94:35:2e:94:f9:74:02:55:59:7e:
                    0b:d0:0e:e3:e6:bd:b9:7b:4f:6f:b0:33:76:e7:89:
                    00:d2:3a:78:09:fd:5a:b2:ac:be:ff:fd:14:28:cf:
                    01:64:7f:76:60:d1:98:97:0b:29:5a:cb:66:a8:81:
                    a4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:21:60:6D:3D:61:6A:DF:FC:44:7F:AB:52:A7:A4:B1:F1:EA:58:85
            X509v3 Authority Key Identifier:
                keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:de:91:14:f0:df:d1:f6:8f:bd:48:e7:53:03:ac:87:a9:8d:
         78:77:ff:12:86:9d:41:2c:0c:95:91:a1:64:98:b8:7f:3b:87:
         2c:28:fb:cb:f2:34:86:be:df:6e:49:e4:77:fb:f4:94:28:83:
         b5:d8:35:dc:a4:57:6a:ad:6e:28:49:f8:38:89:44:1f:02:b8:
         46:78:6a:24:e8:e4:5d:b5:4d:58:c2:74:00:9a:d0:6e:7d:4e:
         ec:83:82:5a:35:21:d4:96:12:fe:9f:35:31:a4:93:9f:f2:e2:
         60:6a:5e:44:50:6e:9a:fb:34:39:b5:52:af:4b:15:94:a3:1b:
         1b:0f:a6:36:26:4d:11:01:83:d3:6f:39:e5:26:87:c8:b5:32:
         7a:9c:b3:e0:c5:1e:69:16:b9:a4:b7:f6:a9:28:a9:f8:c3:98:
         d4:b8:1d:f9:8b:34:3b:05:fb:e9:b6:1c:b3:cc:14:10:86:b1:
         53:48:de:c5:5d:65:44:d5:2c:83:61:d0:b5:b7:fd:fe:f4:8d:
         df:ee:ad:ea:85:22:ac:84:ce:0c:fe:5a:04:72:32:1b:8c:7b:
         db:98:61:4f:65:90:64:f8:21:c8:d9:d2:fc:95:85:7f:ea:ec:
         a5:f5:dd:03:94:3c:74:2b:fe:62:b0:e7:70:83:da:0d:2b:15:
         12:4f:c3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:36:08 2024 by rpki-client on console-fra.rpki-client.org