Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
File:                     gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft (raw, json)
Hash identifier:          M1xH93NBWI+c5OsBOhB7vJeb9G8sFW01GyAGg/a2LR4=
Subject key identifier:   F8:53:2C:A1:D0:54:6C:29:22:8C:20:DC:B9:5C:99:B8:95:E8:15:58
Authority key identifier: 80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B
Certificate issuer:       /CN=808c3a6c5cbff0739e438d05744405b16197b15b
Certificate serial:       01903B197AB75359C77DBC863F094F891EDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
Manifest number:          11DC
Signing time:             Fri 21 Jun 2024 14:00:43 +0000
Manifest this update:     Fri 21 Jun 2024 14:00:43 +0000
Manifest next update:     Sat 22 Jun 2024 14:00:43 +0000
Files and hashes:         1: CKR8t3COGCFUSMeuwbzJqt392x0.roa (hash: FtshUE7nFcGGtaPukw5gBO9YvQ5X6av8auVQGhHWnP8=)
                          2: N7QXhMGNsXQLhHAvswSKNTGlgC0.roa (hash: MxdE66ICviyhO+da/jrEyLc2xfBWC61+11B8dV91c8A=)
                          3: P6GQfSCjpgWYVNV4U3D4pA7rPYQ.roa (hash: x+9cyu/TyxRHWGDYgdmkXG1C4w1TMslVryQ6qR1LFrE=)
                          4: TXIJImgfuEhoZuyJsfxFyGjuJiI.roa (hash: bOn3JD9ygvdz+82lEctQVt25UmDm6owgokJwNEgiN30=)
                          5: bdQNgurYpubZ6AUAk-VMC-ilTnQ.roa (hash: 3q5fI71M/kYWMhlKnML3MHYNyTBh+N8dy7XxpJP+15A=)
                          6: gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl (hash: m77ho0uJHsLft7IdH10qw+XPNTtSAVNUlPXV66nUzUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:19:7a:b7:53:59:c7:7d:bc:86:3f:09:4f:89:1e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808c3a6c5cbff0739e438d05744405b16197b15b
        Validity
            Not Before: Jun 21 14:00:43 2024 GMT
            Not After : Jun 22 14:00:43 2024 GMT
        Subject: CN=f8532ca1d0546c29228c20dcb95c99b895e81558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:59:0c:13:29:f8:cc:1e:7c:60:b2:6f:05:
                    77:a2:09:9b:ee:26:d1:9e:59:ef:d4:f7:45:0f:53:
                    1a:7e:8c:f0:84:6e:db:86:84:cd:31:73:09:a0:86:
                    36:b8:92:f0:37:84:68:09:5d:4a:49:b1:56:36:64:
                    10:38:3f:22:1c:c4:88:fc:98:13:28:49:34:a5:c3:
                    17:08:db:02:f7:f9:65:4f:52:6c:57:7d:65:6b:db:
                    c3:16:d2:94:2c:7c:89:66:57:2a:1e:2c:a6:c4:8f:
                    fe:68:5a:26:9a:5a:c8:3d:11:b2:7b:5a:06:49:b2:
                    77:7b:93:46:1f:7d:67:55:3e:8b:b0:b0:bf:1e:c7:
                    76:c6:7f:e5:a3:e2:42:aa:cb:55:c0:dc:fc:43:c3:
                    ce:fa:25:3b:e8:d1:2f:07:cf:86:58:7d:4c:7b:74:
                    f5:3a:09:47:fb:4f:1b:29:31:eb:c3:8d:55:81:a8:
                    f0:db:ba:7a:ff:07:de:ec:af:16:4e:72:7b:f0:53:
                    a0:d3:9b:ea:25:6e:da:52:cc:0b:c5:2a:9a:87:34:
                    bb:ba:9b:f3:52:88:1b:43:a3:c3:ce:b0:a1:5e:24:
                    8e:c9:e1:9c:de:33:5d:19:b3:ad:7e:17:56:1f:5c:
                    2c:b8:18:4e:cd:f0:1b:6f:25:95:17:51:f2:9a:7b:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:53:2C:A1:D0:54:6C:29:22:8C:20:DC:B9:5C:99:B8:95:E8:15:58
            X509v3 Authority Key Identifier:
                keyid:80:8C:3A:6C:5C:BF:F0:73:9E:43:8D:05:74:44:05:B1:61:97:B1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gIw6bFy_8HOeQ40FdEQFsWGXsVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/698e4e-0a39-416b-affe-61819c480cbe/1/gIw6bFy_8HOeQ40FdEQFsWGXsVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f0:94:94:3e:93:a6:68:b0:2a:80:dc:74:a4:93:8f:07:68:
         df:5f:bc:32:08:8f:f4:e2:3a:3e:f4:a5:f4:36:df:9f:85:fb:
         2c:b2:b0:19:5a:06:95:67:bb:79:b7:dc:5e:d7:89:db:7b:e5:
         e5:7a:52:a7:e2:56:db:74:4a:6e:50:a5:41:e0:34:d6:10:5d:
         a7:df:a3:a5:9a:35:1e:06:92:3d:c0:9f:c3:ec:ef:a2:d0:29:
         c8:03:89:62:72:6d:85:0d:a2:69:b1:c8:0a:bc:ef:13:56:77:
         83:6d:40:02:63:00:32:ab:e8:af:95:46:03:6d:85:a9:30:fe:
         fa:4b:3b:fc:68:aa:39:eb:b0:fa:85:fc:9f:49:2c:2c:e1:4b:
         e0:1b:5d:5a:34:16:9c:e9:21:b4:cc:55:45:0c:56:d1:55:6b:
         78:77:f6:af:9e:39:f6:9c:35:c4:58:b9:12:1b:2b:75:38:9a:
         29:f5:5d:2b:a6:35:f7:61:a9:5c:f0:1d:95:35:0f:e7:af:cc:
         ce:96:e8:94:71:f9:5e:8b:67:86:c7:cc:99:7e:9e:e6:d0:dd:
         30:df:fd:68:63:e5:ee:4e:ab:b8:80:0d:b8:0c:2a:5b:d7:31:
         0a:8c:f2:fd:ab:5a:9c:f3:99:48:f2:d2:c0:77:d0:7f:68:a5:
         aa:b8:e7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:43:48 2024 by rpki-client on console-fra.rpki-client.org