Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
File:                     ZvggbjMR3zlPSDibgSK5SqHwsFw.mft (raw, json)
Hash identifier:          cOeJRmDLgFtXGEo6rKGvPyzGEi7VY+XdAzkyvFzj2aQ=
Subject key identifier:   F6:F2:2B:C9:16:0A:C8:BE:7E:19:FA:0B:7A:25:EC:E9:9E:F4:BC:31
Authority key identifier: 66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C
Certificate issuer:       /CN=66f8206e3311df394f48389b8122b94aa1f0b05c
Certificate serial:       01901E58D2A9D6FD33B48B734F6E6DB07B17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
Manifest number:          11D0
Signing time:             Sun 16 Jun 2024 00:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:55 +0000
Files and hashes:         1: ZvggbjMR3zlPSDibgSK5SqHwsFw.crl (hash: H8QP6djwvyxiZfaAmyJJD8fdsdrW52DytCApKiJitOQ=)
                          2: bvgJS61kGIDiVnW4Hp0ZiepomG8.roa (hash: yIYC7aHQ+I4vOJTq+fVd9ctLTF3krLil9lfnnBN4c/U=)
                          3: imTFHO7EiUWB2-q2oCKXu_UJqn4.roa (hash: 7GpVOBacTnE0ydbvm/3iB9M81WOV/AqzaYg16apNnoM=)
                          4: m_Nfkkeib9aVEKqU5uDaU5HIS7M.roa (hash: yW6qnA/fji5QsJhl/Ok6GnGI/GblHLSlSlwR8YAOGyw=)
                          5: uLJ92Edr29nDcSHKxp9r2wWr0ZA.roa (hash: 2R4LZ4l8jglfinm5szJHQxnfFfYyNqY2aZ80/p9zZyQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:d2:a9:d6:fd:33:b4:8b:73:4f:6e:6d:b0:7b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66f8206e3311df394f48389b8122b94aa1f0b05c
        Validity
            Not Before: Jun 16 00:00:55 2024 GMT
            Not After : Jun 17 00:00:55 2024 GMT
        Subject: CN=f6f22bc9160ac8be7e19fa0b7a25ece99ef4bc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:05:4a:6d:34:4b:a6:2f:f4:87:30:62:ab:
                    f8:f3:f2:69:27:d5:47:0d:d2:cb:ff:58:eb:82:8b:
                    91:0c:c7:34:d2:2b:17:db:60:e7:36:eb:ee:d1:13:
                    81:96:41:ff:98:53:51:50:15:e7:4d:54:1b:74:27:
                    d5:a2:9a:b3:4b:d2:a2:bb:aa:da:fe:26:62:0d:5b:
                    65:e8:db:0d:d1:a9:8b:22:bf:38:d0:4c:2f:c3:79:
                    57:1f:62:9e:6f:e5:dc:a9:05:5e:92:0e:43:32:6c:
                    c6:fc:c1:36:d2:21:ca:63:e6:2a:2a:71:12:34:45:
                    bd:36:c6:f4:59:77:40:c3:54:5c:b7:ce:4c:d2:c2:
                    ab:b8:c4:cf:d1:da:d9:62:be:54:63:58:25:8e:6e:
                    ad:13:2b:e7:e6:f0:89:e0:4a:9b:c0:61:94:1d:5c:
                    0c:f5:21:aa:7f:e5:bc:aa:db:f6:01:30:94:65:01:
                    10:4a:57:61:7b:dc:b0:9e:75:30:c1:d5:cc:bc:53:
                    80:2a:52:67:0f:dc:25:75:2f:05:00:6b:2f:81:ab:
                    cd:25:59:a2:58:29:be:32:9a:13:ff:13:29:a7:2c:
                    78:04:a7:d8:62:e5:59:7e:44:ca:32:6a:17:f2:3c:
                    c6:41:73:32:99:63:5e:c8:8e:ed:bf:3c:78:ac:1c:
                    00:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F2:2B:C9:16:0A:C8:BE:7E:19:FA:0B:7A:25:EC:E9:9E:F4:BC:31
            X509v3 Authority Key Identifier:
                keyid:66:F8:20:6E:33:11:DF:39:4F:48:38:9B:81:22:B9:4A:A1:F0:B0:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvggbjMR3zlPSDibgSK5SqHwsFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/be1a25-5855-4aec-8e18-bbfd45c84bea/1/ZvggbjMR3zlPSDibgSK5SqHwsFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b0:08:36:18:42:73:7d:67:10:e4:6f:f5:a5:2a:78:e0:89:
         07:26:8e:02:f2:74:67:8b:05:b6:a0:af:22:e8:ae:ff:f1:77:
         17:d7:be:91:f2:d0:20:e4:74:1f:d0:83:ae:34:e5:b8:dd:35:
         ca:f8:63:ba:30:18:fb:17:12:ed:07:a1:4b:0a:31:52:fa:79:
         9f:28:d5:31:3f:ce:5c:a3:73:36:d3:70:e7:24:38:fd:65:4a:
         ca:93:d3:83:e4:87:11:b9:72:8a:29:bc:91:29:5b:43:71:9a:
         0f:64:dd:fa:7b:16:9d:55:5d:67:d8:78:71:67:07:d4:e2:0c:
         12:8b:98:e1:af:4e:51:51:7d:1a:4a:07:dd:c7:38:49:ce:77:
         af:06:54:e6:00:3e:89:58:3d:c5:ae:0f:b9:9c:ab:83:24:22:
         52:8c:d2:87:9a:60:f1:8f:9a:aa:f0:d3:56:73:a7:ab:3c:af:
         b1:6a:ca:7e:c9:dc:f9:c7:a4:15:8c:21:50:62:98:3f:f5:96:
         ce:b3:c9:c6:8b:49:bd:d3:0a:06:b0:6e:d7:e7:3e:29:c9:d3:
         12:1d:fc:1a:d7:a8:b2:97:a2:5b:89:d1:f5:f8:17:93:ce:e8:
         09:04:67:be:46:b1:2e:26:7c:67:72:bc:e2:36:fa:90:15:3c:
         60:83:dd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:05:23 2024 by rpki-client on console-ams.rpki-client.org