Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
File:                     RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json)
Hash identifier:          CY5vXrJ6GaQQ/BzJLWD3mdCVRYRhetsdPcfIkzch/gk=
Subject key identifier:   DC:28:10:08:B8:61:CE:DA:40:15:B2:87:87:18:62:5E:8D:FC:6A:70
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Certificate issuer:       /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial:       0190727593D4E2042A47C2025E10042502D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
Manifest number:          0595
Signing time:             Tue 02 Jul 2024 08:00:26 +0000
Manifest this update:     Tue 02 Jul 2024 08:00:26 +0000
Manifest next update:     Wed 03 Jul 2024 08:00:26 +0000
Files and hashes:         1: 1n84ttSBSTs0lIFDVWiy_Ps3gsY.roa (hash: drTtFK0YdRiD4UHN6W6tMx0rio+7dfJVTAFsQ4FPtXw=)
                          2: 5msCx75Q97E5QS4dEsP0whJjm84.roa (hash: yXs0xZDNe2SbitYiys0ieBIsMo2vonWcSYMG7tK1NnA=)
                          3: 6unLtWNICGMeGYTCWaUM6Uy6ces.roa (hash: 7vFerFQUkKkiCsw+N/lg+8PYDLsZ2hkBTymHptcqKO8=)
                          4: 7eU3LFTcWqtTka01F_WzfEzB9ro.roa (hash: 5RwMoZsHfQxJa/7M6YSRY0IpNTK5x2/elvApvp1sh10=)
                          5: Fmlf3u49XZY7kojR95KexdGwqtA.roa (hash: obFqSTpCiwJT8HseClEIJTLEgrFKaYfD3jGvlq2ibNs=)
                          6: L-j_qBC3hzCwOi0HtyhYJFFEozc.roa (hash: aKSuaS1FaHamPbGumQ0i4L2wPK0bS50AvYZMUS7iULc=)
                          7: MJys5jBJuCI4irsQ6wpnPeU1W-4.roa (hash: uKoZZ4/RjrNfDIgoPkO12BK8cyrZZshyp/WVdQL5T2Q=)
                          8: MXBVPU9RwA-TLjWtPnFddqfx-AM.roa (hash: 6ORvW9v1jOVZ9pOaIXdOlq00u80Pklr6ffoJJJMm+Ko=)
                          9: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: N7d+1FF8HU+ahSKZQDqpF58KhGMTwc9I4/hYpiKOWSI=)
                          10: bzpW3NKqCwxG2JtCB3ZXaIgzL6s.roa (hash: UDvdTjKFJQaAwPzE9bUOriKiSieW3C2HMGYMB3K1WPw=)
                          11: vPY5FCAlkA6a2bmNjJIZ5HZ8emU.roa (hash: C1U4DWRrZmrlwtndSrh0jWNT+E/3RHzQHqZZkgT4egI=)
                          12: y2L2b-3xu0dbzltG02jgWffZmbA.roa (hash: WhYXj0MswePMe5gZTk1kiwg4tIfyDsR/TDRMd/sNOck=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:75:93:d4:e2:04:2a:47:c2:02:5e:10:04:25:02:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
        Validity
            Not Before: Jul  2 08:00:26 2024 GMT
            Not After : Jul  3 08:00:26 2024 GMT
        Subject: CN=dc281008b861ceda4015b2878718625e8dfc6a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:96:5e:fe:65:9c:18:63:6b:ab:c9:59:ff:3e:
                    1e:fc:c1:44:51:ed:2c:91:4b:d8:90:7a:9b:84:0f:
                    1f:b3:10:89:43:d1:63:4e:27:5b:13:cc:b3:03:ed:
                    67:1f:b5:5c:da:46:16:0d:14:61:16:a5:cb:be:e0:
                    d6:d9:46:b8:45:09:6a:be:39:fd:79:aa:ce:17:66:
                    14:93:87:1c:70:95:0c:49:83:69:94:3a:fe:89:fb:
                    94:42:cf:ed:44:7a:b6:b9:ed:87:fc:99:a2:03:49:
                    a4:d8:a4:44:6b:36:bf:5a:dc:1c:74:bd:57:c9:de:
                    dd:18:52:81:50:92:a6:ab:16:8f:2b:57:db:25:84:
                    34:b1:a0:15:27:37:df:60:a4:f8:31:ed:8e:06:ea:
                    ad:ff:4b:4a:db:cb:ec:f2:11:42:f9:d3:33:a2:c4:
                    39:ae:db:36:93:4b:5d:26:0d:d9:b0:22:8c:5f:83:
                    57:a1:f9:93:8e:6a:0f:c5:dd:8d:79:9a:e1:48:f4:
                    a3:80:97:7d:f2:ea:1e:a4:63:93:f4:9a:34:62:32:
                    a1:55:f0:c0:05:b8:c9:19:22:80:e8:5c:ef:c3:51:
                    2d:2f:ad:9d:5a:94:f8:69:25:dc:3a:c0:10:5b:a7:
                    8a:6d:45:d9:65:af:68:70:72:3a:8d:55:85:5e:12:
                    cc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:28:10:08:B8:61:CE:DA:40:15:B2:87:87:18:62:5E:8D:FC:6A:70
            X509v3 Authority Key Identifier:
                keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6f:25:bf:52:bb:86:a0:9d:ca:35:e3:b1:ff:d7:b8:11:be:
         38:19:2c:f8:85:14:04:b2:0a:23:a6:38:36:89:7f:f1:ca:30:
         e0:83:61:46:ae:74:d4:f4:48:28:c0:da:3a:ee:74:58:9a:28:
         9c:31:c0:fa:ef:fb:20:cc:d4:d7:27:52:6f:dc:87:24:99:d3:
         dc:ec:b8:9d:9e:e5:51:5a:0e:ab:74:05:82:2a:d6:8f:5c:f0:
         50:ee:de:db:e2:fd:ad:69:54:5d:2a:18:a3:06:9f:5d:ab:c3:
         04:3c:da:4d:44:85:c0:4d:20:db:bb:c1:05:bb:cb:ee:0d:6c:
         ab:af:39:c3:2c:85:3f:8e:80:e8:d4:41:90:3e:42:73:f8:00:
         7b:88:79:6b:8f:1e:1f:1a:b0:f0:6e:8e:d5:b1:67:02:67:45:
         36:f2:9b:71:b8:0b:3f:f6:ae:23:58:ae:0a:a2:bc:a2:dc:e5:
         be:29:2a:cf:e8:1f:b9:e2:a4:44:60:33:0e:6b:e6:21:e1:67:
         e9:6d:c6:3b:16:64:c4:18:8a:1f:69:96:3d:1f:d8:b1:91:b7:
         22:1f:d9:56:99:5a:ba:f9:57:2d:72:43:9f:21:84:7f:b1:e4:
         77:8e:a9:7c:15:95:18:e8:fd:48:b8:1e:7f:4f:c4:0d:da:52:
         dc:24:2b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:50:09 2024 by rpki-client on console-ams.rpki-client.org