Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
File:                     M54PXmVDk87aIttEl48nPnieI0E.mft (raw, json)
Hash identifier:          CvDX9HWr2awUqjf9olU7tDKs85A/tbw7KN2w2IxWBVI=
Subject key identifier:   2E:88:E5:7B:64:50:8F:45:FF:C7:B1:05:17:D8:23:5B:E6:91:E7:C4
Authority key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Certificate issuer:       /CN=339e0f5e654393ceda22db44978f273e789e2341
Certificate serial:       0190448BBD43FC0E8BDA1496601049C7CCE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
Manifest number:          0BAD
Signing time:             Sun 23 Jun 2024 10:02:06 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:06 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:06 +0000
Files and hashes:         1: Ifui4PQbndse730lSZO3lCfkioY.roa (hash: D7nCViVTcLQTl0eYTC8UiUGnFlIt90jpYP7MJq7/kAA=)
                          2: M54PXmVDk87aIttEl48nPnieI0E.crl (hash: mLBtJBXsTwweijhB00Zo4Uu4Csg4BmjkVWJMwIiwUHM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:bd:43:fc:0e:8b:da:14:96:60:10:49:c7:cc:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=339e0f5e654393ceda22db44978f273e789e2341
        Validity
            Not Before: Jun 23 10:02:06 2024 GMT
            Not After : Jun 24 10:02:06 2024 GMT
        Subject: CN=2e88e57b64508f45ffc7b10517d8235be691e7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:e3:d6:89:7a:76:5d:22:e7:a7:47:45:47:
                    bb:b0:7c:3b:10:23:05:74:5f:d4:1f:ed:96:46:ee:
                    73:fd:c0:0d:be:01:8e:23:b2:07:69:d5:dc:b3:2c:
                    2b:02:d0:f0:de:31:91:15:2b:ac:82:d5:9b:5a:27:
                    e2:02:f9:3d:ce:13:a2:e0:96:54:e8:fb:08:01:59:
                    d7:66:ea:80:b3:25:df:dc:e0:89:1c:26:c9:42:96:
                    9b:d9:64:8a:fd:d9:28:0a:87:5d:8d:b7:d4:be:f0:
                    d2:9f:db:d6:75:00:0e:bb:11:b1:b4:f8:e0:8e:2e:
                    b4:80:fc:12:01:fa:8a:72:5b:86:7a:d3:12:74:89:
                    04:82:95:99:51:a3:8b:0f:5d:57:cc:70:db:f5:93:
                    04:8f:0a:4d:0a:c7:e3:74:a1:65:be:a1:ec:28:15:
                    bb:56:a4:56:d6:08:d4:7e:dc:3d:4b:10:eb:16:db:
                    96:71:cd:b2:5b:20:f7:fb:5e:1a:45:79:cd:fe:fc:
                    ff:07:c2:23:0e:6d:d5:3f:c8:da:3b:1d:8d:7d:df:
                    de:10:fd:c7:c4:e4:57:57:de:1e:56:09:2e:bc:4b:
                    96:3d:15:72:bc:05:d0:f8:da:38:c7:1d:55:73:c3:
                    57:92:a1:fa:77:5e:5e:55:4d:bd:52:52:d1:91:ce:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:88:E5:7B:64:50:8F:45:FF:C7:B1:05:17:D8:23:5B:E6:91:E7:C4
            X509v3 Authority Key Identifier:
                keyid:33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:e0:5f:03:c6:53:73:88:c8:ff:c5:9e:bc:e2:fc:59:5c:71:
         1c:43:45:07:36:d7:4e:f4:cf:81:cf:fb:35:c5:10:5c:34:dc:
         3c:5f:d3:2f:8a:2e:53:30:46:ff:cf:15:b6:30:53:01:65:ae:
         a8:08:a0:f0:d6:a6:4a:c7:ee:db:44:2d:43:86:6d:40:39:f7:
         f1:94:5c:11:56:5d:d6:fa:80:7c:40:ec:9f:08:0f:bd:81:b6:
         a0:fd:67:a2:73:56:29:f4:63:14:2a:10:96:1a:6b:11:b7:78:
         27:87:34:b4:77:94:e6:cd:f3:dc:b5:71:e8:e3:0d:a1:d2:a4:
         28:89:2a:46:3c:04:9f:79:21:4c:9e:c9:c0:6d:6e:49:03:8e:
         9a:b4:b9:73:a1:73:82:0a:2e:df:44:af:dd:12:26:61:bc:b4:
         b6:2d:f0:b3:04:74:82:22:78:fe:33:6d:c5:bf:72:b7:28:38:
         58:45:76:06:ba:65:10:42:06:06:43:87:84:14:8d:0d:ce:38:
         40:c3:3f:13:ec:4a:d3:27:c6:71:18:32:0b:de:3f:cb:e8:6c:
         55:4a:35:a6:6d:23:0f:b4:8a:8f:5e:a3:25:36:26:93:81:24:
         6e:e7:68:df:36:74:4c:f2:b3:6c:0e:d6:0b:92:49:1f:69:45:
         ed:6e:2f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:05:17 2024 by rpki-client on console-ams.rpki-client.org