Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File:                     _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier:          GYip/ibR4heh9bsy6UVqoI/CUcEk4N3lg+Jpf0Ubgdg=
Subject key identifier:   AA:40:90:F7:6A:F4:F8:4D:62:23:B4:D6:44:AD:C7:54:A1:C5:00:5C
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer:       /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial:       019040AEF9543F147D61E0DA123FC920CFEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number:          08AD
Signing time:             Sat 22 Jun 2024 16:02:07 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:07 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:07 +0000
Files and hashes:         1: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: Xi0igZbAfoJYWlQdka0MHlYS1r0XaDqcc488eBufeSs=)
                          2: z4ZYYkAaCf40gXywutEV_eCVAlY.roa (hash: 9cVeij0vBifwnBVnbCTvJWWJPdv7pqtMmM0AVrtmqOQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:ae:f9:54:3f:14:7d:61:e0:da:12:3f:c9:20:cf:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
        Validity
            Not Before: Jun 22 16:02:07 2024 GMT
            Not After : Jun 23 16:02:07 2024 GMT
        Subject: CN=aa4090f76af4f84d6223b4d644adc754a1c5005c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:57:56:19:46:bc:20:7c:18:4c:c0:ac:9e:
                    0a:d6:e2:8e:f7:e5:5d:5e:73:1c:c0:e7:d8:24:23:
                    f3:ae:56:53:0b:a3:97:3e:f7:f3:3c:22:27:c2:5c:
                    43:fc:31:4d:a0:9a:a2:b8:cd:48:53:e0:19:82:1b:
                    93:94:c6:25:0e:e9:5f:aa:eb:1f:21:c3:ea:22:c8:
                    7c:ed:51:47:89:e1:61:29:2d:a0:6c:6b:28:35:3e:
                    f9:5d:a7:4d:e2:a6:26:05:4c:72:24:45:42:62:8b:
                    7d:f0:d2:87:0a:75:d5:3b:91:09:37:c2:5e:dc:e0:
                    c0:ef:ac:2f:50:f2:a8:c0:6c:05:d9:ed:0b:a7:09:
                    85:a3:18:98:64:3f:a2:91:1c:38:17:b4:38:a3:af:
                    cc:2f:5d:39:60:0a:75:9c:39:e1:7f:95:45:34:06:
                    f7:c0:3d:a9:6a:11:a1:2c:f7:82:8a:03:ea:40:df:
                    3c:b4:c0:7c:73:f7:7c:6f:4c:88:c5:75:ba:f2:54:
                    86:1b:81:a0:04:74:58:c4:04:90:bb:c0:8e:56:de:
                    e5:1d:97:bf:8a:c1:06:8e:51:2f:ba:70:31:a5:5f:
                    5c:df:f7:fc:3a:cd:f8:82:f2:71:ad:d3:02:67:3f:
                    46:c4:79:78:3a:5f:1c:ff:cf:13:f8:02:e5:75:42:
                    9f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:40:90:F7:6A:F4:F8:4D:62:23:B4:D6:44:AD:C7:54:A1:C5:00:5C
            X509v3 Authority Key Identifier:
                keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fb:1b:06:ee:a1:a6:cf:4f:85:b4:a3:bd:ed:a0:08:0d:02:
         e8:ff:9e:bf:d4:10:e4:9f:c8:b6:16:7a:b5:2d:07:fc:f5:ec:
         c2:34:09:46:ac:76:1f:01:48:56:1e:73:71:90:2b:1a:6c:f4:
         cf:52:2f:a8:dc:0b:c6:25:7c:bd:94:50:71:25:56:8d:ff:54:
         1f:94:e2:15:f0:67:fb:53:af:fc:29:01:26:a7:db:91:1c:b5:
         a0:c5:45:f0:0d:7b:2d:9b:ee:19:cd:6f:ab:d5:ab:c9:63:14:
         12:66:58:0f:2f:13:1d:b0:fc:ae:6c:08:49:08:d1:43:94:c9:
         26:5e:04:12:77:eb:bf:7c:ca:eb:c3:06:49:c2:77:60:7b:f1:
         0a:c3:27:db:04:d1:da:4a:89:e0:c3:f8:6d:40:b6:c2:08:10:
         08:0b:a5:e8:3f:23:5f:31:cb:bf:39:83:0f:e3:88:18:ff:47:
         b5:c4:d3:3e:10:48:02:93:a5:13:1e:35:ef:95:5a:52:d7:02:
         ad:34:c2:14:ae:9d:e3:c5:8d:c3:3f:e1:eb:d6:8d:68:da:06:
         d9:41:77:13:e2:db:05:0a:7a:e1:19:6e:c8:9e:cf:9e:7f:7e:
         8b:0c:e5:88:13:e6:c6:d0:0a:d2:e9:c6:a8:e9:b4:5a:ce:32:
         26:63:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:48:17 2024 by rpki-client on console-fra.rpki-client.org