Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
File:                     CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json)
Hash identifier:          Y+7Qy4ZpU+ySgOVi8KJEY7alV6AlvmGoMYDkYctLUbg=
Subject key identifier:   44:C2:53:4C:78:A4:4F:D1:2D:0A:84:F3:BE:81:81:BF:36:66:17:81
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Certificate issuer:       /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial:       019044C148082B0976D5DE52A89750EA481E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
Manifest number:          04A6
Signing time:             Sun 23 Jun 2024 11:00:35 +0000
Manifest this update:     Sun 23 Jun 2024 11:00:35 +0000
Manifest next update:     Mon 24 Jun 2024 11:00:35 +0000
Files and hashes:         1: 5Myqzp2wk3G-TeXRWjUjEjYncjo.roa (hash: khsOXmiU/wooWARsZh2KdV21nEwQXfhO48140vRZDvs=)
                          2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: z603KnziUrlwj30a3XtluV2BvZNywwAt0tN3lnlCyJA=)
                          3: CUxheNHo4nckAP6k5yhQwlA1HtE.roa (hash: 8hUsEz0RcFsYdBh82z0konnRXdwHSJQH5KwIgwFvsyI=)
                          4: GLCNc-AsxVVDn49M_DNMvyyXpf0.roa (hash: 79oqLFwhBlkAIxHCNqR7cN3S9JDWMn6u1HD6daHClKo=)
                          5: LYgw7JKvEr5oNPBiW6InA-LCE6E.roa (hash: oVyKq6nnl9E/AtCSfeXdob8UVTP6/OcAVjbgY+N3RAQ=)
                          6: _0Rv1f9h8r8OwxSy1z8RY5obItQ.roa (hash: AyKRjYj235bM3BLiGhnLGJ3uJwKw5q0gKqMLq0RZDkk=)
                          7: a58BtO-Nf-R6PC4pLQKzfXNJCDU.roa (hash: 3/IJHKJN+lj/usfSv+vE11LBfq2nNUHUJcgGGxiJB0s=)
                          8: cdJiFv7lhvuR3wVLxr4zoavA324.roa (hash: hHI+L9+syy8dUk+9kyEQTr21uI9hY5q2Mcs4FP4QXFE=)
                          9: lbXvHGuuf5tHaUvQC0M_oaodxu8.roa (hash: AdtoWymLCm9EZ6Ctdix2FcjwkjcW7XDcfwgZQUQQxpY=)
                          10: sazNrD1qxpqNCVhrQfphO9OeiMA.roa (hash: +E2zO5GuGljL8rpluwuuw5yJFXGfGSZQy+GHqP79BIo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:c1:48:08:2b:09:76:d5:de:52:a8:97:50:ea:48:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
        Validity
            Not Before: Jun 23 11:00:35 2024 GMT
            Not After : Jun 24 11:00:35 2024 GMT
        Subject: CN=44c2534c78a44fd12d0a84f3be8181bf36661781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:b7:ce:d3:4a:25:ab:95:a6:c6:b8:4e:94:
                    a3:ae:5c:64:ee:78:2c:ca:fe:37:aa:08:f2:65:6f:
                    5e:e8:09:f1:04:25:27:26:f7:7d:a8:60:3e:75:c7:
                    b0:2a:d9:44:cb:3d:3f:fa:5f:38:8f:34:93:84:59:
                    95:00:1c:9a:f7:b6:98:24:b3:f4:37:4c:2a:04:20:
                    82:68:e8:7a:ea:f2:5b:5f:72:9a:f9:e4:6b:84:c6:
                    27:ab:71:5f:b1:59:64:72:ab:14:e3:17:95:d7:97:
                    fc:a2:6e:2d:c6:08:b9:fa:1a:b8:3d:52:8a:a3:cb:
                    b1:27:6b:1c:da:6c:ee:6a:0c:48:80:76:31:45:a1:
                    02:b2:3d:e5:b2:87:10:56:5e:f4:b0:dc:0b:09:e6:
                    2a:75:14:4e:4f:10:e3:e0:e7:ad:02:e7:41:76:73:
                    41:2a:2a:8c:f1:df:fe:45:85:b3:ef:ce:38:98:25:
                    18:73:43:1c:cc:07:42:04:4f:1f:53:12:98:50:5e:
                    42:de:21:d4:c6:a1:a3:50:28:13:fa:2a:56:41:0a:
                    0d:cc:59:ff:ee:f2:00:b5:55:cb:b8:f2:5c:cf:ea:
                    dd:84:ab:7b:07:a8:f9:8d:a3:e4:ae:3e:38:4d:2a:
                    d8:32:33:0c:63:2f:3b:dd:0a:d4:d6:cf:de:9c:a5:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C2:53:4C:78:A4:4F:D1:2D:0A:84:F3:BE:81:81:BF:36:66:17:81
            X509v3 Authority Key Identifier:
                keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:c7:7b:18:a8:1c:1f:21:38:72:b2:d5:51:43:c3:50:63:49:
         f4:21:85:14:b8:4e:a0:83:03:bb:49:f0:38:c9:f0:19:73:ed:
         c9:13:73:8f:48:5d:a0:64:fe:80:d9:33:bc:0a:d6:aa:8b:31:
         89:93:57:b4:dd:29:c6:16:5f:6f:ea:42:47:03:24:0b:ea:f8:
         d9:cb:0e:58:13:0b:91:55:c4:1f:0c:5d:1d:6b:fc:3d:26:45:
         4f:27:1c:2d:7e:4b:b7:9b:c3:41:bd:10:0d:ee:cf:90:26:fe:
         93:c7:42:ef:58:1f:c9:7c:76:a1:46:38:28:bc:ac:76:67:55:
         5b:ef:0d:98:22:4c:77:c0:2c:f2:d9:df:83:22:4a:7c:ae:c1:
         a3:c0:71:e6:e2:d4:00:67:a9:46:0c:3e:60:2d:82:f5:3a:4d:
         84:1e:bc:03:6e:26:7b:76:69:a4:80:64:fe:4f:e9:07:0e:ec:
         5b:25:b7:4d:34:3a:c4:8f:38:63:79:08:3d:44:ac:29:ad:3a:
         eb:95:3d:3c:b2:15:9c:60:86:25:3d:6f:bd:0a:05:73:c8:5a:
         02:07:75:ca:19:4c:d4:bb:94:9d:8a:2b:8c:52:e4:67:d9:15:
         aa:ae:82:d1:87:9b:3e:d4:f5:6c:09:56:9b:ea:c4:be:3f:8c:
         e7:59:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:55:47 2024 by rpki-client on console-ams.rpki-client.org