Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File:                     C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier:          AUekrQePc2NglacdI2iqN8XLdXVzP6erasx5PZdsXZo=
Subject key identifier:   2F:59:3A:44:1A:B3:AE:4C:2D:CC:D5:35:F9:AF:1F:19:C8:2E:1C:90
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer:       /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial:       01906BCF1A8E1B8D03DA5CF898EC959937D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number:          0983
Signing time:             Mon 01 Jul 2024 01:00:53 +0000
Manifest this update:     Mon 01 Jul 2024 01:00:53 +0000
Manifest next update:     Tue 02 Jul 2024 01:00:53 +0000
Files and hashes:         1: 4JIlsb-s0tj9hjUv6uOB7ybumrA.roa (hash: bhfiea1WanJ1esMyREaNkt7xmO55FN6o6CqVAqktaJA=)
                          2: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: wXsctB+MY4gfurzVsKcifHWdYYWf2qPGiO6qYZUFCBg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:cf:1a:8e:1b:8d:03:da:5c:f8:98:ec:95:99:37:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
        Validity
            Not Before: Jul  1 01:00:53 2024 GMT
            Not After : Jul  2 01:00:53 2024 GMT
        Subject: CN=2f593a441ab3ae4c2dccd535f9af1f19c82e1c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:1c:bc:f8:97:14:18:d4:b7:ce:83:13:1f:
                    7c:e8:27:a8:03:31:1b:78:39:5e:9b:8c:ee:ea:6d:
                    53:83:c1:f6:4f:91:33:9e:5e:ed:74:d4:a2:de:1b:
                    fd:0a:c9:26:aa:25:7e:3d:c0:83:b4:32:ac:55:66:
                    47:38:8c:b7:20:c6:53:65:0a:15:4d:87:9c:b0:c9:
                    b4:1c:91:c7:a3:4e:5c:d5:54:fc:30:52:08:b3:86:
                    07:f0:75:fa:f5:fd:a7:81:20:9b:94:8c:b0:81:3c:
                    55:37:50:61:e1:e1:a2:9d:d2:79:06:03:81:9d:bb:
                    10:46:3e:4c:c4:18:6d:ec:29:13:b1:68:62:cd:21:
                    7d:a5:d6:fc:cd:a3:f5:af:09:9c:2b:64:f4:a1:54:
                    ce:70:d8:7c:97:0a:e9:d6:48:e5:cc:aa:62:d2:9d:
                    2c:b3:77:c8:e9:a9:2e:23:37:6e:fc:35:94:4c:03:
                    43:0c:b6:a3:f0:0d:ba:71:d2:20:6f:da:c5:a1:43:
                    1c:12:47:60:e3:2e:a8:0e:95:65:fb:5f:a1:a4:41:
                    28:1f:74:8c:7f:8d:51:1e:f3:4f:ae:e0:a6:63:40:
                    38:01:4a:be:ee:c3:33:ed:65:32:db:45:7c:cb:46:
                    f9:e1:f8:2c:27:2a:a9:ce:28:2f:fc:95:d4:11:c6:
                    fe:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:59:3A:44:1A:B3:AE:4C:2D:CC:D5:35:F9:AF:1F:19:C8:2E:1C:90
            X509v3 Authority Key Identifier:
                keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:2b:92:bf:53:30:a3:02:03:8b:d2:df:2a:d2:84:22:4f:c5:
         63:81:2d:82:3b:87:cf:3a:89:2f:be:d4:3c:0a:0e:ce:94:02:
         f3:c0:e7:2d:bb:21:92:fa:0f:36:b9:e8:2a:0c:2b:f2:b9:9e:
         4d:d4:fd:fa:16:4f:e1:31:3b:e5:df:06:4d:1d:31:2b:7c:cc:
         16:83:14:aa:5f:9a:b2:4c:16:7e:4b:a2:4b:71:4e:5d:da:1c:
         50:08:99:0b:4e:37:26:ca:a4:ba:ed:b6:9b:82:17:b4:d3:5c:
         3c:13:dc:97:a4:47:bb:ff:72:be:2c:c6:0c:15:f1:b8:f4:f4:
         96:21:ec:a6:5e:43:95:66:9a:ec:8b:1c:7b:72:ad:24:c7:92:
         af:6f:27:38:bf:46:a3:c0:fe:31:ad:fe:66:3d:95:b4:73:65:
         79:47:f1:f8:23:ba:01:19:d1:28:9c:17:8c:68:cf:36:fb:a1:
         27:c7:5f:f5:f4:1b:15:b0:af:14:e9:e8:5d:ee:26:b3:74:9c:
         eb:ed:0f:10:56:44:2a:e1:aa:e8:79:c4:99:40:85:21:4e:18:
         3c:23:92:35:52:3b:40:28:c8:f3:ef:74:50:b3:2b:9a:3d:d6:
         ed:0d:e1:77:e6:f2:78:b8:a8:e2:be:f5:c2:4a:47:e9:10:b3:
         44:d5:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 03:28:40 2024 by rpki-client on console-fra.rpki-client.org