Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
File:                     t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft (raw, json)
Hash identifier:          cNNcmyUEGr/Kh6xOiL/97u8u4ahTTeYdnjmIWiPMCBc=
Subject key identifier:   F5:04:45:9C:7C:F0:BD:93:A7:E4:59:63:4D:28:1F:50:87:9F:8A:AF
Authority key identifier: B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE
Certificate issuer:       /CN=b760caacf777699a8c43237b8926c68e4d12c4fe
Certificate serial:       01901BFCD0ABBEBB6E9B30F14BDE01A7F7BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
Manifest number:          0AAD
Signing time:             Sat 15 Jun 2024 13:01:11 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:11 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:11 +0000
Files and hashes:         1: ScdBcpppL3NohAvQCQAuWyecdYo.roa (hash: 4MbMwjZ2+ZLdi0TsS/I3Uw3BUz+ElYkae5Ng2CllM2w=)
                          2: t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl (hash: FQPFEAGxk9sN1dcbuFJZCixBGQS3nXqZK6pzbGEuqJA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:d0:ab:be:bb:6e:9b:30:f1:4b:de:01:a7:f7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b760caacf777699a8c43237b8926c68e4d12c4fe
        Validity
            Not Before: Jun 15 13:01:11 2024 GMT
            Not After : Jun 16 13:01:11 2024 GMT
        Subject: CN=f504459c7cf0bd93a7e459634d281f50879f8aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:15:f8:e7:ca:c8:55:d0:26:51:3c:a1:23:62:
                    8d:94:46:fa:63:d4:c6:07:67:4b:5a:bd:9f:b1:58:
                    ca:0f:b9:34:70:be:87:84:c3:15:0c:5e:bb:61:c8:
                    29:ab:75:78:d1:44:28:a5:51:f5:01:d6:f5:3b:fd:
                    d4:1f:9d:51:82:3f:17:ce:ae:66:05:e7:19:b5:31:
                    a9:05:4e:94:d3:26:5e:e3:ff:96:2a:a8:86:69:ae:
                    c2:2f:98:59:fa:64:b6:24:17:06:64:67:93:50:fc:
                    3b:fb:15:bd:0b:c4:9f:f4:aa:24:fa:39:34:6b:d0:
                    91:0d:27:8f:ea:3e:7b:60:bf:0a:b1:6f:7e:92:43:
                    35:6d:94:a1:cb:7b:60:aa:40:61:61:67:f0:db:10:
                    15:90:9d:67:d5:14:73:c8:7d:03:b6:04:95:c5:cb:
                    88:e7:13:43:8d:cf:80:e3:1f:9a:81:01:15:8f:89:
                    1d:c7:5e:15:5e:eb:cd:12:f1:ad:1d:6b:c1:f2:41:
                    f0:28:09:04:ac:67:51:78:0e:d7:f2:09:ad:e5:21:
                    d0:2e:07:7a:c1:1f:d8:a9:aa:51:68:b4:60:c6:94:
                    25:ee:c7:d5:06:73:48:29:32:ee:d7:c0:12:af:e1:
                    f5:b8:a5:25:66:1d:bf:9b:e0:4e:9d:a9:1d:30:65:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:04:45:9C:7C:F0:BD:93:A7:E4:59:63:4D:28:1F:50:87:9F:8A:AF
            X509v3 Authority Key Identifier:
                keyid:B7:60:CA:AC:F7:77:69:9A:8C:43:23:7B:89:26:C6:8E:4D:12:C4:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2DKrPd3aZqMQyN7iSbGjk0SxP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d4122-5a56-47d9-bc56-c62be8a703ce/1/t2DKrPd3aZqMQyN7iSbGjk0SxP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9e:99:a2:54:e7:60:4e:2b:48:d1:a3:40:3f:5a:a9:25:97:
         70:21:54:e3:49:e1:ef:25:74:36:21:7b:5f:a0:17:c8:e7:2c:
         34:e3:6b:c1:ff:00:94:a6:df:57:c4:a3:d2:f1:e9:58:a3:ec:
         3f:66:87:64:6f:18:70:57:15:6f:11:9a:99:2c:fa:4f:3b:da:
         42:f7:24:01:8b:a5:64:14:8c:4f:c2:1e:e7:49:79:a1:53:96:
         7a:9b:00:5a:25:f3:cb:9a:16:6f:10:f9:c3:5b:1c:3c:e2:e4:
         28:12:b5:a8:f6:0c:e7:ad:d0:2c:f5:17:f6:b7:46:68:a5:c8:
         be:9b:c6:12:5e:c7:61:5d:a7:43:6a:3c:72:1a:f6:e2:14:bb:
         15:11:20:52:8a:45:20:ab:d1:2b:5d:f4:d4:f7:63:1e:82:3d:
         9f:0e:9f:f0:f3:f8:c7:10:a3:cb:9a:e7:30:2d:41:a9:a2:29:
         8a:82:fa:4c:59:ac:96:37:9c:de:81:d4:ef:32:35:f2:5f:a8:
         42:dc:e1:8c:b8:ec:63:9c:82:5f:f5:5a:2f:5c:f4:0d:7b:5b:
         19:41:8a:e8:d0:b8:40:fd:23:0b:66:ca:5d:32:f2:33:ab:fb:
         ee:55:a4:be:a7:c3:2d:b3:9d:30:01:bd:a0:2b:67:bc:ab:d6:
         1c:c6:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:56:03 2024 by rpki-client on console-ams.rpki-client.org