Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
File:                     mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft (raw, json)
Hash identifier:          vlEPUazUbbq5e7+gn+IpreFeppwgJwqb86Fi497pB7I=
Subject key identifier:   EF:F7:41:83:9D:9E:C1:C2:90:65:78:1B:47:BF:76:12:CA:44:E6:A5
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Certificate issuer:       /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial:       01901DEC8EFB3F0D13E69D0283C3015898E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
Manifest number:          11C7
Signing time:             Sat 15 Jun 2024 22:02:40 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:40 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:40 +0000
Files and hashes:         1: WmB9UtjUjjVx7xr51T-GmgdKEKA.roa (hash: D3uiVkDTLKFcQCkiwzGaEl7WvbAfLwc1z5BcyuQj/RA=)
                          2: mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl (hash: QcMpQHn39IQZbrAYasjOi/vW9Fx7Spr1iXkIVfqbD1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:8e:fb:3f:0d:13:e6:9d:02:83:c3:01:58:98:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
        Validity
            Not Before: Jun 15 22:02:40 2024 GMT
            Not After : Jun 16 22:02:40 2024 GMT
        Subject: CN=eff741839d9ec1c29065781b47bf7612ca44e6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:f3:7c:25:53:f9:55:0d:30:27:3b:48:84:8b:
                    e7:db:80:43:ea:e5:af:2e:d1:70:fb:1d:58:1a:47:
                    64:de:11:90:92:99:14:a3:38:e5:55:aa:69:57:cb:
                    dd:f2:15:00:2d:7b:90:b5:70:1f:cb:f6:31:4e:32:
                    8b:65:05:f1:b0:ce:c5:64:8b:3d:ee:24:e0:48:d2:
                    ca:a8:ac:5c:02:29:eb:c7:4c:60:03:db:f5:09:f4:
                    31:f3:2e:30:32:06:e8:3a:20:8d:49:0a:77:46:1c:
                    09:01:f8:74:4b:e5:74:5a:97:9b:b1:d1:4b:fd:3c:
                    eb:09:3b:b7:64:aa:24:80:9c:58:c4:54:a2:76:fd:
                    f8:2f:16:0f:aa:53:de:46:2c:48:b8:05:7d:c8:9c:
                    63:9e:fc:1f:24:24:8a:ed:97:13:b3:e0:c8:ec:cf:
                    0c:68:e1:00:b7:a8:76:05:43:64:34:d7:ee:15:1d:
                    bb:09:3e:fb:e1:0c:b0:96:0a:a6:aa:d8:c0:91:36:
                    47:b2:7c:65:03:71:3c:ea:49:53:be:27:c4:1c:a9:
                    ce:aa:4c:93:9b:03:11:c4:83:00:bc:13:71:0a:27:
                    d7:2a:3c:13:3a:1b:6b:1e:12:85:e2:f5:f3:5c:ff:
                    d0:0c:15:d1:9b:ef:c8:a0:c5:90:3a:dc:41:c4:31:
                    15:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F7:41:83:9D:9E:C1:C2:90:65:78:1B:47:BF:76:12:CA:44:E6:A5
            X509v3 Authority Key Identifier:
                keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:38:01:e4:b4:e0:c0:67:69:4b:e7:01:fe:68:a8:68:0f:7e:
         a4:f7:e7:2e:68:d1:c3:32:72:05:7e:61:09:ef:ee:0e:35:9a:
         3c:1d:22:17:2e:14:1d:4c:2d:28:9b:d6:62:e5:9e:9c:9f:e4:
         96:f3:5a:25:89:05:c9:ba:43:15:5a:ed:a4:03:18:38:0c:e4:
         db:b4:8b:86:ac:ae:99:5c:88:d3:ac:1a:59:c1:19:b7:19:65:
         9e:c3:72:fa:70:ef:ea:c6:b6:e7:ff:be:79:8e:b4:23:0b:71:
         0f:0f:5b:09:db:3e:15:be:48:3e:71:fe:01:82:37:31:74:dd:
         39:be:13:57:f4:9d:8d:bf:c0:a4:88:83:77:b0:99:9e:65:44:
         ca:21:f6:34:9a:7a:71:90:94:d6:8b:e1:35:61:f4:75:05:df:
         79:de:2f:e4:50:de:b1:61:b6:35:e4:d2:b1:76:6f:34:5f:58:
         09:bc:2c:46:42:df:7c:3e:cb:2b:f4:cf:e0:72:d4:09:d3:08:
         52:a2:e9:eb:4a:c2:62:1a:97:e0:b0:ee:ad:4b:d1:90:12:5b:
         cd:84:0f:53:14:c9:62:57:47:1a:e0:06:8a:4c:d5:05:b6:0e:
         63:fd:71:23:cf:91:fc:6f:67:77:71:23:4c:37:b8:bb:d9:fa:
         fd:00:27:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:09:39 2024 by rpki-client on console-ams.rpki-client.org