Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File:                     zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier:          6HAsEd+PpmARZcU4QNE5efRZ3/fHmvaQ+SRi0sVti/w=
Subject key identifier:   8A:B0:3D:16:81:61:63:CE:DC:04:6B:77:2C:E2:0F:BC:2F:A1:91:00
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer:       /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial:       01901DEC93DF079FC5C3684335580B5E969C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number:          0BC0
Signing time:             Sat 15 Jun 2024 22:02:41 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:41 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:41 +0000
Files and hashes:         1: 1-8h05c-wk97m9L81JVVxwTFysFo.roa (hash: sb+xxScH5wWLmO3vHL/BOTPZQlitly/UgGDyT5pggJM=)
                          2: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: m42hk8PqCGBopJx+HVgRciiScl1uLA+RBQx7KEVve7E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:93:df:07:9f:c5:c3:68:43:35:58:0b:5e:96:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
        Validity
            Not Before: Jun 15 22:02:41 2024 GMT
            Not After : Jun 16 22:02:41 2024 GMT
        Subject: CN=8ab03d16816163cedc046b772ce20fbc2fa19100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:4c:9c:e6:e8:fb:ab:da:52:81:33:74:eb:
                    3a:57:e7:b7:96:6c:03:f3:04:1c:f4:47:9e:ec:3b:
                    37:e4:34:2e:3e:7e:a1:ff:89:fe:f0:0b:38:d9:2f:
                    bf:a0:18:c1:c9:19:6a:36:c3:9f:f7:e8:78:7d:7d:
                    9e:6c:bb:dc:33:70:7e:c1:ed:62:56:3a:71:53:88:
                    66:dc:f7:f3:ac:59:d9:82:bf:a3:a5:52:c9:76:f3:
                    62:bd:1c:4d:fd:03:ca:ea:a7:ed:98:f8:fa:06:aa:
                    d2:b9:66:a5:12:9a:4c:f2:4f:1f:3d:57:43:23:5c:
                    f5:76:d4:b1:fb:a6:ef:59:7d:72:a0:45:37:87:8a:
                    bd:47:74:23:64:f1:e9:7e:e9:df:c2:af:3b:7a:f6:
                    a8:74:86:3f:6e:22:3b:e6:36:e3:19:b9:48:b5:7b:
                    a5:5f:b5:fc:22:2b:dc:ce:74:d0:fe:87:e9:9f:1c:
                    a2:a6:3b:ec:ee:e8:e0:32:5c:41:ad:f7:80:37:d2:
                    bb:ad:d6:ba:db:b3:76:48:24:36:b1:97:b6:98:c3:
                    bf:b7:9f:bf:cb:5a:cd:96:b4:51:39:47:ad:a8:f4:
                    4f:e3:09:9f:ad:88:b4:1b:33:51:24:97:3f:b6:0b:
                    ef:dd:52:f8:9e:36:e2:8e:15:88:fd:69:87:ed:3b:
                    d0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B0:3D:16:81:61:63:CE:DC:04:6B:77:2C:E2:0F:BC:2F:A1:91:00
            X509v3 Authority Key Identifier:
                keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2b:76:8d:cd:e7:03:65:81:b9:91:c5:23:1f:0e:41:b6:b1:
         bf:69:cc:b1:1d:d5:a7:cb:24:ca:86:0e:0c:94:73:e1:db:2a:
         63:62:fd:3d:04:8b:05:01:77:08:d7:76:1f:13:0e:ad:c2:5d:
         e3:e8:23:b8:7b:22:5e:9c:c3:d8:b3:57:13:47:09:4c:5e:5a:
         cd:d6:37:b2:6d:b4:59:ca:1a:d4:50:c7:50:bd:42:f7:b8:87:
         3d:99:8e:8a:2b:1b:90:ca:f1:aa:28:27:a7:ed:c1:43:ac:1d:
         4e:ac:cc:68:64:e9:a5:58:1c:ad:9b:c0:4e:d0:24:a0:bf:b0:
         6f:c7:fe:92:6e:82:dd:72:bd:27:f9:f8:e9:56:74:67:39:3e:
         f2:f5:1f:6c:1c:d2:3a:7b:78:69:69:cb:97:01:34:0c:50:96:
         b7:17:de:99:13:bd:fa:1a:2f:67:c9:2b:ba:0b:c7:8f:b2:19:
         42:db:c8:37:d0:cf:a9:12:40:ee:dd:6f:cf:50:82:75:97:70:
         91:4a:8b:f5:ff:12:7c:c2:1d:db:57:d1:bd:a0:68:25:61:a3:
         2c:bc:09:7a:68:42:43:8f:fc:4e:f5:b0:96:84:65:ce:f6:d6:
         1b:57:5a:02:6c:7e:7d:08:fa:52:5e:0d:b1:2b:86:4c:a0:0e:
         08:ae:da:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:52:55 2024 by rpki-client on console-ams.rpki-client.org