Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File:                     cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier:          M7d6T4gk5zmR5ZdVmQLU012ymv10H68RWImYMeFFZE4=
Subject key identifier:   2E:DD:08:B3:AA:66:19:04:6D:5A:1F:CA:6D:49:C3:11:99:2F:4B:85
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer:       /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial:       01901EC701601A3880279048FA518F00E482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number:          11DF
Signing time:             Sun 16 Jun 2024 02:01:16 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:16 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:16 +0000
Files and hashes:         1: Sl2Gj0Y6livX_zHEp2GR5VnRFu8.roa (hash: L8VSAlPAC3PweXpB2Dxpca7zoX7FAr38i8kmuj6/flk=)
                          2: ZPZGNE6QPIULeHcuT6THhw5DvDk.roa (hash: 2uGp2Aaz7irmTliU9AJ2qIu534Q43k2yqE8NOYR4HNE=)
                          3: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: EaB75ig2imQD5Sg62tJ/7hPF3woqwgBG/NYhX9sZwXI=)
                          4: nwPeNLo1IA8DkU9FQsEL_ZUcdC8.roa (hash: F0+oqu0uTUKLz4z8oU7/CmMvG+kmgsKrOYE/RLvfQ5I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:01:60:1a:38:80:27:90:48:fa:51:8f:00:e4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
        Validity
            Not Before: Jun 16 02:01:16 2024 GMT
            Not After : Jun 17 02:01:16 2024 GMT
        Subject: CN=2edd08b3aa6619046d5a1fca6d49c311992f4b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:12:66:ff:ad:90:3a:61:31:ca:c5:a5:99:
                    c7:96:0a:94:4a:77:8a:d0:f6:26:e4:da:ca:2a:f2:
                    2e:47:77:9d:f0:c5:3f:af:4d:05:db:8a:98:ed:bd:
                    be:b9:16:dd:20:4f:24:16:75:a0:79:ef:65:9b:69:
                    2b:3a:3c:15:cf:53:11:c5:c4:e7:85:82:73:d0:2a:
                    c1:27:80:cb:cf:77:c3:ca:eb:28:dd:09:7d:28:d5:
                    65:0c:4e:0a:04:2f:70:b9:88:83:fb:95:f5:a5:28:
                    c3:9a:42:7f:36:a7:ef:83:fc:41:eb:7e:42:65:7c:
                    53:4c:2a:59:6c:30:77:5d:d1:6f:e9:8b:f0:ef:5e:
                    dc:03:49:3b:4e:0f:a5:ff:02:59:93:48:b4:69:c4:
                    36:5d:0c:97:c0:ac:19:1d:e0:6d:d2:d7:7e:81:bc:
                    96:9d:b4:f0:46:b4:98:0c:3e:77:d8:54:c8:7b:44:
                    58:bf:5a:35:84:ec:15:6d:50:0c:fe:4e:73:c8:8a:
                    ed:2b:e6:2a:d8:42:5a:fc:19:1f:38:b9:5d:73:4b:
                    33:ff:cf:f4:fe:f7:51:fd:18:f1:6c:d0:f0:a2:c1:
                    2b:2c:c6:76:f3:1b:84:94:ec:58:20:c4:d4:7e:79:
                    56:61:74:13:13:5a:fc:9d:1d:01:26:e9:ef:16:3e:
                    d7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DD:08:B3:AA:66:19:04:6D:5A:1F:CA:6D:49:C3:11:99:2F:4B:85
            X509v3 Authority Key Identifier:
                keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ed:b5:6d:59:7d:b5:99:36:23:59:40:a0:a2:aa:39:73:4c:
         ba:52:52:cd:7f:d4:0c:d6:b8:f0:3f:28:54:f9:67:89:b4:40:
         d3:61:8d:52:29:fa:9c:f2:fc:91:8b:e0:d4:25:c7:e2:ae:83:
         84:97:a1:61:0b:18:0b:c8:b1:10:50:63:39:32:90:65:fd:cd:
         8e:b4:3f:db:88:1a:07:22:f1:4a:1d:e7:95:cd:7a:7c:0c:eb:
         7b:f6:94:67:35:12:7a:46:be:5a:69:fb:44:f6:64:50:5d:0f:
         51:f7:66:1b:d6:f5:f3:52:e2:e1:15:a9:12:dc:78:fc:e6:b2:
         61:48:14:eb:89:d4:a4:02:1c:16:7c:a9:ae:ba:a7:f0:7f:f4:
         4b:ba:6b:dc:09:2e:af:70:9e:1b:6e:75:b1:be:47:b9:80:26:
         2b:d3:3d:b6:4c:35:9f:04:3b:75:ba:2d:c6:c2:09:40:3e:a5:
         be:10:42:e1:dc:36:17:44:dd:aa:76:58:91:4e:45:1b:00:9a:
         71:e4:52:0d:1e:9a:ad:ad:6c:d6:58:70:ff:ab:35:91:81:9f:
         92:40:a1:f7:0f:01:dc:8e:a6:96:12:76:ef:da:f7:5e:00:9d:
         05:4c:58:5e:71:96:b0:bc:d5:46:98:83:31:6b:ee:3c:eb:69:
         59:79:4a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:53:31 2024 by rpki-client on console-fra.rpki-client.org