Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
File:                     g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft (raw, json)
Hash identifier:          sP8/NWGEeEc301gzwJUWPFds2e6vmuK9jA2yU1wV4OY=
Subject key identifier:   45:D0:1C:BB:BB:33:07:D5:CB:78:CA:E0:31:E4:75:AC:19:4F:B8:EB
Authority key identifier: 83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
Certificate issuer:       /CN=83c8d01caf2b0751d035c537566f45627925e4f6
Certificate serial:       01905D00EF43F6B9BADD1BD0613FEDA103F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
Manifest number:          0D2B
Signing time:             Fri 28 Jun 2024 04:01:00 +0000
Manifest this update:     Fri 28 Jun 2024 04:01:00 +0000
Manifest next update:     Sat 29 Jun 2024 04:01:00 +0000
Files and hashes:         1: K6hTEirlyrqUc8yJ5SEsSekiQ68.roa (hash: +GyILsiAYqlkGFVTHPY9+V27uWN7aBEzx8lfVJpLvRM=)
                          2: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl (hash: 3z7JUsnydYkKZTFpqE8AmOk2/vOhtJDIKxP/9qNgTcQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5d:00:ef:43:f6:b9:ba:dd:1b:d0:61:3f:ed:a1:03:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c8d01caf2b0751d035c537566f45627925e4f6
        Validity
            Not Before: Jun 28 04:01:00 2024 GMT
            Not After : Jun 29 04:01:00 2024 GMT
        Subject: CN=45d01cbbbb3307d5cb78cae031e475ac194fb8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:79:e4:cb:5d:3a:ce:96:46:f5:0f:4d:35:
                    82:63:9e:3e:97:74:7c:2d:f8:32:4e:27:46:53:bb:
                    87:2a:15:70:6a:10:ff:35:2e:8f:92:78:ef:2a:f6:
                    ef:10:84:9b:59:d2:25:a9:12:50:7a:2b:73:f6:01:
                    8e:cb:45:53:01:a9:a7:d0:e8:08:88:c3:ef:e9:7d:
                    8b:df:02:07:55:10:7d:a6:0b:af:c7:94:92:bd:07:
                    b4:96:83:d2:65:3c:43:1f:aa:e2:dc:67:c3:5e:ae:
                    9a:e1:74:2e:35:08:74:39:f8:78:26:e1:f3:b5:01:
                    19:0e:c0:28:b2:1d:11:ed:8e:4a:3c:72:8f:70:80:
                    bc:36:04:4f:4f:ea:c7:a4:4b:51:32:e1:62:6d:06:
                    09:d8:49:e7:24:cd:f0:10:6e:b6:7c:cd:11:36:1b:
                    07:1c:3a:04:3b:56:d3:0d:f4:59:d3:a4:2f:f6:2d:
                    31:b8:53:6a:49:ee:a1:0b:19:d4:7a:83:2e:9d:dc:
                    a9:c6:7f:92:9b:cb:d4:09:19:e5:ff:ac:57:4d:3b:
                    a1:c9:84:10:67:aa:8c:e0:34:bc:1b:0b:50:e6:4a:
                    a1:c0:8d:85:1c:48:e5:72:0a:fd:8e:ec:2e:cf:46:
                    e3:b7:4a:48:0e:3d:61:d5:47:fe:5d:ad:74:c1:2d:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D0:1C:BB:BB:33:07:D5:CB:78:CA:E0:31:E4:75:AC:19:4F:B8:EB
            X509v3 Authority Key Identifier:
                keyid:83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b4:99:d0:2f:64:ae:b3:4c:1f:f9:d2:57:1b:64:1e:01:f2:
         b3:42:8c:79:4a:fe:e4:39:44:07:6b:b4:20:e8:32:90:70:b9:
         9f:f8:ab:3e:24:00:af:d6:b2:78:8c:08:10:96:12:7b:ac:be:
         ff:83:e7:4f:fc:a0:de:8b:f8:61:6b:54:fc:d1:e6:b4:0b:35:
         78:97:66:20:0d:5b:52:b8:34:9f:8e:e8:ec:6e:4f:05:f8:cd:
         96:9b:5e:6f:8d:50:1d:24:b1:28:0d:24:1c:b0:e7:43:bb:ea:
         95:b4:fa:a8:37:69:44:48:2a:ae:53:ac:7a:5a:01:04:6e:31:
         f2:2e:f8:63:e8:37:8a:4d:46:be:0d:8f:5c:eb:75:20:07:29:
         b6:25:33:94:94:ae:e2:2d:1b:62:d9:47:db:96:06:67:0d:0a:
         71:03:0b:e7:bf:e3:a9:1d:6f:b1:11:3d:5b:49:ee:41:af:23:
         90:44:d1:b3:f0:06:e2:e2:c1:01:95:f6:59:3f:08:55:0f:c1:
         f2:74:3c:ca:8a:7c:68:9b:95:2f:4e:6b:6a:ca:00:72:a7:99:
         ab:79:8d:5c:35:15:1b:84:4f:55:18:5e:a7:6f:8a:bd:17:1f:
         58:63:0a:1e:b6:fc:9d:e6:a7:45:0c:11:a6:61:1b:bc:08:41:
         5d:04:e5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 09:32:08 2024 by rpki-client on console-fra.rpki-client.org