Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
File:                     bqtTZAsJMZJLc_dgklhFFQpszKU.mft (raw, json)
Hash identifier:          e3x3ShFgMtdBVmxL7E1WhMOGNBh9FnZu6CpWW6akSSY=
Subject key identifier:   78:03:C0:DD:BC:71:30:AF:F3:8B:F3:3D:33:62:09:20:44:CE:A8:4B
Authority key identifier: 6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5
Certificate issuer:       /CN=6eab53640b0931924b73f760925845150a6ccca5
Certificate serial:       0190614AFAA59D716845192A24FEFCF0E4C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
Manifest number:          0F02
Signing time:             Sat 29 Jun 2024 00:00:21 +0000
Manifest this update:     Sat 29 Jun 2024 00:00:21 +0000
Manifest next update:     Sun 30 Jun 2024 00:00:21 +0000
Files and hashes:         1: 2a46BL9nRkw5iR_pr53mHEuMQ3c.roa (hash: fE387Uby1b8bt/adKJETG+6hnvurhwh+Wy+8TXbD6xM=)
                          2: 3uUu99DfEcKZIZPXIeUAYLkYIoo.roa (hash: rnlvzUyBCUqBVzKgK51RIb/16S5vIrV85A1r2Hjc9cw=)
                          3: 6XuRk3h4U9PjA-R8zLwtDzqexDU.roa (hash: M7bnEZfKQntFBpKQCooYtact+2IXo78YsVAwc66ibuY=)
                          4: BSF6u3WBy0uR6LKEcZrdKamRWcU.roa (hash: JvJuQy0fOONYxYcIqW+RFw5TQYrsMHKiJrQcxT3i3U0=)
                          5: CcShVghWEy2Frlr3GHig6bB9XnM.roa (hash: WXatT3JbI5lvP1MQfkHppTOHWeOi1x/MmY7Lf1EEJ74=)
                          6: Qb8Eqi2WaH_Y-KVM-RjgrfCoUhQ.roa (hash: w28YtAdNNL6FMA36pxUzg3FguVl7n2OBHX3ZkJuO1Y4=)
                          7: bqtTZAsJMZJLc_dgklhFFQpszKU.crl (hash: lMwY/wtf3Ysd9ikLCgw8tCRtzBeCRVhxwXI8PdY98+M=)
                          8: laJYcTDH6ZRIjWUIbsQaISolpMo.roa (hash: mhKmBmAYjrMSijZnrCr20GgnCRsNlTVlQalOL0yIhhY=)
                          9: lvkT13tErtj_CzjY-OPkImtORDI.roa (hash: MAdXdXOy4yT73MFuX3kHkZCyt0QnP82UuaKhsgkkrUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 00:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:61:4a:fa:a5:9d:71:68:45:19:2a:24:fe:fc:f0:e4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eab53640b0931924b73f760925845150a6ccca5
        Validity
            Not Before: Jun 29 00:00:21 2024 GMT
            Not After : Jun 30 00:00:21 2024 GMT
        Subject: CN=7803c0ddbc7130aff38bf33d3362092044cea84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:31:bd:08:c8:ba:47:71:95:e0:8d:42:05:
                    17:05:f3:d3:28:88:16:d6:c3:f3:ae:25:db:95:bd:
                    33:e4:83:01:34:7b:be:60:00:91:6b:46:85:8d:19:
                    4b:6c:ca:f3:d1:b3:8f:43:ac:c4:d4:06:fa:75:e6:
                    37:df:ee:15:99:f4:c5:65:f6:4c:5c:88:dd:70:9c:
                    6f:b4:d0:5f:85:08:d7:ac:ec:c8:05:37:52:b6:e1:
                    b6:1a:d8:bb:77:20:2c:d1:a3:c0:38:8b:0a:91:51:
                    ee:3f:7e:53:f9:10:aa:a3:b0:ec:30:02:75:33:c4:
                    7f:2a:ff:81:c0:0b:a7:97:d8:24:43:0f:ab:ea:4c:
                    d3:8e:a7:f8:a1:d6:0e:18:35:67:25:f7:e4:36:5d:
                    a3:73:7f:9e:0c:d7:e3:0c:5d:e9:21:69:f8:98:25:
                    00:65:c9:78:71:7a:0a:bb:f5:29:a3:0f:a4:d0:2d:
                    12:3e:b4:df:69:e3:1d:e8:b7:cf:82:b0:23:2d:3c:
                    9a:71:9c:5d:19:d6:0f:db:fc:38:d3:f0:51:47:b4:
                    a3:e8:94:bc:c7:11:59:fd:fc:e9:3a:00:06:02:d5:
                    eb:c5:14:7b:14:01:d8:f5:aa:41:cd:93:ef:d2:30:
                    6e:18:5b:38:56:0f:2d:7a:04:f1:63:e0:72:81:13:
                    90:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:03:C0:DD:BC:71:30:AF:F3:8B:F3:3D:33:62:09:20:44:CE:A8:4B
            X509v3 Authority Key Identifier:
                keyid:6E:AB:53:64:0B:09:31:92:4B:73:F7:60:92:58:45:15:0A:6C:CC:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqtTZAsJMZJLc_dgklhFFQpszKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2a38e6-294e-4fa3-a5a0-53046323951f/1/bqtTZAsJMZJLc_dgklhFFQpszKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:61:d3:85:9a:7e:e1:32:6d:53:a9:6c:5c:f7:8a:8d:ed:99:
         d3:f6:4d:d9:ee:3c:e9:2b:f9:e6:29:20:08:6f:52:ec:b5:e2:
         7b:42:27:c6:96:2b:23:b2:88:94:c0:4e:34:84:09:de:8a:2e:
         23:cc:c8:11:14:43:8a:ed:a9:cc:a5:86:d2:d6:ea:ae:fa:2e:
         bc:67:f9:df:6b:c2:71:4c:77:09:ad:dc:f6:7b:be:1f:bc:79:
         e1:a7:36:52:6e:ab:c3:ff:23:52:fa:69:b8:d0:17:bc:0a:c5:
         ff:ba:e0:44:0d:b6:43:fc:07:37:88:88:c5:0e:4e:85:43:c8:
         99:a1:5f:34:45:9a:50:63:bc:d2:78:48:ac:c5:66:2f:1b:19:
         70:34:21:9b:ad:82:5c:3e:ab:4e:90:39:fb:e6:d6:8d:5d:d2:
         a0:12:85:9a:16:e9:dd:29:b3:48:d7:68:c2:2c:11:74:6b:a4:
         61:c3:b7:af:2a:65:72:82:e1:f6:0c:b1:c8:1c:da:30:bc:f5:
         a0:84:14:30:c2:b6:cd:a0:1b:7b:99:e5:18:af:e6:a2:84:2e:
         e8:a5:20:3f:58:86:40:ee:6f:99:aa:70:4e:2b:23:8d:53:2a:
         03:4f:16:fd:30:2a:f8:68:51:8e:d7:0f:91:f0:60:47:02:61:
         f3:16:88:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:59:27 2024 by rpki-client on console-fra.rpki-client.org