Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File:                     mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier:          pO+8HvPHUP1CKXyFwYnxf8xMibXFWF3CVxM9yQb7Z/o=
Subject key identifier:   95:D4:10:22:66:29:4D:55:A7:52:02:D5:3B:67:02:8C:EA:48:50:CD
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       0190520FA43B0D4290D0EA95A47F43F94E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number:          11E0
Signing time:             Wed 26 Jun 2024 01:01:15 +0000
Manifest this update:     Wed 26 Jun 2024 01:01:15 +0000
Manifest next update:     Thu 27 Jun 2024 01:01:15 +0000
Files and hashes:         1: DKjZURwOaWIA-6at2RWFBhdkQj8.roa (hash: KW8qECInLTuswGR2f1KWBZvzEsr+RpheOIVcQyvcaAQ=)
                          2: EHCw315dQs8f9kK7SPutnkxrtTs.roa (hash: VKIPNKWpp5MhHKilmdkTIKxSbS37MhTA4EYQhFwBr4M=)
                          3: JBxtpAWY6UyQx8fli2OjyXSCAMs.roa (hash: 8P1fLlMgN6BMfrPTVbJxpZ5qHy79sUVMfmBjXUCg/3k=)
                          4: cg29crYHNsVDv0cHD4Ab3DHRXSc.roa (hash: S24StioDT1R5w3wKrIoSkNCMsg5rwYylRXsZlpcHr64=)
                          5: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: NU7gkiGy9yhWb1ah3klI+EnAmEQsY2erraRMbRXoCxA=)
                          6: zY3sKUWPig7GWql2H0Hp1dcDz0w.roa (hash: DbELxZGEWocma2+1n9GXb6BFwIetRnbjuF6AUSiVFv4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:0f:a4:3b:0d:42:90:d0:ea:95:a4:7f:43:f9:4e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Jun 26 01:01:15 2024 GMT
            Not After : Jun 27 01:01:15 2024 GMT
        Subject: CN=95d4102266294d55a75202d53b67028cea4850cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:ce:71:46:76:e1:44:2a:31:03:da:d5:f9:
                    28:fe:17:7b:a8:4a:55:84:80:f4:60:8a:a4:66:a2:
                    f5:bd:70:74:1d:0b:c2:90:0f:19:01:e4:4c:a6:bc:
                    2b:ee:53:97:7c:1f:2a:19:f5:18:da:c5:44:ff:4e:
                    c2:29:01:7b:17:5d:f2:61:39:db:0d:95:36:d5:79:
                    33:41:75:b4:40:a0:04:ae:af:f4:69:c6:9b:2f:0e:
                    fc:2b:ff:c4:55:4b:ed:4a:ea:f7:8f:e9:97:c4:50:
                    f4:20:f8:1b:ba:b6:15:7c:c9:2a:f2:07:60:e7:63:
                    6c:f5:2c:11:2f:58:54:ed:97:f7:7c:69:d2:cf:7e:
                    00:b9:59:31:d7:0c:b6:b1:c2:ba:83:fd:1d:94:fe:
                    7b:17:ce:4c:bb:de:66:eb:50:da:5f:20:41:6c:bc:
                    1d:e7:36:a4:ae:1d:64:eb:1e:20:f1:8a:f8:c1:36:
                    85:e6:ff:40:3c:e4:1a:f8:55:e2:88:65:44:96:ba:
                    97:1c:8f:39:21:80:bc:4f:5a:16:15:6b:1c:a4:30:
                    f0:42:ac:b7:c0:a9:97:d4:d1:9d:18:6b:1e:3a:7b:
                    f5:56:bc:ee:ae:78:12:98:56:0b:82:e0:08:bb:f7:
                    63:a7:13:1a:46:60:20:94:a0:0f:da:42:31:73:23:
                    a3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D4:10:22:66:29:4D:55:A7:52:02:D5:3B:67:02:8C:EA:48:50:CD
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ae:1a:69:85:d0:8b:a5:45:9b:7a:a6:c6:88:9e:27:7c:d1:
         4b:30:97:e8:8a:8c:3c:f1:f2:6f:39:f6:41:c3:70:9f:4b:11:
         b2:e7:79:68:25:e7:58:81:75:76:7c:15:26:38:3d:60:32:3b:
         fe:49:7a:ad:01:14:43:6d:aa:16:15:00:0f:f5:80:be:3c:32:
         51:25:66:5f:3e:21:8d:7f:9e:b5:d8:7e:2f:8e:67:79:34:00:
         91:3b:4f:10:05:bb:d2:fa:41:81:82:23:20:3a:d3:6d:bf:8e:
         0b:72:d6:73:e4:5b:30:45:9c:cc:46:fe:33:b6:ea:15:19:0e:
         b0:35:36:2e:e1:7a:ec:4e:f0:38:5d:24:09:ac:66:cb:af:07:
         27:89:cf:45:03:fb:13:b2:34:21:95:d7:f8:f3:b9:94:a1:d7:
         ce:d7:53:f0:94:aa:00:94:7d:49:0b:ba:91:15:89:a6:ca:a1:
         96:f6:5d:70:86:65:69:16:97:1a:b5:d8:4b:ed:25:c1:e7:1e:
         19:c6:28:94:fd:57:d4:af:f1:a4:df:86:fd:c5:1d:60:37:e4:
         7f:5a:1b:b0:10:ae:2b:69:74:00:fe:34:1d:56:49:fb:56:97:
         5a:3f:21:36:0a:84:73:39:16:78:3b:05:bf:11:78:6e:20:fe:
         47:ff:62:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:41:59 2024 by rpki-client on console-ams.rpki-client.org