Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
File:                     2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json)
Hash identifier:          kTpfRtz8mrtXYz5MxwH0CMI8ZK/5vLo8ShlyzzN3b5c=
Subject key identifier:   CD:18:1B:E2:37:2B:76:C2:A5:19:22:44:81:BD:59:95:68:ED:FE:F3
Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2
Certificate issuer:       /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
Certificate serial:       01906184F5A4D1A37BACB0D5E9389ADDD958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
Manifest number:          93
Signing time:             Sat 29 Jun 2024 01:03:41 +0000
Manifest this update:     Sat 29 Jun 2024 01:03:41 +0000
Manifest next update:     Sun 30 Jun 2024 01:03:41 +0000
Files and hashes:         1: 1-Y5ubFW4nCnV-fXk9IkkZYij_CE.roa (hash: 0sGus1PDmxb60lznROSOCCXKMq9NSnxlFIHm2/pZgrA=)
                          2: 1-aa7uyRFAIdvMT9eWUgnLLGKJoM.roa (hash: GA/1zpail7t77dj0tP1pvS6vlun/yQ9tpw+w1dVGKSY=)
                          3: 1Ic42bNLVeyxtGi_hhgf6n32ANg.roa (hash: bwUl9TIR6Zz/IKEsvgfN2BlC2iOIFbcT2AIkh9MbqYw=)
                          4: 1w8aTD013opsDDsCDIyMaQXF2eY.roa (hash: P5HRvB1g3lLUVpTm9yKbpJd5sVg6euIafgYq6PluSrk=)
                          5: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: TCfqVgZiEzyO3Z+0fXQ5MGBNC1pkYVy3JYplEuaWTaA=)
                          6: 61IzDXcDQNDDcf82xfy2nXI7oFY.roa (hash: HiDh5SPvLwwPk4MWxRrI3CqkVbG9Da8384Tw8nSTOQ0=)
                          7: JnB5zzjGAESuQkUQnMydqeFIq6Y.roa (hash: /La/8rbGbmpyre+bkHaC9LoL1X87QdpU4ihxorLVEoQ=)
                          8: Q9pVZOUrhJxmgKGoZNDWDN9JVd0.roa (hash: 95QWTY84nA08IYGVEI5guE0hOawCm7o+T8w92ZZhAaI=)
                          9: Tn5cmUWI13OKHZoviEO4n-wocrY.roa (hash: ROYVSMFLCWm82HPTmw5S4kU+oEKLbyI0l2fhS1gcupA=)
                          10: cOX3Ux6W3nUP963rR1NL5kceTYQ.roa (hash: L93xV0Jj0L31PvkEVeRvkjB14znckTj/2G/cWRjT/9Y=)
                          11: ktr5osSRGAePlhG83LnpRCyNXpE.roa (hash: mt9Q896QZ4QcmVqnB/nOL2wfsQhIglauvCRXy7LP6Y8=)
                          12: uJzr-rHGrHdeOUuvD-Pv5Pt-Z3A.roa (hash: KqMXIbukoSTfEfNZSC09tGgJz7ccf9wH+B6xt0gfTnQ=)
                          13: xBBrT8qDFCEkvBjCaHh64ByfEL8.roa (hash: ugASb9E2nkKhExBiCI6TgxYUvYUwQdrQCWJj6REKw58=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 01:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:61:84:f5:a4:d1:a3:7b:ac:b0:d5:e9:38:9a:dd:d9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2
        Validity
            Not Before: Jun 29 01:03:41 2024 GMT
            Not After : Jun 30 01:03:41 2024 GMT
        Subject: CN=cd181be2372b76c2a519224481bd599568edfef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:d9:28:77:df:cc:d2:46:75:3f:ff:b1:93:
                    ff:63:29:79:23:aa:69:50:a0:ed:91:cb:c7:46:01:
                    a8:b2:f3:70:35:c8:db:96:c9:0b:9d:4e:0e:b9:90:
                    be:8d:e2:00:5c:4e:a0:e3:f4:5c:16:88:46:13:ac:
                    c8:d2:f4:d3:56:c3:f0:a5:d1:9f:4e:2d:f3:1c:2c:
                    d4:45:50:91:46:84:14:2b:2f:42:59:18:ad:12:73:
                    0c:8f:17:30:34:e8:7d:c3:67:34:9e:86:7e:bf:5f:
                    38:39:4b:2f:a4:50:68:10:cd:96:ac:32:ab:fe:8b:
                    d9:7f:71:f2:0f:0f:80:7b:eb:5e:18:44:ab:2f:8b:
                    18:ac:c0:27:6a:a1:c0:b3:09:5d:32:49:41:a7:90:
                    62:df:a0:a3:ac:0a:b0:12:86:58:c9:02:cb:9f:b4:
                    75:d0:a9:a9:74:a2:b7:39:7c:64:70:e2:b4:6b:6a:
                    00:59:c7:ff:c7:cf:b5:36:b1:5d:8c:44:6f:93:ce:
                    9c:2a:a0:2a:06:ca:20:96:3a:c3:5a:fd:2f:da:1a:
                    bc:26:69:cb:ab:0f:79:0c:6b:f0:72:75:c7:ad:50:
                    1b:4d:58:b8:1e:79:8b:a2:97:95:bf:cf:21:ef:0b:
                    88:d6:58:f7:0f:43:b6:27:bb:59:29:f9:ed:29:3f:
                    d1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:18:1B:E2:37:2B:76:C2:A5:19:22:44:81:BD:59:95:68:ED:FE:F3
            X509v3 Authority Key Identifier:
                keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8f:ab:d0:fd:7f:9e:72:39:58:56:8c:80:02:d7:d9:d9:60:
         4a:c4:6c:46:40:63:06:7c:3a:cd:d1:98:e4:2b:07:43:4a:90:
         83:fe:60:2f:08:16:bf:97:fd:d3:2e:06:6e:9a:ba:8a:18:a1:
         9c:7b:ad:4a:03:e9:27:3b:6c:d6:97:a3:e2:d0:4e:29:82:12:
         7d:4a:ac:31:6b:40:63:63:b3:85:ee:51:ae:d3:59:33:b2:8d:
         68:ab:84:bd:a1:a9:52:3c:a0:36:1b:a0:34:e5:84:d1:c2:62:
         bf:fe:c6:6a:e0:d6:68:7d:98:18:dc:6a:a0:21:9a:88:ce:42:
         76:7f:d9:5e:50:7c:a0:5c:a1:e1:e8:27:f0:c6:64:c8:af:a4:
         c7:2f:3e:3c:fb:6a:9e:52:ff:92:7e:d3:48:af:3e:2b:3e:3f:
         8f:79:70:c9:a5:92:9f:c9:0a:ae:36:ad:51:e0:28:f9:02:19:
         14:da:17:0a:f5:be:68:1f:59:4f:c7:83:f5:2c:3f:db:37:bf:
         c3:39:15:50:91:f6:4a:eb:27:b1:d8:21:ed:ce:e4:cc:58:9f:
         3b:de:4c:34:9f:1c:a5:74:e6:21:e9:ee:f2:c9:40:2e:61:d2:
         08:7e:0c:bf:f7:b1:11:8f:55:eb:cc:3e:9d:24:94:49:db:3a:
         d8:a2:5f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 04:30:51 2024 by rpki-client on console-ams.rpki-client.org