Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier:          UrXX2OuT2Hp6GqR9IFCpuTFzxiFcpb5iSK6fLhjadJs=
Subject key identifier:   9E:84:3B:B7:C3:1E:F4:A4:02:67:D3:6A:FA:80:5F:CC:AD:44:E7:DE
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer:       /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial:       018F87B64B96AAC79C8471F8D68DC409028E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number:          0EC0
Signing time:             Fri 17 May 2024 18:00:21 +0000
Manifest this update:     Fri 17 May 2024 18:00:21 +0000
Manifest next update:     Sat 18 May 2024 18:00:21 +0000
Files and hashes:         1: 9HJ6tASdJCniDpO3ZW7L70iFIoQ.roa (hash: zHklIzgkofGzOkkbRaa7bL5l/tShZjkLjSQ597n3IUo=)
                          2: 9KAfaDsU33IRH77MZEJ0152sN9k.roa (hash: /wCwkrCyzmYsu6zplJU9Wj0i3e+QM4N/vMOq70TDjtQ=)
                          3: IE096pkiWFZjAHKdOBs1fpVzhhA.roa (hash: s7tgeAdN6RBO395tIchbu1dBVmkqACCUF0fiZ6tvslA=)
                          4: XLwBlSuxmiy3hJ0VjXnxgvwe384.roa (hash: cJO1cNEDjDYvvTCWFu3U/1DZoOrDorvveQK+BkxpSQQ=)
                          5: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: XxBrrEXuqwPJiCJxLlp66WrHfpHN1z/rTbQeNOhFRNM=)
                          6: voGfWKrB0pMJGWiTYvuHgysWcVk.roa (hash: DbWHq336FoM2kpi7oPbzodHtxymPebfA/Q8nvCbtziw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:4b:96:aa:c7:9c:84:71:f8:d6:8d:c4:09:02:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Validity
            Not Before: May 17 18:00:21 2024 GMT
            Not After : May 18 18:00:21 2024 GMT
        Subject: CN=9e843bb7c31ef4a40267d36afa805fccad44e7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5b:0f:f8:0b:33:57:d7:84:28:11:b2:fd:ef:
                    ac:50:bb:53:ec:cf:65:25:88:94:8c:82:e0:e8:49:
                    db:93:cb:70:aa:9b:1e:74:ac:2c:7c:dd:fb:11:f4:
                    9e:07:b8:12:d6:5c:3a:da:f5:3b:3f:ba:6e:51:6e:
                    ec:da:40:eb:72:25:5d:7f:3c:d2:13:13:7c:c2:99:
                    fa:02:21:31:47:0b:08:a8:8a:9b:b0:0d:65:60:50:
                    54:41:59:9a:07:e3:76:b4:f8:17:b5:cb:e3:73:ae:
                    6c:cd:76:7d:69:91:77:77:57:89:31:fd:73:97:b6:
                    a8:f1:ae:b8:27:53:e0:19:be:e9:8b:3b:66:6d:fb:
                    8b:be:c8:85:54:26:b3:a7:c1:7e:47:04:04:a4:c8:
                    6c:4c:8c:99:83:88:18:76:0b:59:1f:c6:6a:14:b2:
                    0c:3d:55:2b:cb:91:dc:4a:c6:97:7d:45:a6:d6:12:
                    58:4b:ad:f9:9c:b9:92:05:39:46:4d:22:87:fa:54:
                    a5:1c:46:90:66:d9:f0:bb:7a:7f:a0:00:21:68:ad:
                    85:0a:ec:fb:1a:90:d5:f2:e2:a1:6b:90:d7:e5:1d:
                    8d:ed:17:8f:96:f3:91:71:0c:b9:d3:fc:57:b1:b9:
                    8d:9a:ea:15:00:64:8c:40:ad:76:c5:47:ee:10:c6:
                    36:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:84:3B:B7:C3:1E:F4:A4:02:67:D3:6A:FA:80:5F:CC:AD:44:E7:DE
            X509v3 Authority Key Identifier:
                keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:79:2c:83:c7:18:d8:7c:0b:ad:4a:c1:40:b4:69:d4:7f:66:
         95:1a:d5:b2:58:8d:73:21:14:ac:9f:ff:44:65:e5:a6:c8:03:
         9f:a5:18:fc:c9:e1:4f:19:68:53:f5:f6:bd:3f:79:cd:1f:86:
         30:ff:64:8c:45:26:51:6c:e7:c6:6e:21:bf:8a:d7:a7:d1:2b:
         72:ba:0e:89:4b:25:4c:cf:94:66:39:89:45:0f:8a:93:2a:9b:
         5e:0b:c8:72:6e:15:a6:23:eb:e5:e8:e5:c9:8a:82:a6:22:63:
         b2:09:e7:d3:77:bd:03:eb:d2:67:5c:b3:54:65:9e:b4:a9:cf:
         88:76:31:64:59:62:d0:60:3d:68:56:6e:7b:46:ef:2d:74:89:
         69:40:bb:35:79:ea:19:c0:c0:f4:c7:56:df:11:bc:ca:e6:80:
         42:3e:11:60:5c:71:f6:af:8f:a4:65:00:4b:45:6c:d0:93:51:
         b5:14:c7:19:5b:2c:1d:c3:7e:6a:3c:a5:29:22:7c:1a:29:84:
         d4:3f:2b:0f:4d:b7:f6:45:85:54:8b:ff:bf:4e:b3:66:a0:45:
         2a:30:2d:f3:60:da:59:93:f9:87:5c:c4:0b:ac:2a:ac:b5:04:
         5a:5f:95:f7:b1:2a:55:fc:ae:aa:64:77:ed:53:c3:46:7f:33:
         9c:68:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:15:46 2024 by rpki-client on console-fra.rpki-client.org