Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
File:                     m-02rxPaSC_feftUA-UHSGDuzQ0.mft (raw, json)
Hash identifier:          AqUYClhBrdSSvtW/IBP0c0GYNPbIaC6V63TCU0om0h8=
Subject key identifier:   3B:B7:AB:5B:D7:4F:FB:5A:E6:8D:3D:3E:0F:8E:A7:1E:11:72:3B:F0
Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
Certificate issuer:       /CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Certificate serial:       0190625DA861D902866BC41F1619C930A953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
Manifest number:          0CCC
Signing time:             Sat 29 Jun 2024 05:00:23 +0000
Manifest this update:     Sat 29 Jun 2024 05:00:23 +0000
Manifest next update:     Sun 30 Jun 2024 05:00:23 +0000
Files and hashes:         1: 9ydGXKFDSqu48eNIpY4HYMAQqFM.roa (hash: BjvK2XzA+gHug/cCegHGD4n1HbPXwXs/xADjI4SWplY=)
                          2: HEStv6tnaY7YwaTe4TK7IuZL3l8.roa (hash: ONMoJ22SSpvtaa4VrEgXGRCK+JNXFoBMveLSYRguPvY=)
                          3: RdELbu1K4J7u7V8EQHEwwtIWGnE.roa (hash: EM3/ycQlm3Rwu97YXm0Vf9GkaBovbHM1o5RuwZM8Rfk=)
                          4: fnqAI_D626CskJOuSqXrMYR7fss.roa (hash: cjILXmlHjq2IWEKzSWaJxV87umHlgd50teTBeE9+qTk=)
                          5: m-02rxPaSC_feftUA-UHSGDuzQ0.crl (hash: tfwMvR7GM9ZiVeB9ZIWd2+vI+DP9kXiNFP2wnSXNZmY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:62:5d:a8:61:d9:02:86:6b:c4:1f:16:19:c9:30:a9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d
        Validity
            Not Before: Jun 29 05:00:23 2024 GMT
            Not After : Jun 30 05:00:23 2024 GMT
        Subject: CN=3bb7ab5bd74ffb5ae68d3d3e0f8ea71e11723bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ea:63:bf:56:70:b6:4d:9b:b1:62:d5:be:fc:
                    e8:8a:ba:63:d8:b6:25:d5:7d:8f:02:15:b7:52:0b:
                    52:ee:53:a7:33:9a:82:13:6b:ae:df:66:38:2b:29:
                    5c:68:f7:d6:e6:07:64:52:7b:f4:77:48:d2:e6:01:
                    82:4d:59:bf:bf:8a:19:21:41:fd:d6:b2:3f:04:88:
                    37:85:8d:6a:eb:8e:65:10:fd:6d:9d:58:ca:38:1e:
                    fa:43:29:f1:16:10:9f:2a:c4:db:8d:fd:c6:ef:a6:
                    79:b4:1f:f7:25:13:7f:ff:b5:8e:ee:2d:3f:4b:8f:
                    37:3e:56:1f:83:05:56:b0:98:08:9d:b9:7f:0a:0c:
                    05:62:ea:81:4f:14:bd:92:77:a7:1e:65:20:d8:39:
                    15:99:0e:74:5d:e2:a2:83:4e:0d:92:fd:36:c0:e4:
                    e4:d0:db:d3:da:3d:87:64:ce:30:16:46:f8:98:b4:
                    3c:30:29:98:6a:9a:ff:aa:0c:20:72:2f:62:28:29:
                    0b:64:c1:84:26:22:e6:39:cd:52:27:af:2b:f6:7f:
                    e1:96:8e:af:60:50:d6:7d:10:ed:83:23:6c:42:0a:
                    74:b0:12:0b:44:d7:4f:eb:a3:f6:ee:7a:2c:77:18:
                    c8:87:13:2d:a7:d0:b0:db:2e:f9:a8:30:3c:0d:6b:
                    54:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B7:AB:5B:D7:4F:FB:5A:E6:8D:3D:3E:0F:8E:A7:1E:11:72:3B:F0
            X509v3 Authority Key Identifier:
                keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:66:39:68:d4:bc:eb:70:e3:ae:3d:02:3d:bc:b1:96:be:f2:
         ed:70:33:63:65:6e:ac:b8:da:e7:26:dc:5a:cf:a3:c1:c6:3b:
         e9:10:bc:95:97:32:8f:4b:36:39:94:fd:13:3a:4b:5f:8c:60:
         74:6b:61:8e:37:85:94:4f:67:ea:55:60:b6:15:6b:4f:73:a5:
         c1:8b:38:ad:70:5c:6f:3f:87:01:26:90:72:84:90:f7:16:07:
         3e:44:e9:24:16:10:16:60:4e:8e:93:82:de:7b:f9:85:5e:4d:
         a5:3e:bf:86:3c:5a:96:e4:cb:56:00:4c:0f:9f:ad:e2:12:a7:
         dc:61:21:65:99:44:7e:ef:7d:3e:08:5f:04:c4:01:aa:3d:23:
         4d:fd:ad:17:0c:b4:65:ff:45:6e:18:c3:cc:b8:24:af:88:88:
         bc:86:cb:bd:4c:bb:dd:b0:0e:b0:39:60:a0:e4:a3:46:7e:d1:
         97:b8:b6:0d:d0:e3:d5:42:07:04:da:b2:23:c5:fe:96:cb:26:
         44:b9:e7:84:71:53:e0:a8:ba:f3:ea:e9:d2:d0:63:9d:54:32:
         93:8c:b7:84:d1:ad:9e:b2:cd:d6:5b:5a:bd:b9:38:ee:a9:23:
         ae:82:8f:fd:ed:63:7c:a7:d7:84:9b:93:05:be:47:65:fe:2b:
         51:17:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 08:07:08 2024 by rpki-client on console-ams.rpki-client.org