Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File:                     z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier:          fP2jffvWMU6+soQOmDVMITp2hnXVCiiZGlOxs9x70uA=
Subject key identifier:   28:B8:4D:5A:48:23:EA:2B:23:43:6C:B3:32:A1:EA:A9:9B:74:44:E7
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer:       /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial:       01906B2C8D88643C4343DED06D189D1A81CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number:          0D4C
Signing time:             Sun 30 Jun 2024 22:03:19 +0000
Manifest this update:     Sun 30 Jun 2024 22:03:19 +0000
Manifest next update:     Mon 01 Jul 2024 22:03:19 +0000
Files and hashes:         1: O9tnLQJquPb7x0Nf27V4HJoKllY.roa (hash: kYnRAV3t3s7BELjQzBUE7xOv2zkIt57NlsD567+7ZAM=)
                          2: R0cze8X7BJgRfnebaEgBICQ9F9E.roa (hash: ZurkyBBuTAKgVwTtFN6Cvl3CfLcGhjU2zJfPIhS/dCI=)
                          3: cpbE6dE6dAcc1MZWa_ta6MTMonc.roa (hash: h6WikgwYXrsIJkoPQQan0GXdn1DaU9+lfq5vEDTGiAE=)
                          4: lR2gucBfq-HdqHvGmCRsAeJUsPE.roa (hash: KwIEUUviSUoOPhgvLSM5mK5EGp6gCKF9dY6SeOGcEC0=)
                          5: vjX85Uzch6I10Dgfdo4Mu-6Eae8.roa (hash: WceSshMyvaBq0fgrzbTDHsdF2yborQ/Efco3GEP8ums=)
                          6: wbQu2dug3Anajnt0EaRWvWccGMw.roa (hash: rTW+uoaJc0WwqrTJSX3gWjS3QlnoRESyetkM99ifefc=)
                          7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: BVVPXwKuvRf5wLqaenXqsRWGt5O1w8+yA82WcdlgJK4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 22:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:2c:8d:88:64:3c:43:43:de:d0:6d:18:9d:1a:81:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
        Validity
            Not Before: Jun 30 22:03:19 2024 GMT
            Not After : Jul  1 22:03:19 2024 GMT
        Subject: CN=28b84d5a4823ea2b23436cb332a1eaa99b7444e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2c:e5:ba:75:fe:c3:18:69:85:81:c9:08:db:
                    b6:12:b1:ea:a5:f4:11:56:51:ab:86:9f:5a:75:45:
                    87:98:e7:c4:26:71:48:80:36:7d:4a:75:1d:1b:d7:
                    32:08:5c:fb:20:02:a9:86:83:da:7b:3b:e3:3a:de:
                    7e:87:8b:dc:6b:a4:c3:a1:13:73:30:c1:3f:a0:9e:
                    1c:97:28:dc:b4:0f:c0:23:97:98:f0:bf:d2:35:1f:
                    a1:3d:d8:dd:b2:3d:fd:7d:bc:2d:60:41:e6:56:4e:
                    3c:24:69:04:a3:94:e4:78:f4:18:fa:5c:85:e8:82:
                    f3:3a:55:da:c6:b3:c9:73:77:c9:9f:41:97:c9:53:
                    d8:b3:9f:f2:f0:a4:49:42:4a:11:d3:04:61:fb:e5:
                    f5:e8:0b:6f:e2:7b:50:e6:18:0a:39:36:ed:66:3d:
                    fe:50:5a:0f:7a:0b:7e:23:32:d7:d5:4e:3f:49:04:
                    81:37:a2:b1:b3:20:a3:37:5f:2d:34:2d:c8:9a:ab:
                    ed:3a:15:1c:93:c3:55:8a:f7:ae:23:fa:f1:c7:30:
                    ce:12:98:c3:bf:ca:0b:2f:46:ae:30:cb:cb:a3:1a:
                    73:1b:7a:81:d2:fa:75:88:ed:bf:c7:0c:d6:49:f9:
                    cd:f8:96:a3:fd:77:c8:e2:be:7d:a6:aa:04:d7:f8:
                    e4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B8:4D:5A:48:23:EA:2B:23:43:6C:B3:32:A1:EA:A9:9B:74:44:E7
            X509v3 Authority Key Identifier:
                keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7c:7e:bf:3a:48:31:73:30:59:ce:28:d9:0f:6b:f5:ff:62:
         8d:6c:23:d8:d3:92:a6:e5:0d:53:f9:db:00:e9:74:a2:07:f7:
         ef:af:da:d7:57:4b:12:9c:65:c6:d6:9e:c1:92:0c:74:00:4a:
         f2:12:47:a9:45:89:0d:02:eb:88:cf:1d:f0:b2:2d:e1:8b:ac:
         96:7e:73:cc:bc:9a:7e:e4:7b:cb:1d:39:47:16:cb:16:ad:4d:
         43:e3:99:57:98:6b:85:6f:e7:1f:a9:0e:28:6f:bd:d8:f2:07:
         40:e9:18:4d:cc:83:f9:7f:86:d2:e7:30:12:d0:77:5e:81:9a:
         95:0f:45:6d:3d:3c:86:29:ca:41:89:cb:11:42:bd:fa:86:4b:
         53:fb:fa:60:ab:6c:d0:6a:6b:ff:b5:1f:59:d3:a8:7e:36:94:
         d5:91:5f:fd:28:3d:75:19:c8:e6:64:29:68:4e:4a:8c:f0:b7:
         2a:54:64:ad:93:d2:3d:73:d7:42:2a:69:b8:b0:a8:1f:34:0e:
         96:d3:1e:61:54:25:7e:a2:b2:21:e0:f4:7e:0f:0e:1f:c0:8f:
         5e:47:f7:29:b7:10:bb:1f:42:ea:d4:2f:43:a8:93:b6:8a:26:
         c1:78:4a:71:9c:72:45:70:33:5a:a5:8b:48:11:ca:de:62:25:
         c5:a2:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:11:32 2024 by rpki-client on console-ams.rpki-client.org