Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
File:                     plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft (raw, json)
Hash identifier:          hx4ddnbq5pPOoCBLCSRYn5R7C4JX3qYmGF8wJ9CEs/Q=
Subject key identifier:   A0:F7:35:01:56:84:2C:C4:2F:1E:88:AD:DD:1D:F9:E1:6C:67:19:5F
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       01905022B508C6D4918E786442D7149C0F73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
Manifest number:          11EB
Signing time:             Tue 25 Jun 2024 16:02:50 +0000
Manifest this update:     Tue 25 Jun 2024 16:02:50 +0000
Manifest next update:     Wed 26 Jun 2024 16:02:50 +0000
Files and hashes:         1: VewFwd3BJHkiZ4FU8VF67V3MN3U.roa (hash: JFgQFUKs6kKwOKMbFmKv26ZuLUKnUR0A7QjgyaniJ6U=)
                          2: ZHjSTCgG4X5IeAJdTDg963GjRw4.roa (hash: t+/bB8261wJ4ecnjCuRR8fOmZmzZoHZ3eGXr9xDxSsg=)
                          3: plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl (hash: cAaGbwAfJkGg4I4DXMynMeggkjRfRP6T2Z3W+AGSMj0=)
                          4: qYQa0jl0dXP-Zgkp_k0rYiOdoQ4.roa (hash: j5EgQxV+Ayxi2aMwybcYOE8r0j0t2bqysgwGF7JR/G4=)
                          5: uFWKA4EuYejDs9auYtR0JOYsGLc.roa (hash: OAeATZQbF8ct/dFYgZeVyznVfxxAoLVjX9x/f7EGzuk=)
                          6: uk-jmssaMo9CY9Aw5qlRAXIhOz4.roa (hash: vluWeRp6P2FiRzEPSMQ/Qje6lOaEyC+5aV0U0lVu/pg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:50:22:b5:08:c6:d4:91:8e:78:64:42:d7:14:9c:0f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Jun 25 16:02:50 2024 GMT
            Not After : Jun 26 16:02:50 2024 GMT
        Subject: CN=a0f7350156842cc42f1e88addd1df9e16c67195f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0a:92:4e:46:a1:e7:9c:93:36:28:c0:c9:f4:
                    e8:9a:36:36:24:aa:71:49:e7:5c:e8:e0:ad:bd:2c:
                    30:65:ee:24:2d:4b:78:7b:13:b0:5e:36:48:2f:90:
                    ba:48:f7:db:d4:e8:b3:d4:0f:7c:d1:99:3c:19:50:
                    8f:30:10:09:77:45:a9:33:ce:78:29:57:6a:28:7b:
                    c3:78:6e:4e:e0:51:00:04:34:5b:b4:5e:de:86:c7:
                    43:ca:ea:da:28:ba:05:14:28:50:4c:8f:75:aa:06:
                    cf:55:6b:54:4c:aa:54:49:b1:b3:05:bd:eb:8c:bb:
                    4d:d9:d5:27:2c:0a:be:a6:a3:47:f8:98:43:07:6d:
                    a3:a4:c7:ca:15:be:b8:de:41:5f:e7:da:06:0e:90:
                    ef:0f:89:7c:3f:d0:97:13:f4:09:46:42:77:32:21:
                    7a:98:dd:ba:66:c9:ba:c3:1b:ac:0e:45:f3:79:a9:
                    80:16:a6:e3:63:9d:f1:56:2b:54:e1:d8:04:5d:43:
                    8d:c4:03:ce:22:99:d1:fb:a7:13:5f:fd:b7:4c:e1:
                    85:c9:d9:c1:7c:92:b5:e8:1e:b8:8a:7b:34:15:75:
                    fc:fb:f7:8b:2b:97:93:d5:9e:ad:93:19:74:46:79:
                    7b:a4:38:ec:bc:a4:5c:9c:7d:81:e6:88:ac:e9:76:
                    5f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F7:35:01:56:84:2C:C4:2F:1E:88:AD:DD:1D:F9:E1:6C:67:19:5F
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:52:db:51:52:af:c0:a1:7c:e8:60:5e:30:1c:d2:e7:4c:94:
         8d:84:a0:5f:12:92:5a:01:9d:45:af:4e:0b:77:ce:ba:ea:cc:
         ef:c5:f9:1a:bf:e3:7a:cf:d7:b0:bf:b6:4b:2b:6e:1a:33:8c:
         e3:76:ae:76:42:0c:6a:50:1e:3e:0e:eb:71:f6:9b:df:c5:6b:
         e6:d6:ae:bf:cc:8c:31:3e:ab:a4:e6:00:c5:fd:ba:c3:e2:9f:
         a0:cc:64:08:20:11:fb:1d:76:8f:33:80:d1:8a:bb:d5:0b:26:
         d4:ee:3f:e6:52:e7:ab:76:d1:74:9b:d1:00:b4:92:8a:2a:4a:
         38:80:58:6e:ac:c2:3f:85:ba:e2:a0:84:3e:6f:b3:18:b3:0e:
         53:ad:53:eb:87:d5:a5:0f:17:e9:0f:06:48:92:22:fd:79:16:
         8a:ec:7e:51:78:4d:49:57:b8:73:d9:52:0b:19:0c:38:4a:e2:
         8e:3c:31:a5:7b:ea:7c:e5:03:26:f2:37:38:9c:2d:a9:5a:e4:
         45:65:be:d8:84:1e:06:c4:f2:8c:db:6c:30:48:9f:59:22:1b:
         53:cf:31:fc:11:dd:f1:d6:70:84:c0:68:b4:d2:24:44:99:7c:
         5e:79:2b:99:28:52:97:27:9a:50:e8:38:23:d1:5d:16:d4:0a:
         4e:f7:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:20:14 2024 by rpki-client on console-ams.rpki-client.org