Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
File:                     snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json)
Hash identifier:          66R6rkBgZ9d2/vRGn61B5k5HviD9ehRZ9FUCuKWyJX8=
Subject key identifier:   EF:4D:CC:40:DA:3A:65:D6:E6:49:7B:93:3B:F3:3C:5E:69:79:6E:B6
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Certificate issuer:       /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial:       019052462827B2F4932BB74E30B861967903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
Manifest number:          0D02
Signing time:             Wed 26 Jun 2024 02:00:47 +0000
Manifest this update:     Wed 26 Jun 2024 02:00:47 +0000
Manifest next update:     Thu 27 Jun 2024 02:00:47 +0000
Files and hashes:         1: 5zkhYqm4IEIXTaLxv8S2PenomNM.roa (hash: JNr2Q+0k0wa7AAkaWSsIEuNWy1XrZVYilcg5j7DU8HI=)
                          2: 6-v18hxJzersln3NYvAoAWXae3Q.roa (hash: mM909kMEyYakLQ84/zMk3pFsEB5kkaaKEHX9yvQZKMc=)
                          3: 7YOcpnsVU6or0kXd0kAIvUXls6k.roa (hash: 5dHvz7nZ1S7a1QdmVui4d4VK/Vxk+LTZZUcf0yNm+YU=)
                          4: RjOBwIFljRUhiVrI9XvSXMwaJck.roa (hash: ZAwxVD/8E3+xj0G2CJTbEAoUfa1sKt4feqSdrZWNfig=)
                          5: b-uMk143ghnk5rtDxi5_hxqx-NI.roa (hash: HOYkj39NSnk7+hE5AdOqFR4pWBWqlWYnBmXij5Xg+gk=)
                          6: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: vb0DhSSLDA2NZCaXJ8fLq0hdp0pgLtzTnbqqyGCUoqo=)
                          7: tg8gxzupnjQ3PKoh-2NKi118_vg.roa (hash: DKAIf9U60wci23W4N4SgknjLAykkvuMLPpApHxutALM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:46:28:27:b2:f4:93:2b:b7:4e:30:b8:61:96:79:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
        Validity
            Not Before: Jun 26 02:00:47 2024 GMT
            Not After : Jun 27 02:00:47 2024 GMT
        Subject: CN=ef4dcc40da3a65d6e6497b933bf33c5e69796eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:b0:49:fb:28:1e:88:15:45:1a:f1:e9:67:
                    e5:85:64:7c:ba:66:51:7a:d6:a0:c3:b0:9f:59:29:
                    81:1b:9c:3e:5d:52:d4:bd:c3:a9:a3:7f:45:0b:66:
                    87:27:e7:41:b3:e1:db:16:5d:ef:b3:75:15:c8:62:
                    bb:a0:44:9d:7c:28:b1:e5:be:2f:1f:98:c0:8f:36:
                    14:69:4b:9e:5d:e4:76:76:19:77:be:81:be:7b:32:
                    8f:a8:d7:8c:6b:75:84:97:d8:85:0f:23:e0:0d:b2:
                    d7:60:52:e6:28:74:4d:47:ed:11:cf:9f:26:9d:23:
                    1f:a1:20:db:d2:eb:5c:b5:cb:05:8a:d5:0c:da:b3:
                    97:61:01:74:3e:f8:c1:9b:3c:81:b3:c4:7d:da:cc:
                    fb:13:d5:51:ed:f8:1c:bb:ff:bf:5c:9e:7f:ba:10:
                    9d:90:60:05:d3:af:ce:a8:7f:83:94:b1:e9:f4:05:
                    40:d0:03:a6:36:3e:a6:f0:a2:b4:ee:04:15:b1:19:
                    e5:3e:fb:6d:31:2f:45:58:06:e2:6c:41:7c:38:a1:
                    76:c6:19:c5:8e:4f:23:f6:e7:74:12:83:03:46:b4:
                    71:a1:c8:7f:e0:95:70:7a:78:45:83:df:23:b6:9f:
                    6e:1d:b5:42:ae:ed:db:94:f1:dc:50:3b:28:3e:8d:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4D:CC:40:DA:3A:65:D6:E6:49:7B:93:3B:F3:3C:5E:69:79:6E:B6
            X509v3 Authority Key Identifier:
                keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:39:36:16:0d:9a:a7:50:14:bb:38:e9:39:8d:0a:4d:73:e9:
         f1:55:1b:a8:ec:89:1f:e1:96:a2:51:48:85:7e:e8:d8:ef:1a:
         5e:d6:d7:20:5c:b5:ab:62:cd:3f:33:27:c7:e7:5b:62:fe:8b:
         dd:b5:3a:86:26:da:e7:1c:29:67:59:d2:fd:14:a9:b5:27:e5:
         55:6a:ec:59:35:6c:ec:22:3e:4c:49:58:2a:e6:52:9b:d3:13:
         cf:0e:36:02:81:d7:9b:10:8f:77:28:35:6c:fb:db:a9:3c:ea:
         49:4b:9e:e8:17:0d:f6:84:ad:15:7f:b0:62:fb:82:19:ec:af:
         6d:bb:8b:4b:d6:b4:95:86:0a:b5:20:43:33:7e:e5:d4:3a:81:
         50:6a:84:2d:0e:fa:6c:e9:d7:91:ed:05:3c:05:38:4e:89:4b:
         fa:89:1f:e8:f0:2c:c5:93:44:15:ef:03:df:e4:13:e2:b1:62:
         a1:22:77:56:82:63:96:bb:3e:07:3b:6c:38:0b:fa:b9:5b:a8:
         9b:16:a4:47:7e:eb:93:f8:38:6d:3c:cd:98:75:91:f0:dc:39:
         5e:51:7e:0a:fd:9a:3a:08:cd:79:21:c5:73:70:20:7e:53:48:
         f0:e8:e3:34:b4:93:53:ff:ce:08:8e:54:96:35:3b:72:05:1b:
         9c:0c:2e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:18:33 2024 by rpki-client on console-ams.rpki-client.org