Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
File:                     fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json)
Hash identifier:          z9vsEUGl05KbHuveZmOLqsxRsycAHOzUEk3t9zsDvZc=
Subject key identifier:   E6:11:AE:64:42:99:52:64:FD:BE:E0:7F:92:11:B6:36:26:AA:57:F8
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Certificate issuer:       /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial:       018F6787557E84DBD1A2ED2BE2CA9A6421AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
Manifest number:          0B30
Signing time:             Sat 11 May 2024 12:01:13 +0000
Manifest this update:     Sat 11 May 2024 12:01:13 +0000
Manifest next update:     Sun 12 May 2024 12:01:13 +0000
Files and hashes:         1: 1-umA8kMpL9U8bveK4PhI8pC7Iy8.roa (hash: ZCM8IsKkXM5hxyavnTWPjTbiHEYG7akRI1xhRdgbwQU=)
                          2: 9i4SBcAQbbxJJ7-ujFUmRgPdqhg.roa (hash: Q4N/uMpu8S735DeNgBOoqsl5y6vL8d/og7CpNy+rFbI=)
                          3: CFz2Wk2b0mhBpexEd43LdPyh-pY.roa (hash: kDFXisowkfq8D2XsEouvlxIV+qNAOy4KjwoUTm24Aiw=)
                          4: HDnPjlAOb-hMtdfTgLqUSIAUXbs.roa (hash: xMNqMTHd7OITgi5sWrYWN3Wv0EI6PBGK7h3f2V01nyc=)
                          5: cWGh-YeqJJ15a1wMYDPbFLsgtE4.roa (hash: tsqhpY3TmYQ2Z5Huu0WnwydjgN4ESIcZnUW7PEAbDO0=)
                          6: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: KER4o8qsogXo3UycHWVLQhNFOFZD47qkKg27FIcsGbc=)
                          7: le2nvzNB36tyoI2uE4ylhscAzxY.roa (hash: To7gM9OgMe1NloGliS2ida8+Qp0wtngmB0529u42wK0=)
                          8: tsNrq3-_rTg36aaTcbtEyEt5t-Q.roa (hash: zEE0lY+LgAdjz2XtweUdsBTZuFTs4x4yuRjE0GtdhCk=)
                          9: ufvSIzpYu4RXxJa0KTKDqS6WFN0.roa (hash: PgfIBlacCimNH8jP4CzbtNpPpmPG8JkE0iSjwFeqDT0=)
                          10: xPALUfluhc3M1pU60G36RtHocpA.roa (hash: wRwFSHaQORk1ykv79GhYTCI3NoOPBL8jK/cotxCEkRo=)
                          11: zVbXzI-UPMkwGTXNir_RXndD_f4.roa (hash: MjYQ6ywejwH4Sh9xenn14d9jTdhqTv1lV7PDpz2ptA4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:67:87:55:7e:84:db:d1:a2:ed:2b:e2:ca:9a:64:21:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
        Validity
            Not Before: May 11 12:01:13 2024 GMT
            Not After : May 12 12:01:13 2024 GMT
        Subject: CN=e611ae6442995264fdbee07f9211b63626aa57f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:96:88:cc:6d:5f:b7:0e:74:61:9b:b2:96:
                    ff:78:aa:dd:d9:ac:6d:ba:55:13:88:ce:23:91:23:
                    88:84:1f:58:59:b9:f4:08:c8:9b:96:d0:d5:5b:c4:
                    66:78:52:60:39:bf:73:ec:ff:68:d5:9c:38:5a:1f:
                    30:a2:d2:4f:ed:7d:e7:e5:00:46:01:99:85:fe:78:
                    20:74:34:b9:37:e9:49:49:67:46:d9:18:0f:b5:9d:
                    15:88:33:a0:bc:b2:a8:b2:72:6e:83:88:5d:61:d3:
                    fd:68:34:6a:8f:ec:91:20:2f:10:d5:6c:b3:da:57:
                    7a:91:ab:cc:14:03:e1:2a:e6:fe:d9:5b:05:13:44:
                    f8:a5:09:44:df:c7:c8:72:5c:6a:33:11:93:cc:24:
                    9c:2b:da:fa:ba:d0:72:06:bc:da:6c:c1:fc:90:38:
                    d2:15:26:df:91:45:b2:bd:bd:7b:10:7c:92:aa:66:
                    8d:2a:ab:49:26:a4:c5:aa:3a:58:ac:8f:8b:e4:d0:
                    78:00:09:36:f7:f6:b8:c2:29:27:e2:a9:da:26:c0:
                    86:a1:5e:35:ea:63:8b:d3:65:4d:96:7b:60:0a:1c:
                    fb:8c:7f:76:00:3e:09:0d:be:79:0a:be:a1:a2:b8:
                    de:01:da:58:4b:a5:23:8e:65:f3:ca:73:60:6e:d4:
                    1f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:11:AE:64:42:99:52:64:FD:BE:E0:7F:92:11:B6:36:26:AA:57:F8
            X509v3 Authority Key Identifier:
                keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:52:56:fb:9c:1e:cd:b6:bf:64:3b:5b:3a:fa:53:84:0a:c1:
         8b:82:ae:54:2f:31:31:ad:70:2e:4c:55:74:ab:5a:e4:d7:f3:
         f1:7d:7b:86:0c:cc:23:49:46:56:ee:d8:98:28:2f:99:3a:66:
         20:24:cc:8b:a0:82:0f:7c:97:8c:e8:8e:7b:e7:ea:03:15:99:
         7e:34:8b:ee:62:61:9c:df:40:0c:6b:9f:25:7c:4d:7a:85:46:
         64:b1:58:d5:85:b9:18:d0:0c:fd:ee:bd:b7:16:dc:86:20:40:
         3c:ce:c2:db:c1:94:84:c8:40:3f:34:41:a7:bb:bb:10:37:8f:
         a4:49:24:8e:cb:c2:ce:0c:3a:70:2a:22:cf:70:03:02:3f:6c:
         5e:51:85:67:f2:77:ca:13:b9:8e:85:88:a5:65:4a:ee:b7:af:
         8b:a4:12:15:90:0d:71:b1:55:a9:ca:3b:ad:2b:02:e3:9f:7c:
         3a:85:20:3f:1b:4c:9c:b9:f1:ed:07:72:e3:ac:9f:16:13:d2:
         97:cb:57:ad:4e:3f:85:7a:fe:7b:78:24:00:8f:e8:94:71:a2:
         6a:ad:2b:31:3b:1f:ab:e6:82:c4:f6:65:98:48:fe:68:18:79:
         af:5f:65:69:95:bb:e7:d3:81:8c:ba:f9:60:15:78:24:8d:f5:
         8d:c4:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 16:50:09 2024 by rpki-client on console-fra.rpki-client.org