Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
File:                     bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json)
Hash identifier:          rincA6PEUCxN7KStSrqV9mLMQK4CYd8efFLbRszfQaQ=
Subject key identifier:   B3:C9:C5:10:08:F2:17:BF:0F:AF:74:77:55:AB:5D:C6:82:58:3E:9B
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Certificate issuer:       /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial:       019061F0171C192210417778B0C1154563FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
Manifest number:          124A
Signing time:             Sat 29 Jun 2024 03:00:42 +0000
Manifest this update:     Sat 29 Jun 2024 03:00:42 +0000
Manifest next update:     Sun 30 Jun 2024 03:00:42 +0000
Files and hashes:         1: 8czIv6xafySuKjLGHy6qwH1kmhw.roa (hash: OkgfYBrmoHRm6nN9rqTUG/pdWxLFOVZzXI/AyMD821c=)
                          2: AUkAfX6mTmDAQ3CQ8k-9Y063oRg.roa (hash: BCsdmNQ8it2nfNjw8gKT1fzKeoHR05gQ/zjnAy1JltQ=)
                          3: ItOHJdS2F9X-nROeVsSNmeqqdR4.roa (hash: kIL/dCFzJ35JTi6exfJJJrBBfrgsAsTVeLtTeAVE+Zw=)
                          4: MdKYoKHGPW7uYGALSxk5x-80SVw.roa (hash: 0EP8F+Dq9bvBn65y9MAnCiyX6vvtZKyhNxJJHNfA6qY=)
                          5: OY_afztFDoJIoyvIwd2e6Rlt28w.roa (hash: pyetmdCEH/DcgIYZbnYHLV7HyAteA6Rlgs9FUzs7/Mc=)
                          6: RWP5Auo_4SbRegnvpkBtzJe774M.roa (hash: BhQ1Tn0szR0IB/IqYEi1fU2HL77UZ14g1p0tGt1K198=)
                          7: RpG_7r9oPuqL48wSc3nv8UkiXcQ.roa (hash: vm9zGi/ABZTP2vyYZttvU2NbLZrg3jY9vYdow36zO4U=)
                          8: SLE_h9b19SYroLRqDewta7PCu-Q.roa (hash: J7UlfTnTkDpjXl1dAC6DIMvShUQhERDMcoHx3jOWn34=)
                          9: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: he53Nm/jNORTrQhJEc/6wWlNmpwc7evQ6wZn5uzWhjk=)
                          10: hYSdVCzwCF10fYtPBkWQIH9tx-A.roa (hash: kA1LXfebszh6Jy37appI6a/SvabVlZHQAKrEL5Rg2TQ=)
                          11: uD8wVPvtAG-eveV4AaRGXmCZUoA.roa (hash: gZuAmzY/VSaon7oGmg5rE+4Ba4gDdu2i7EBAqLVBC8Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:61:f0:17:1c:19:22:10:41:77:78:b0:c1:15:45:63:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
        Validity
            Not Before: Jun 29 03:00:42 2024 GMT
            Not After : Jun 30 03:00:42 2024 GMT
        Subject: CN=b3c9c51008f217bf0faf747755ab5dc682583e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:20:6f:c8:4d:07:ba:24:c9:e2:76:29:3c:
                    2a:21:4b:d5:40:08:73:0e:61:ac:06:10:e4:48:1b:
                    d8:ae:29:85:55:1c:78:58:44:72:51:cd:13:72:cd:
                    17:a1:49:0e:78:d0:b3:7f:a7:46:f0:61:e3:09:55:
                    d5:b4:41:c8:53:6c:10:16:ef:fd:02:1d:ae:b4:df:
                    ad:1f:71:f2:ce:d1:1f:12:ea:c6:cc:d5:ba:d2:13:
                    d7:4f:14:c1:dd:0c:4e:79:3a:bd:5b:20:70:1d:69:
                    03:7b:8b:22:5d:2f:a5:6f:c6:79:e3:24:d2:2c:24:
                    1e:22:a4:f4:18:44:cb:a5:3b:08:6b:3d:e0:5f:53:
                    31:78:35:00:3c:30:06:29:cd:af:81:7b:78:9c:e6:
                    29:49:02:7b:41:be:91:33:64:15:16:7a:59:a2:16:
                    ff:30:a7:df:5e:39:cb:01:75:9e:b0:35:4e:e1:fc:
                    9a:09:d2:55:dc:04:cf:06:06:0a:07:09:ef:b3:89:
                    44:b5:e1:51:6c:cd:19:4e:90:62:69:2a:03:65:1c:
                    8e:ca:67:e0:93:cb:cb:48:93:c4:f3:93:0b:a2:9b:
                    f9:b6:35:02:78:e6:88:a2:cd:fe:25:50:76:e2:11:
                    c3:74:1b:6e:40:78:d9:ec:34:f6:bd:24:26:bc:95:
                    c7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C9:C5:10:08:F2:17:BF:0F:AF:74:77:55:AB:5D:C6:82:58:3E:9B
            X509v3 Authority Key Identifier:
                keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:15:c6:f7:c9:25:0d:61:e8:8b:11:1e:c6:6f:cf:12:f3:3e:
         b7:5a:a8:91:21:4f:51:b4:c4:e4:a3:1e:5f:4f:35:6d:a1:dc:
         5c:1c:5f:c8:cb:57:76:4d:fc:be:68:f6:e6:3f:84:e0:ea:64:
         d8:41:ec:19:4b:be:07:d5:b8:fb:b0:94:36:e6:10:81:ff:7d:
         d3:00:fa:5f:d8:fc:8c:a4:64:a7:d7:6d:da:e9:56:51:d7:50:
         9d:24:52:f6:eb:ba:9f:5c:1b:b3:36:cf:57:3e:37:9b:c2:ae:
         4a:fc:63:36:d8:5c:9f:13:b6:3f:09:3d:1e:58:88:d8:0e:6b:
         94:d6:73:20:01:72:d9:94:d6:84:62:0b:3e:1a:3a:d6:0b:b6:
         f1:43:4a:8b:8b:83:b6:15:76:6a:da:20:80:b9:a4:76:a4:e6:
         0d:d9:01:40:0c:ef:e9:07:71:31:f7:d6:2d:8a:0a:2f:69:c4:
         b6:df:4c:16:b2:ce:c9:9a:ab:46:78:bf:3c:e6:8f:ce:35:ff:
         56:2e:4f:8d:7e:ff:15:52:05:f1:9a:b6:d7:9e:61:f3:d9:19:
         73:09:c2:bd:eb:f9:58:ab:76:aa:e1:c7:9d:72:13:db:72:f3:
         3f:3b:9a:ea:49:cd:e6:c1:89:94:80:ab:13:8d:11:15:f0:63:
         09:f1:eb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 08:41:02 2024 by rpki-client on console-ams.rpki-client.org