Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File:                     mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier:          7nPWPzKBOmgTjusTgdBploAMo5uXt+dDMPot1a+r8u4=
Subject key identifier:   10:2D:04:E5:6C:D2:F3:30:86:A6:68:AD:25:2E:A3:8B:02:80:E8:F0
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer:       /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial:       01905133CF50E1151F51BB521A9F78CB7499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number:          0B01
Signing time:             Tue 25 Jun 2024 21:01:08 +0000
Manifest this update:     Tue 25 Jun 2024 21:01:08 +0000
Manifest next update:     Wed 26 Jun 2024 21:01:08 +0000
Files and hashes:         1: e22eupExYF1pW2b8RCgCB9Ep0uc.roa (hash: Yzuo92r/WJ7tYQsMfbO/rPGv2/UoTUolPy2GwCKVaNE=)
                          2: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: 8NfNZ5SK5Is0pNEAIxXjZOsYpxr+16HQt+wjpN4tYxs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:51:33:cf:50:e1:15:1f:51:bb:52:1a:9f:78:cb:74:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
        Validity
            Not Before: Jun 25 21:01:08 2024 GMT
            Not After : Jun 26 21:01:08 2024 GMT
        Subject: CN=102d04e56cd2f33086a668ad252ea38b0280e8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:c4:fe:c6:d8:bb:65:07:2f:92:29:ee:6d:
                    92:67:6d:6a:2b:c4:a6:c5:06:53:10:35:c1:d8:51:
                    b7:33:83:ee:0e:21:88:6c:b4:aa:b5:b3:6b:c3:5d:
                    c7:b8:a5:89:c3:84:be:21:07:30:3f:7a:89:d7:4f:
                    f9:ab:cf:f2:9f:f0:e9:5a:74:cd:77:ad:01:09:2b:
                    22:d2:3a:b7:5c:01:77:06:26:ad:a5:82:5c:38:63:
                    76:b1:44:da:af:ba:45:04:17:0e:f8:c7:04:dd:ce:
                    b0:fd:5b:e3:eb:b3:58:0f:03:8b:38:4d:5d:94:ae:
                    92:da:f9:58:e8:da:64:9c:f3:1c:96:24:d9:11:ff:
                    a1:f5:37:50:ed:a6:fa:7b:29:85:35:a1:a9:4b:04:
                    96:ad:62:22:29:22:fa:2c:75:9d:56:ce:32:69:bb:
                    f9:90:b9:1b:55:c3:1e:79:1e:1a:bc:b0:20:95:57:
                    41:67:4a:47:61:2c:6d:ea:38:d5:d0:0e:f7:5c:95:
                    3d:fb:42:20:fd:c8:a8:bc:a1:b4:81:e1:46:bd:25:
                    f3:52:c5:17:22:27:78:a0:69:eb:03:5a:9f:33:7e:
                    c1:40:cd:35:a1:8b:f6:e3:3d:1b:a1:55:b3:25:66:
                    f3:ed:0a:bc:6c:be:d1:35:c3:e7:e7:70:94:2a:34:
                    f6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2D:04:E5:6C:D2:F3:30:86:A6:68:AD:25:2E:A3:8B:02:80:E8:F0
            X509v3 Authority Key Identifier:
                keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:6a:a2:d2:dd:fe:84:06:45:e4:e5:dc:12:c0:07:0c:51:5f:
         b9:a2:1d:de:15:0d:7d:f1:db:a6:6d:48:00:89:b9:34:19:13:
         66:7d:4a:cd:d1:70:e8:d0:5e:0b:61:ca:4d:7b:02:de:b1:e0:
         7a:87:eb:d8:04:44:45:51:ab:2a:c9:73:14:31:25:d3:7b:1b:
         07:41:68:1e:b4:fd:43:e4:8f:f3:66:7d:17:97:a1:36:01:1f:
         cb:3d:c3:b0:46:d7:b5:03:04:00:62:42:73:82:c1:55:a4:37:
         b8:08:1f:91:de:da:54:7d:35:9d:94:9f:00:d3:b7:93:19:93:
         96:d4:bb:0c:d7:a1:ed:2c:0f:3b:e3:f1:12:f1:fa:a3:c7:0f:
         65:dc:77:0f:70:29:ea:57:06:1d:0c:c6:de:52:44:16:8d:b0:
         48:4e:17:ea:05:3b:31:94:d1:ff:ed:f2:b0:dc:fe:bb:66:71:
         c7:a1:06:e9:3c:ff:78:d4:62:91:18:0b:57:bf:d0:5f:3c:6b:
         51:da:2f:39:74:00:e6:05:5f:c4:25:86:0f:19:59:1d:4a:d7:
         3b:b2:4f:92:c3:dc:1e:f4:97:52:d3:82:a2:a9:a4:a8:a3:ad:
         f9:fe:bd:cb:00:87:1a:25:25:c2:75:83:d8:8a:d3:82:35:a9:
         b7:a5:21:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:57:08 2024 by rpki-client on console-ams.rpki-client.org