Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
File:                     gP5WmKEnlkzA5M6OP9yYXiolpmM.mft (raw, json)
Hash identifier:          B4FWpegVjSZYjbLqJSq5cIbTtwfxWkXj4irZsJjetxg=
Subject key identifier:   8B:78:FA:E7:22:AE:AC:8A:A8:8D:12:C3:5F:B7:4B:66:87:98:62:F0
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Certificate issuer:       /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial:       01905D011651372E3C0BD33839865A4A0A33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
Manifest number:          AE
Signing time:             Fri 28 Jun 2024 04:01:10 +0000
Manifest this update:     Fri 28 Jun 2024 04:01:10 +0000
Manifest next update:     Sat 29 Jun 2024 04:01:10 +0000
Files and hashes:         1: 7Q3mhKt1L3izDM0kRvR7Rv_ztkc.roa (hash: yfSb/Yfdcj6ZcahUdLDHXpu/2OV0PJRx5SBzAhGwz5M=)
                          2: gP5WmKEnlkzA5M6OP9yYXiolpmM.crl (hash: PU4UZUREWjLOk0yivfktxvKFIsTI8qhc96aDPBOrGj0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 20:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:5d:01:16:51:37:2e:3c:0b:d3:38:39:86:5a:4a:0a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
        Validity
            Not Before: Jun 28 04:01:10 2024 GMT
            Not After : Jun 29 04:01:10 2024 GMT
        Subject: CN=8b78fae722aeac8aa88d12c35fb74b66879862f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d1:d6:01:ba:08:99:bf:bb:d9:da:1d:50:cd:
                    e8:f2:bf:fb:1b:c9:cd:33:d6:59:d4:76:f9:89:94:
                    ab:d4:db:43:c4:68:56:67:be:0d:ab:8b:20:75:6e:
                    12:a5:76:84:6c:c4:3c:09:d8:af:27:de:a8:df:54:
                    55:02:22:60:b6:37:62:a6:b5:2a:57:3b:cc:2c:4a:
                    83:6b:08:0f:0a:2e:f0:40:2f:47:b2:e8:69:71:33:
                    f4:5b:3d:df:f7:93:b8:aa:95:5f:70:26:d4:85:12:
                    79:4d:79:37:a6:be:40:67:aa:1a:49:ed:68:3e:20:
                    fa:cb:c4:25:bd:2b:01:03:9f:c5:1c:97:8b:8d:27:
                    f0:cf:0e:ad:14:89:ef:0c:f5:bc:22:66:9e:df:72:
                    ea:bb:1e:20:84:51:02:bd:dd:ea:7e:ed:06:cc:bb:
                    0b:7a:17:c3:4f:19:0c:4c:63:b4:6f:04:e7:4e:c5:
                    4d:8b:92:16:af:be:9a:00:e6:96:e8:26:09:2c:90:
                    00:9e:c2:60:85:40:d0:8a:7d:d9:20:ce:47:e0:05:
                    1c:49:6c:39:28:df:6d:df:11:80:dd:83:f8:ee:81:
                    d3:00:b9:af:4c:76:52:d9:b9:da:e2:e3:02:5d:bb:
                    b9:26:cd:a8:aa:e4:b8:fe:c9:1e:3c:b8:08:b6:ad:
                    b6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:78:FA:E7:22:AE:AC:8A:A8:8D:12:C3:5F:B7:4B:66:87:98:62:F0
            X509v3 Authority Key Identifier:
                keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a2:6e:4d:c4:2d:bd:52:5c:42:27:12:61:b5:ed:f8:d3:6a:
         20:92:63:db:4b:cc:45:63:6b:cd:81:bc:4b:b2:1b:0a:2b:c2:
         bd:7b:b5:cb:20:37:32:a1:c0:f7:af:e8:5d:ba:4d:51:db:9f:
         f7:2a:e2:59:04:02:99:66:43:a4:b8:45:ee:23:49:fe:cb:ab:
         25:13:8a:63:dd:a3:a2:81:1f:94:bd:39:23:94:53:06:57:bc:
         a4:71:87:a2:a8:03:73:7d:43:82:88:bd:93:c8:fa:c2:08:89:
         bb:2b:3b:64:1c:e4:75:9c:b6:20:15:39:69:9d:8b:8a:ab:80:
         66:55:f0:20:4f:79:2e:ff:06:5c:54:4e:fe:c8:1c:db:af:46:
         41:c0:fb:87:53:06:d4:57:67:bc:f0:c9:ee:b9:1b:1b:6a:d8:
         ad:04:27:a3:32:4f:2e:dc:bf:cc:1b:ca:76:50:55:29:b0:37:
         27:a3:6d:0f:0d:44:83:dd:cf:8c:db:f5:bd:11:c9:f3:2e:62:
         e2:b8:90:3c:4f:33:b0:95:fb:8f:df:38:d6:45:45:9c:2c:49:
         96:fb:29:c0:dd:a2:23:4b:7e:56:46:78:0f:1e:35:62:12:50:
         ff:47:6b:41:12:6d:2d:04:7a:59:03:fd:d0:e2:a3:c0:b7:4a:
         93:c8:47:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:08:45 2024 by rpki-client on console-fra.rpki-client.org