Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File:                     RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier:          3R4KosgFa2jepmKTPFY4RZPRaHdsi1QttJmmLFGm8j8=
Subject key identifier:   D0:01:D8:08:14:29:C8:9F:7A:85:D7:51:97:0E:38:D5:8F:AE:DE:FB
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer:       /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial:       01906302827D720A2861CF34349F01D64F65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number:          41
Signing time:             Sat 29 Jun 2024 08:00:27 +0000
Manifest this update:     Sat 29 Jun 2024 08:00:27 +0000
Manifest next update:     Sun 30 Jun 2024 08:00:27 +0000
Files and hashes:         1: QzjPlp56JgPP7ofx-Ha2JrhLBRg.roa (hash: 8clv+YcRUvJCzsEJ2kzGtxeusJ9nRc+GPM3S2kNkNsM=)
                          2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: M09L7cDZ50zsW/EYX6+FH/cbKb3SaZZX2jMWw1IjbZI=)
                          3: mGnwltTCcYGNFCNB5hdGsBepTD4.roa (hash: MKd4BKScJ98XkO8+JTLmITpjulo277SVCLGW00i6Xe4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:63:02:82:7d:72:0a:28:61:cf:34:34:9f:01:d6:4f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
        Validity
            Not Before: Jun 29 08:00:27 2024 GMT
            Not After : Jun 30 08:00:27 2024 GMT
        Subject: CN=d001d8081429c89f7a85d751970e38d58faedefb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a1:7a:04:ab:24:37:fd:65:0c:20:68:20:8f:
                    6b:a8:a1:a6:16:b5:b9:fd:cb:a1:02:b2:1b:90:2b:
                    9e:7e:c6:9e:90:cd:85:ca:ca:9f:7c:0f:49:e2:e5:
                    a4:56:db:5b:a1:b2:0d:4a:89:c2:29:01:1a:b5:36:
                    05:74:0f:6b:55:3e:f1:9a:f5:60:f3:d8:99:8b:a0:
                    db:c0:83:0a:b6:f2:1e:d8:f7:db:e7:43:f4:8c:59:
                    ee:4b:5b:ca:4f:cf:3f:43:1d:1d:83:64:c3:80:9a:
                    cc:82:9d:c9:3e:30:a1:96:61:67:82:3f:e6:94:6c:
                    93:f7:e7:82:d1:e5:cb:ca:f2:65:ed:4c:2a:67:d3:
                    c9:ec:50:13:d7:03:a2:7b:e9:fe:2e:af:f4:b9:4a:
                    4a:d8:ff:b5:64:b7:54:19:14:68:49:6c:ec:d2:bd:
                    72:8a:fe:2a:be:06:2a:67:55:ea:78:eb:22:24:7b:
                    8e:38:bd:cc:b5:bf:5a:e0:69:f2:9d:8e:90:bc:75:
                    65:87:5e:f8:72:dc:ba:fb:cd:5c:91:2c:88:de:72:
                    e4:19:90:41:a9:ac:cb:b0:70:6e:7c:a2:07:16:6f:
                    66:cb:c0:5d:ef:36:7b:ef:97:e8:42:3c:34:4f:51:
                    5c:42:64:0a:ac:c6:97:99:8b:07:6a:f2:94:70:49:
                    9a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:01:D8:08:14:29:C8:9F:7A:85:D7:51:97:0E:38:D5:8F:AE:DE:FB
            X509v3 Authority Key Identifier:
                keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1b:fc:51:b1:c9:69:a6:d6:d9:e1:af:94:c3:f5:69:2f:23:
         b6:ca:44:e0:8e:f1:a9:2c:ee:1a:52:83:61:60:3c:c9:43:96:
         31:17:84:fd:e8:c9:ea:53:ee:a8:4b:0d:50:3f:d0:58:2c:65:
         eb:c5:24:1e:0f:79:a6:51:de:34:8e:20:03:8c:eb:65:d2:45:
         62:0f:e8:30:8e:64:c8:9a:7e:22:c7:9c:42:35:7f:8c:f2:46:
         67:0a:8a:07:85:36:a2:3d:b3:9c:64:b5:fd:65:5c:ac:65:05:
         25:b2:3f:dd:d6:82:14:36:cd:0a:fe:74:a0:ca:7e:4f:be:55:
         76:35:c1:1a:66:54:c2:8b:1f:24:9f:bb:70:20:33:aa:5f:7e:
         ae:00:a5:ff:ec:84:ab:72:a1:ec:3f:d0:d8:6c:1b:79:91:a6:
         9b:0b:82:37:1e:17:9f:f0:4b:2d:e0:21:5e:9e:5e:69:2e:2c:
         66:8c:6f:b5:5b:fd:34:04:f9:aa:00:c7:5e:27:08:7b:45:83:
         19:7a:dd:9a:1d:92:f2:29:e6:1d:54:13:7e:fd:5e:0f:71:22:
         5a:bf:2a:ab:2d:f9:4a:98:57:89:12:8a:8f:89:ab:09:ea:16:
         f5:c5:d6:b6:37:74:93:79:d1:6c:92:f2:f6:2e:b9:52:78:d5:
         f8:65:f1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 10:58:35 2024 by rpki-client on console-ams.rpki-client.org