Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
File:                     sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json)
Hash identifier:          fPllRXnA3LitjTL8H1zF004VB/8giUF7GK+tt02Lq5Y=
Subject key identifier:   7B:AD:CF:09:18:9E:BE:4B:78:A0:5B:CD:0C:55:9F:B8:D0:35:C2:9A
Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Certificate issuer:       /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Certificate serial:       019075AE2D8B5854286C6B9E0D949A8064D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
Manifest number:          2D
Signing time:             Tue 02 Jul 2024 23:01:07 +0000
Manifest this update:     Tue 02 Jul 2024 23:01:07 +0000
Manifest next update:     Wed 03 Jul 2024 23:01:07 +0000
Files and hashes:         1: VHE-OUvayuM6t5yjqPjGVk-__I4.roa (hash: reqJplyvV/1tsBHaUKXQwBNeYkweBnRRRi2UUAYh6Ts=)
                          2: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: nTh2YBEHIUKfBCkPNa3xeXw9uRu0SEw8T9Xr6lU1jTo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 20:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:75:ae:2d:8b:58:54:28:6c:6b:9e:0d:94:9a:80:64:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
        Validity
            Not Before: Jul  2 23:01:07 2024 GMT
            Not After : Jul  3 23:01:07 2024 GMT
        Subject: CN=7badcf09189ebe4b78a05bcd0c559fb8d035c29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:86:74:48:71:4e:bc:f6:d9:86:30:5b:b0:
                    c7:bb:1d:52:cf:b5:48:96:4b:d4:d0:07:e1:5d:57:
                    f1:17:5c:c8:1b:27:9c:32:0e:e7:e7:74:da:e3:ec:
                    37:34:72:92:64:a3:8b:e6:cd:3d:4d:c8:17:80:7b:
                    69:ea:ca:09:a6:86:29:dc:d4:a9:ba:fb:96:61:6d:
                    40:5a:69:6a:30:c2:eb:d3:e7:97:38:63:67:00:e8:
                    c9:15:0d:a4:8d:a8:00:c4:73:8a:c6:27:cc:d8:59:
                    72:7b:f6:16:7e:cc:6d:75:54:72:07:67:80:c4:9b:
                    ce:b4:8b:3f:c9:6a:54:f5:31:4e:d3:17:ba:df:a4:
                    c5:db:11:3a:a5:3d:4c:16:6f:a1:95:39:86:87:75:
                    cb:4c:eb:be:a1:29:5e:98:f0:1e:bc:9e:b2:4d:d8:
                    12:fe:40:4c:ef:4a:3d:dc:b1:d2:67:ad:44:fd:b8:
                    80:82:16:02:3a:03:57:4d:3b:5d:1d:bb:4a:a1:e1:
                    5c:03:74:a9:b1:10:36:2d:c5:9c:ae:5a:79:c0:18:
                    37:dc:5a:1e:b0:88:ad:17:39:15:59:b6:cd:e8:ab:
                    31:89:ca:e8:90:a8:22:d5:d5:a7:d1:04:39:a9:59:
                    00:33:cd:9a:d3:b4:2c:36:7d:1a:52:dd:0a:1b:b5:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AD:CF:09:18:9E:BE:4B:78:A0:5B:CD:0C:55:9F:B8:D0:35:C2:9A
            X509v3 Authority Key Identifier:
                keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:df:72:5a:43:2e:45:0b:c4:fd:98:05:8e:0f:db:65:20:0e:
         8e:60:af:49:da:7e:2c:0a:ef:c0:0d:4d:5f:c4:75:5b:6e:30:
         4a:bb:ef:0f:dc:bc:86:5d:c4:2b:73:29:c4:db:d7:3f:07:7f:
         17:3b:a6:ea:d8:15:a3:d8:8b:ed:59:94:07:f9:22:9a:bb:82:
         36:a9:8a:a7:7f:49:2f:a8:41:5d:e2:6b:1a:47:45:59:b5:5b:
         c2:16:b0:4d:45:92:29:b4:2c:4f:bf:cc:7f:35:17:d9:e6:63:
         0b:7d:38:0a:a0:49:61:af:34:f4:d4:57:a5:09:0a:d1:9f:fb:
         3f:4a:06:07:60:7c:a9:db:a8:5b:d9:c7:85:cd:07:7d:ea:c8:
         9a:fe:df:9e:b7:f4:65:c3:2f:d9:ff:22:fc:e6:2f:f7:ae:04:
         3c:41:20:76:cb:73:ab:6d:c1:c4:26:81:e0:d4:d0:92:cf:9f:
         65:18:62:07:0e:67:46:ec:08:d0:6f:af:57:5e:36:98:2d:d5:
         43:86:c4:3b:60:bc:61:75:f6:ac:64:79:3a:6b:c3:a6:17:f1:
         5e:2a:e3:06:ac:9c:14:90:e5:7f:dd:a4:cf:ef:aa:31:17:56:
         98:c1:54:35:60:55:85:3c:0a:ce:6d:e5:7b:1c:c8:91:17:7e:
         97:e2:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 00:14:42 2024 by rpki-client on console-fra.rpki-client.org