Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
File:                     mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json)
Hash identifier:          bQBaxZNo6VXT2g0jalEdtSQo21NkZORgUBQ6LBm5ckw=
Subject key identifier:   F4:81:2B:65:6A:C1:4E:67:4E:FD:4C:F5:34:A4:D5:CA:AE:D0:C6:C9
Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2
Certificate issuer:       /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
Certificate serial:       01901E8FC1CF1FC8688B6F44E91E9FBE78C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
Manifest number:          0D99
Signing time:             Sun 16 Jun 2024 01:00:55 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:55 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:55 +0000
Files and hashes:         1: 6SPzOT2WL2Q0Gm9HwJqr2xmtNnQ.roa (hash: 3OEcuCk49V0R5s2lNl2ZRyo81GnXPNJATBiJsFhVK18=)
                          2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: fz+QYKRQlkdSC+BBAHfr09fm6v0gf4b4mBtvqRwmYkg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:c1:cf:1f:c8:68:8b:6f:44:e9:1e:9f:be:78:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2
        Validity
            Not Before: Jun 16 01:00:55 2024 GMT
            Not After : Jun 17 01:00:55 2024 GMT
        Subject: CN=f4812b656ac14e674efd4cf534a4d5caaed0c6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:24:fe:1d:b8:72:3c:6a:07:1d:ed:fc:15:a4:
                    6a:46:d0:82:90:c9:58:35:5f:fa:f4:97:db:20:d5:
                    1d:c4:89:79:52:c7:24:78:08:ae:06:1b:01:47:22:
                    b8:74:d4:9b:5e:f0:d9:86:aa:19:40:20:6b:e2:97:
                    d9:e1:6e:a4:ca:f0:39:0a:c2:5b:fa:5a:df:24:83:
                    8f:6e:12:85:fd:2e:2c:f0:b1:79:d0:ad:8e:52:fe:
                    00:8e:62:d1:ed:a4:4d:72:c8:3a:59:01:ed:a9:38:
                    8a:d8:99:aa:e7:1c:20:5b:1e:7d:e4:04:6c:e1:0d:
                    ab:a6:a5:95:83:00:cc:26:73:fc:88:19:2d:a4:3e:
                    a6:48:9d:ef:30:b0:5a:fe:82:8c:e7:49:32:99:a0:
                    7e:2c:f7:75:03:38:e8:e8:97:3c:d9:9f:7a:fe:6c:
                    a9:20:5f:02:3b:af:61:ce:e8:2d:ff:93:d9:0d:e3:
                    be:f4:41:1e:80:47:a1:44:1b:af:5c:3c:9a:84:ee:
                    59:24:33:5d:40:2c:b8:5d:4c:d0:95:09:68:40:93:
                    6b:b8:a3:76:cb:b7:bd:1b:a7:58:e8:ef:3a:b1:1c:
                    51:0d:48:e7:f3:c3:48:17:1e:48:98:0a:3b:b1:20:
                    80:0e:50:37:0f:e6:0f:5a:64:37:cf:df:23:c1:aa:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:81:2B:65:6A:C1:4E:67:4E:FD:4C:F5:34:A4:D5:CA:AE:D0:C6:C9
            X509v3 Authority Key Identifier:
                keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b4:fa:35:56:dd:af:d1:14:6b:54:b6:8b:8c:31:ab:00:68:
         e1:bf:dc:b6:49:c4:6b:c9:43:19:38:0e:d5:25:68:e6:2e:6c:
         3f:50:01:1d:df:2a:7a:6f:94:04:f1:77:1b:ff:27:a3:aa:66:
         1d:4c:2e:14:83:12:cd:b0:26:2b:60:42:43:12:4d:ab:97:44:
         c2:1a:55:9e:ae:6d:da:54:90:ed:d2:67:cc:76:f7:2c:34:18:
         88:25:a5:ef:ff:b8:17:e7:33:70:a6:c9:5a:20:3d:a3:3f:40:
         53:bb:a4:2e:ce:4e:63:62:3c:98:93:2e:25:a1:23:e3:c4:8c:
         66:12:b8:c5:5c:db:89:f8:96:60:ff:6f:d7:5a:05:45:98:41:
         fa:52:6d:ff:79:26:28:63:98:47:a3:a0:fd:7c:22:23:c6:4d:
         45:90:ef:0a:38:81:d5:78:18:f7:66:a4:92:de:67:62:81:72:
         70:ff:8f:ab:5a:71:57:14:5e:43:5e:4c:34:fd:3d:57:be:2e:
         76:a3:c3:b6:06:8f:fc:94:9b:2f:4e:c1:e3:bf:74:d9:e9:77:
         18:79:e8:ff:c3:bc:01:e0:93:49:b3:11:7a:d8:9c:12:94:8d:
         7f:cb:57:45:40:3e:43:97:24:b7:ff:02:e7:c5:89:57:ca:49:
         6d:cc:54:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:33:57 2024 by rpki-client on console-ams.rpki-client.org