Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
File:                     b1frSRlt0uBgbVl3wrdLEBt5vAs.mft (raw, json)
Hash identifier:          mOO+l3VjHvvPbsD+G2qr38ahLPbMRa0XEdzkeSysviA=
Subject key identifier:   DE:AE:6D:E9:3F:81:C0:39:B7:20:F6:32:E8:87:62:D9:F1:26:3E:D4
Authority key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Certificate issuer:       /CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Certificate serial:       019038F6C2BA3A8E9B7E2CB6A82803E826C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
Manifest number:          0463
Signing time:             Fri 21 Jun 2024 04:03:34 +0000
Manifest this update:     Fri 21 Jun 2024 04:03:34 +0000
Manifest next update:     Sat 22 Jun 2024 04:03:34 +0000
Files and hashes:         1: 0aD7ArBrDYdAtQRayjUX6fl4_JE.roa (hash: t3b7BFm2fbyeOuJvxKoqjZzcgaVzdel6HCe42y5lHTI=)
                          2: b1frSRlt0uBgbVl3wrdLEBt5vAs.crl (hash: ADgpnegoEjWYYHhr+Lh1XqbBCPOdhhZKTG93SxRaweY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:38:f6:c2:ba:3a:8e:9b:7e:2c:b6:a8:28:03:e8:26:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
        Validity
            Not Before: Jun 21 04:03:34 2024 GMT
            Not After : Jun 22 04:03:34 2024 GMT
        Subject: CN=deae6de93f81c039b720f632e88762d9f1263ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:3b:0d:d4:80:f0:9f:6f:26:d3:19:17:a7:
                    c2:73:59:77:af:b9:69:10:cc:43:6f:28:8a:b0:8b:
                    35:81:d8:3c:4b:24:87:c3:1f:06:48:da:f2:6e:c0:
                    11:09:88:6b:2c:a0:e5:f1:b1:07:83:df:ec:8a:36:
                    c5:09:47:a9:7a:4d:f8:0b:9b:52:70:0e:d3:6c:9c:
                    57:63:da:9b:b7:18:6b:13:87:c4:e9:c7:97:b9:65:
                    75:49:88:b4:46:6b:17:c8:1c:07:5a:6b:bd:e8:f4:
                    2e:bb:ca:bc:6d:30:ed:4d:84:05:63:94:99:d6:15:
                    e3:5e:14:fe:75:c8:de:d4:6a:02:32:45:89:00:0d:
                    d4:18:bc:ac:c7:8b:de:c3:ba:04:e8:bd:c9:c6:5e:
                    a9:75:7d:f7:7e:62:47:cd:e7:1a:33:d0:96:d4:5b:
                    b1:2f:4c:2d:2b:f0:88:0e:27:a3:4b:d0:03:08:36:
                    0d:04:d8:4f:6a:25:ab:79:5f:89:86:d1:63:b8:ea:
                    ff:73:b2:57:d2:0e:6b:c6:9f:0f:98:01:10:7b:7a:
                    3e:75:78:65:f4:4e:53:df:68:d1:b7:72:53:dc:8d:
                    e5:d9:e8:eb:4e:e4:d2:d2:00:b3:cb:50:d5:3d:ec:
                    e5:17:04:b8:85:54:c1:d2:bf:4a:be:14:a8:d4:4d:
                    ed:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AE:6D:E9:3F:81:C0:39:B7:20:F6:32:E8:87:62:D9:F1:26:3E:D4
            X509v3 Authority Key Identifier:
                keyid:6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:d5:38:02:73:4a:70:a8:c9:9e:a1:d8:42:41:f7:da:7a:
         a0:e0:00:86:60:da:b0:0f:58:f5:d8:8d:df:f1:8f:be:93:e1:
         0c:e3:45:59:bf:81:8e:e7:7a:c4:d3:4b:7c:37:92:9b:39:a7:
         de:06:47:e4:23:5c:3f:95:e1:ed:93:9a:1a:1b:1a:94:aa:78:
         f7:e8:85:28:75:11:b8:c7:0a:1f:79:54:19:4b:df:3b:93:30:
         4c:76:da:c3:98:3e:7b:79:67:da:b0:68:2c:62:36:cd:2b:c7:
         2b:06:a6:7a:7d:ec:32:c8:04:9a:43:cd:c1:cd:d1:39:62:af:
         c2:52:6c:7b:59:a4:6a:6c:64:84:24:b5:5c:1f:9a:ad:d5:ae:
         69:2b:5d:70:48:e0:df:e1:2b:05:e0:68:79:97:d8:e9:b1:9a:
         5b:fe:e6:01:18:92:60:fc:89:6d:2d:a7:eb:af:66:1f:8c:62:
         ab:8e:7b:96:8e:d2:79:c6:fc:d3:c4:d8:08:c9:45:8a:cb:52:
         0d:cf:28:54:e6:99:ab:e1:a7:66:fa:c9:5a:96:e8:aa:37:ec:
         22:19:d5:e6:c5:51:e4:01:e1:f5:e8:82:40:98:c1:38:ab:c8:
         cd:f5:23:3f:29:05:26:5e:37:f1:f3:ea:84:ca:61:80:e6:08:
         ad:67:bf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 05:18:14 2024 by rpki-client on console-fra.rpki-client.org