Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
File:                     zR9zNFeUzkgX6pno2M_OpxvXg2c.mft (raw, json)
Hash identifier:          +yvsoAys+OXUWzHMfs/13FPymluOIStWtglNRP8HwAs=
Subject key identifier:   C7:5B:85:28:B0:94:02:7B:34:F5:02:AC:22:91:C5:E5:69:E6:AF:87
Authority key identifier: CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67
Certificate issuer:       /CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
Certificate serial:       01901DED583E241BF19CE735488D666CBA76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
Manifest number:          01A3
Signing time:             Sat 15 Jun 2024 22:03:32 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:32 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:32 +0000
Files and hashes:         1: SI_sa_c4_WEXfbIsWrD7XKSy4qY.roa (hash: EelUs1BQ6fdCYZutt+lfCV6x6ymAgNCMd9T4rM+t8F8=)
                          2: zR9zNFeUzkgX6pno2M_OpxvXg2c.crl (hash: CMRx6r9aW/KLhVpgGuKWkHT9Pu0DsRdcq+PelTCV0ks=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:58:3e:24:1b:f1:9c:e7:35:48:8d:66:6c:ba:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1f73345794ce4817ea99e8d8cfcea71bd78367
        Validity
            Not Before: Jun 15 22:03:32 2024 GMT
            Not After : Jun 16 22:03:32 2024 GMT
        Subject: CN=c75b8528b094027b34f502ac2291c5e569e6af87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:b2:2b:53:0b:31:99:6f:73:ff:d6:7a:7e:
                    6c:76:e6:bc:7a:bc:e9:45:64:e9:f1:08:dd:e4:4e:
                    45:d7:27:b8:cd:4f:70:fa:4c:1f:3d:09:54:14:98:
                    f7:e5:89:a8:99:10:7e:77:4e:f6:d1:55:f9:21:a9:
                    9f:1c:51:93:70:7a:b9:ba:a9:6c:35:57:ef:4c:39:
                    35:d8:8d:e1:a7:82:58:5b:46:66:92:3f:ca:fb:98:
                    4c:6b:20:32:e1:d7:03:31:78:2b:d0:4a:0e:f5:0a:
                    e3:c6:a7:89:65:27:e7:15:d4:82:45:77:04:a6:c4:
                    b0:f1:12:49:f3:e1:ee:9a:b1:66:b7:40:bc:d4:32:
                    69:a7:0f:71:6d:4f:44:45:bb:f0:f2:1d:d2:05:ba:
                    06:cb:90:28:11:09:09:6c:40:d7:04:73:fd:ae:77:
                    6f:d3:dc:e8:a3:5d:bf:7f:8a:62:eb:8e:a6:88:3d:
                    7b:16:0e:85:6c:33:93:37:a9:54:3c:bb:d9:54:09:
                    37:90:1f:a7:10:44:aa:1a:d7:43:a9:84:59:70:0e:
                    d1:08:81:3b:fd:e3:d9:84:ef:3c:9e:bb:f8:9d:8e:
                    4f:a2:3f:d5:43:06:3f:45:bb:f9:1c:c7:0a:23:70:
                    54:4a:df:d4:7d:4e:5b:39:4f:28:aa:0b:09:19:a5:
                    4c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5B:85:28:B0:94:02:7B:34:F5:02:AC:22:91:C5:E5:69:E6:AF:87
            X509v3 Authority Key Identifier:
                keyid:CD:1F:73:34:57:94:CE:48:17:EA:99:E8:D8:CF:CE:A7:1B:D7:83:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR9zNFeUzkgX6pno2M_OpxvXg2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/901170-e606-4fd1-8504-7f0d07ba4af3/1/zR9zNFeUzkgX6pno2M_OpxvXg2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2d:aa:6a:5a:9b:3a:e7:ba:23:ff:80:17:20:1a:40:27:bc:
         06:08:f6:4c:8b:5c:ee:75:05:a8:9f:ad:b5:f3:8c:db:d4:d3:
         d4:b4:d4:32:97:91:04:09:c0:db:20:7e:4c:32:32:77:e9:10:
         85:65:7f:00:a0:59:2c:85:f4:e8:2d:af:94:78:41:e4:69:28:
         f5:95:d3:e2:2c:e7:53:44:0c:73:db:cf:56:88:7f:48:0f:f4:
         63:4b:f5:00:f0:5e:ab:ba:7c:e7:3f:14:09:7c:3a:7e:1a:6c:
         bf:23:6f:b1:e5:41:e0:92:b2:36:6a:f8:53:08:4a:35:5e:ca:
         ed:1e:fe:98:04:0f:bb:63:7b:76:20:89:70:3b:7d:6b:79:29:
         03:6c:3e:15:19:64:52:0c:90:ca:f8:e0:e7:14:47:57:eb:47:
         70:ca:34:59:4f:3d:ed:85:09:af:f9:25:b3:3b:5c:18:3f:46:
         0b:1e:2d:49:24:c4:ba:1f:ff:6a:a4:96:2c:9f:81:80:39:26:
         7a:01:9f:c4:37:0c:b2:8d:dd:7f:00:9d:78:b5:1f:b7:e8:fb:
         17:de:2c:c2:3d:35:f1:a4:ba:5e:c1:45:77:9c:f0:f4:1b:5a:
         ee:82:6f:af:67:f2:79:3d:0c:04:2a:2e:77:da:b3:fc:6a:ed:
         ba:c8:2d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:46:28 2024 by rpki-client on console-fra.rpki-client.org