Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File:                     navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier:          DU10QaegvXgTGb/jloIyF2oThOU6q6lp/MIvLVGXXZE=
Subject key identifier:   F6:5F:D6:2B:E3:5C:7F:A4:C6:A0:C4:2F:61:DE:8D:E6:FB:C8:4D:02
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer:       /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial:       01901DECDC523573BF7C5721F9DB3A994347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number:          0F9E
Signing time:             Sat 15 Jun 2024 22:03:00 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:00 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:00 +0000
Files and hashes:         1: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: 03HHFK8FoIG0DgcIi8GQnq7ztAcN9A9WImPKZkNzKXQ=)
                          2: s18d2DfVg2tuXgeI9Lzj83paPKM.roa (hash: yZIog1NH0ROthJvxGZq2+SWoRxKk/qizXdssQ5en6s0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:dc:52:35:73:bf:7c:57:21:f9:db:3a:99:43:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
        Validity
            Not Before: Jun 15 22:03:00 2024 GMT
            Not After : Jun 16 22:03:00 2024 GMT
        Subject: CN=f65fd62be35c7fa4c6a0c42f61de8de6fbc84d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:c7:a3:d6:7f:7d:06:65:91:e0:0d:19:4e:
                    ee:fb:28:bc:64:af:b0:1a:9c:d5:b9:1e:bf:b8:18:
                    8a:c8:cc:f2:88:a9:dd:5d:54:85:dd:43:26:d7:5a:
                    56:89:51:12:64:a0:86:a7:0f:8d:3b:e9:7b:8b:1b:
                    54:20:e4:31:20:e1:0e:b6:69:0f:97:ca:72:4b:2e:
                    a1:48:58:63:58:97:77:1b:40:66:08:79:8f:25:6f:
                    62:18:cc:b6:5a:5c:dd:b9:d3:2f:ff:c0:56:af:a9:
                    9d:30:69:b5:32:2f:a8:17:c0:1d:62:b7:4c:cb:bd:
                    8b:85:62:58:15:a3:d7:a2:df:a2:3a:bd:59:78:45:
                    70:97:d0:66:95:fb:75:48:88:55:87:24:1b:35:45:
                    d0:99:22:1b:86:f7:f5:42:c9:6d:72:01:7e:e2:6b:
                    25:6b:a2:4f:65:bd:f7:95:90:38:e1:13:95:1a:c2:
                    0b:0e:b3:91:be:e4:4f:be:09:f2:2f:f3:66:5e:a9:
                    ca:5b:9a:5d:3e:f7:73:3f:12:f6:8e:8c:37:f1:0e:
                    fb:99:f3:ef:fc:0c:59:96:f8:3a:46:dc:c3:f5:e1:
                    ce:e1:be:8d:5e:9d:b6:a8:fb:c5:de:9e:e7:cf:aa:
                    88:f2:44:f2:6f:62:80:17:3b:36:db:61:ba:23:a1:
                    81:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5F:D6:2B:E3:5C:7F:A4:C6:A0:C4:2F:61:DE:8D:E6:FB:C8:4D:02
            X509v3 Authority Key Identifier:
                keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b5:51:69:01:02:f3:7e:da:60:76:f5:76:48:b3:c4:f9:da:
         8a:cf:aa:19:70:5d:f3:f5:f0:26:07:a7:2b:76:7e:81:94:fa:
         2b:0a:b3:26:32:7a:1b:af:72:e5:c7:34:db:6f:e9:2b:87:5c:
         13:fc:06:1a:12:33:3b:3e:ff:21:58:4f:40:a9:45:3c:29:b3:
         6e:cc:cf:9c:98:20:f5:6d:94:3c:4a:0a:b8:0e:9f:5d:aa:25:
         1f:70:1d:b7:8d:49:df:22:c4:5d:22:08:05:a1:01:ba:7b:0f:
         d4:6f:fc:17:56:f3:5d:4a:90:33:fb:b7:b1:a0:e1:46:52:01:
         a2:3a:6c:42:65:ae:c8:3e:f6:ee:6f:bc:6a:06:45:47:59:f7:
         62:3a:5d:02:c0:b0:c6:9a:1c:41:97:fc:51:f0:69:73:75:d7:
         a6:c9:5c:2b:0a:90:0c:ec:05:3a:a0:6a:33:1d:59:26:d7:46:
         b2:1e:2d:35:c5:e1:9a:db:20:2c:f8:15:44:4a:71:25:ae:50:
         a0:72:bf:7a:ae:0a:f5:68:c9:d0:cd:0b:0f:22:1a:c2:be:21:
         11:41:74:62:63:b8:78:e0:ae:89:dd:1d:94:c3:48:2f:06:aa:
         4a:ba:d7:62:86:81:8f:28:ed:c0:c0:e9:d1:46:d2:2d:d1:27:
         78:f4:ec:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:35:47 2024 by rpki-client on console-ams.rpki-client.org