Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
File:                     m6kNZtLd62RqYUBpEv_d-hTjmRA.mft (raw, json)
Hash identifier:          MxOoedrZ4w5ozyUkVeIsxHmyoP55hyCnsp72gnucAkY=
Subject key identifier:   D9:92:B9:99:2B:97:8A:7B:8D:7B:FB:63:92:38:E6:CB:CD:84:1E:1C
Authority key identifier: 9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10
Certificate issuer:       /CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
Certificate serial:       0190422E252E8E98EA3814A8D319C09A4EB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
Manifest number:          11D8
Signing time:             Sat 22 Jun 2024 23:00:38 +0000
Manifest this update:     Sat 22 Jun 2024 23:00:38 +0000
Manifest next update:     Sun 23 Jun 2024 23:00:38 +0000
Files and hashes:         1: 8JA6jWnovH3aSLNxaIlIv_K2_yM.roa (hash: OJbwkitLKJrFT0e+pWiIArtH3q7Y1sNvZXhXYuGhKso=)
                          2: m6kNZtLd62RqYUBpEv_d-hTjmRA.crl (hash: wj6bcw6QG3aePmg3ILsTZszGiUrriemRKRt9+s2j04s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:42:2e:25:2e:8e:98:ea:38:14:a8:d3:19:c0:9a:4e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba90d66d2ddeb646a61406912ffddfa14e39910
        Validity
            Not Before: Jun 22 23:00:38 2024 GMT
            Not After : Jun 23 23:00:38 2024 GMT
        Subject: CN=d992b9992b978a7b8d7bfb639238e6cbcd841e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2c:19:83:48:b3:f5:d2:ec:4f:2c:eb:da:e7:
                    73:95:55:2f:7b:ed:d9:80:aa:4f:5e:da:1e:7f:8e:
                    8e:54:64:96:27:11:79:fe:73:92:36:d7:0b:fb:7e:
                    44:78:f8:bc:74:84:7a:6a:e7:bf:da:d1:f3:8b:c9:
                    cd:e7:de:64:a7:b4:c4:b1:ee:7d:a6:63:2d:5f:c4:
                    da:5b:ee:4f:67:1b:41:23:60:2b:d1:5c:f7:06:b3:
                    d9:a4:bb:7c:ec:88:a2:d3:d8:cd:38:66:0b:41:51:
                    c2:aa:35:bc:df:03:d3:6d:e9:98:02:d5:e4:5c:24:
                    d5:04:60:46:90:43:1d:c9:b6:1d:ba:49:b6:38:d6:
                    78:c9:7a:56:52:b8:8f:25:b5:2a:3b:ce:f3:37:02:
                    f7:de:75:86:81:e3:d1:dd:1e:79:4a:43:d2:ee:2a:
                    cb:f3:9d:ac:2d:a6:13:7c:09:59:a5:21:ad:b0:c8:
                    9d:fa:4d:fa:55:6a:39:44:88:b7:20:1e:ff:58:fb:
                    1c:9a:c3:3c:09:c0:ef:3a:ed:b7:1f:e1:73:a5:c6:
                    43:9e:45:3e:02:da:f1:c0:eb:3e:fb:24:42:75:d4:
                    4a:03:b7:bf:69:9d:2a:c3:db:60:3e:b8:c0:01:b3:
                    56:7c:62:8d:b1:1d:6c:e7:6c:ed:80:3b:e0:a4:f8:
                    34:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:92:B9:99:2B:97:8A:7B:8D:7B:FB:63:92:38:E6:CB:CD:84:1E:1C
            X509v3 Authority Key Identifier:
                keyid:9B:A9:0D:66:D2:DD:EB:64:6A:61:40:69:12:FF:DD:FA:14:E3:99:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6kNZtLd62RqYUBpEv_d-hTjmRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1b7635-e6ff-4969-b2c0-89fb8fe69633/1/m6kNZtLd62RqYUBpEv_d-hTjmRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d5:0c:a4:10:53:fa:14:bd:1e:3e:b2:54:ac:c6:b8:6a:26:
         c1:bc:7f:4a:d9:4e:43:85:b3:68:ac:58:1f:24:ca:19:ff:03:
         f1:44:18:da:03:01:7f:b7:a4:09:86:b7:ff:45:26:29:19:2c:
         e5:2e:89:16:67:65:5d:de:63:6c:a3:2f:54:7a:20:ba:fa:c7:
         b0:68:10:eb:46:f9:9c:17:a8:cc:4e:b6:68:44:71:bc:d1:f7:
         ed:de:af:c6:c2:99:63:b1:e6:a0:aa:e9:8c:3d:31:a4:12:97:
         82:bf:d3:78:11:46:27:f8:6f:7b:d6:21:29:10:30:f4:3e:9f:
         ea:4e:c6:59:4d:4b:71:2e:ea:01:b7:3a:03:f3:bd:20:3b:ae:
         4e:3a:9c:fb:1e:7d:ef:f8:82:46:a9:ff:89:e8:7a:01:1b:fb:
         6a:ba:2c:6c:35:68:91:66:f2:59:b6:f9:a8:eb:b1:33:44:f9:
         a1:4c:93:25:8f:13:ec:c2:76:1b:80:6e:01:ce:ba:6c:ff:d6:
         47:23:5c:af:ad:8b:5e:9c:38:fe:64:2b:d4:47:d1:c7:fd:0f:
         1b:64:c9:ed:20:3a:85:2d:10:95:20:50:fe:34:72:b0:10:32:
         f9:ff:a0:6e:f9:bc:94:68:85:4c:88:f6:30:cb:66:38:0a:e3:
         f8:cf:8f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:43:07 2024 by rpki-client on console-fra.rpki-client.org