Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File:                     ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier:          csoJCaACqp5Ni5Nk7bm5c906BwAugMd1DQcjVbqvbgc=
Subject key identifier:   89:59:5A:64:1B:78:D8:E5:08:64:5B:2B:9D:06:7A:B8:89:A6:5D:5E
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       019048D52BB4F3877E22914CF91374059D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number:          0B46
Signing time:             Mon 24 Jun 2024 06:00:48 +0000
Manifest this update:     Mon 24 Jun 2024 06:00:48 +0000
Manifest next update:     Tue 25 Jun 2024 06:00:48 +0000
Files and hashes:         1: 8rlaDiP_it2N0vLEvdVXTQMb4b0.roa (hash: lCrip8Nc6vSGAGnSdCD8I+v+Gy/M2qu2ACQDWy8nQS4=)
                          2: S2O6zz9r2Xf5aU4zmRFzqZUyi94.roa (hash: OZRB4F2kndINNwc46gg7iaGjzkxbW7tDaRSV7+x8kBY=)
                          3: phum2vKJ-BGt8MGXVbtpwPZn9zo.roa (hash: znwmUvm+s2Qt0iwth0vVXIUKfcAl7bKudtu8utOrL1A=)
                          4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: 0DeRTiQ4ced50PB7wTgG9PsUjIVyPvPgbaSYf3EbOC4=)
                          5: xsoAaKp53xWw-e-Wm8CILOU8Rzc.roa (hash: +dge3ZwIO8m/UTNnzTLIOC2ax5vYcGLhApSyAoCBAPc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d5:2b:b4:f3:87:7e:22:91:4c:f9:13:74:05:9d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Jun 24 06:00:48 2024 GMT
            Not After : Jun 25 06:00:48 2024 GMT
        Subject: CN=89595a641b78d8e508645b2b9d067ab889a65d5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:3b:4f:d4:13:ae:6c:e1:0a:03:eb:1d:a7:
                    50:b1:84:e1:61:a7:31:59:70:b0:72:95:54:fc:59:
                    6b:af:05:0e:9b:51:c0:11:88:3b:de:fe:f7:31:02:
                    27:5f:58:3a:e7:f3:d9:73:f3:97:aa:03:3f:16:15:
                    c6:3d:7f:1e:50:6b:a5:ee:dc:bf:65:22:01:ff:f0:
                    c8:73:da:74:e5:b4:47:72:ab:65:e0:5e:32:42:f0:
                    df:19:41:b4:86:e6:4b:b9:ed:8b:84:ed:6a:20:c9:
                    fe:c9:79:5f:3d:67:43:f1:e9:49:1a:50:19:ff:58:
                    50:98:84:2b:c9:83:82:0d:2d:3e:e1:69:0e:31:07:
                    71:89:9f:d4:9f:a7:45:35:98:8b:65:b5:13:55:59:
                    f8:95:a8:c4:a7:2e:6d:9c:ef:52:a3:c9:8f:08:a4:
                    e0:b3:36:04:78:0d:d8:4d:33:05:6a:fa:bb:85:a4:
                    77:83:5d:9b:d4:c4:80:94:5d:84:81:48:a1:7f:e6:
                    14:6b:63:09:f5:54:bc:8b:e2:cd:7f:6b:b4:79:f0:
                    fa:7e:ce:48:11:6a:17:2e:c5:60:c7:e4:4f:7f:11:
                    4f:5a:e5:de:1e:b7:0f:7d:df:71:ea:7f:63:e0:52:
                    ce:e6:eb:e3:d8:2b:0d:1c:14:ee:02:7e:de:36:d6:
                    c8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:59:5A:64:1B:78:D8:E5:08:64:5B:2B:9D:06:7A:B8:89:A6:5D:5E
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:68:4f:b3:72:80:01:5f:7b:7f:e5:d4:e5:57:e6:52:26:bb:
         66:61:0e:d1:c1:54:35:81:0c:7a:31:e6:67:19:ed:a0:32:7d:
         be:24:06:6c:a7:31:93:59:27:21:ea:20:99:c7:e2:2a:20:8b:
         f4:c4:97:bf:d1:0b:f1:11:0a:13:a2:8e:af:36:22:eb:4a:d4:
         91:ac:3b:eb:12:fb:c7:4e:96:11:9e:30:4f:0d:cc:47:f8:bc:
         40:06:14:bc:ea:4a:5f:b6:8e:89:08:90:d2:5f:b6:bf:cd:e0:
         84:cb:bf:4f:8b:53:49:0e:3b:c4:cb:d8:09:a4:51:9b:0e:49:
         c2:56:fe:d5:0c:cb:de:ca:49:5f:61:25:15:cb:1c:07:33:95:
         04:74:c2:85:de:05:fa:c9:aa:a7:40:04:a1:73:84:44:5b:bd:
         ac:c5:92:9d:d9:66:8a:11:4c:fd:d0:3e:95:74:20:44:d1:80:
         d3:6b:9b:57:e6:21:4f:5b:16:68:13:aa:67:c7:fe:6c:9b:00:
         bd:ba:8b:94:c9:b8:33:27:9e:46:41:ed:7b:9a:e9:4e:26:d8:
         b7:44:96:0c:a0:a9:0d:18:69:38:ca:fd:60:6d:d1:7c:0e:28:
         c7:47:4a:a9:7d:cb:44:63:e9:a5:53:ad:e0:b8:eb:72:aa:90:
         39:f6:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:38:06 2024 by rpki-client on console-fra.rpki-client.org