Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
File:                     ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft (raw, json)
Hash identifier:          XwO0ab1gDm5YtXFdRw6abOnPN2Z2ZQygvYNjnQnw2yw=
Subject key identifier:   51:DD:85:76:4B:B5:11:58:3F:6D:34:69:32:00:06:8D:14:10:C9:E1
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Certificate issuer:       /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial:       01901E5922DDD150E1B923C9A4501805F57E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
Manifest number:          09B6
Signing time:             Sun 16 Jun 2024 00:01:16 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:16 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:16 +0000
Files and hashes:         1: 36DNFidq4QKds8boYhaEJHVKa6I.roa (hash: /iFXDpWKAqmTw3nNVieAW77OvIaF41sD9J8zNrHUjVM=)
                          2: BDBRhWFBlK9vcfr0QKXqP994RGM.roa (hash: 0Pybw8NS06uSqnwmcCLpDDhdeVKM+abA07WObm8VMqo=)
                          3: IBMTKga3vIUOvsY8HAQpuyucivc.roa (hash: N7Y2tUplFoJWf+i2Ye6i8a2Fj3yzy3ptfgZ/q9h8JIg=)
                          4: ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl (hash: LIrogQ3ni21Xb4wSq5t6k7i0FeQeO1VbIDebKbKDrQ8=)
                          5: taf8aJVUMV6mac07U8_6aKp1U8U.roa (hash: 4FT8jf6HBdyCQmEMSDx72ph3gFr+/vQwRw8yLiChx6I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:59:22:dd:d1:50:e1:b9:23:c9:a4:50:18:05:f5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
        Validity
            Not Before: Jun 16 00:01:16 2024 GMT
            Not After : Jun 17 00:01:16 2024 GMT
        Subject: CN=51dd85764bb511583f6d34693200068d1410c9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:92:0b:b3:65:f1:e1:ad:5b:e7:1d:93:36:
                    61:0d:4d:df:88:14:f3:b5:6f:88:63:2b:33:4c:b1:
                    c2:23:d7:57:ea:fd:2c:4e:2b:4f:78:2a:a5:7e:18:
                    bd:24:9a:8f:c0:8d:51:7d:56:05:06:6b:04:ff:e1:
                    ec:8a:62:5d:f5:3e:30:39:6d:c4:41:f9:6b:d5:08:
                    bd:42:b5:d4:33:6f:64:74:20:55:af:5d:c2:7b:7d:
                    62:b9:09:81:6b:df:ae:f5:64:a9:96:33:5d:2e:ea:
                    4b:9f:4a:54:43:ac:1b:2a:c8:41:8f:d7:d3:ff:cd:
                    88:cb:01:9b:ff:fb:c9:be:95:e9:83:af:2d:c2:58:
                    90:1f:92:6b:60:ed:a3:75:22:f9:35:fc:54:2c:c2:
                    e2:c5:f0:78:5c:6a:f7:ba:6d:66:f7:91:13:5a:0e:
                    4a:bf:c5:86:46:e1:31:74:01:8e:ac:a5:2a:b9:5a:
                    29:af:39:89:9f:fb:29:cc:c0:94:16:92:17:e1:46:
                    c0:1a:58:76:32:83:bc:45:5f:80:6a:10:bc:8f:21:
                    96:fb:16:c9:2a:29:df:78:8e:b6:b0:0f:74:d2:44:
                    7a:1d:58:ad:06:54:a8:87:23:78:9f:ad:b5:d6:f8:
                    6f:3a:8c:ef:00:bd:84:04:7c:12:0d:7f:08:ce:6d:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DD:85:76:4B:B5:11:58:3F:6D:34:69:32:00:06:8D:14:10:C9:E1
            X509v3 Authority Key Identifier:
                keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:95:34:5b:1c:9a:f8:15:bc:50:ac:14:1e:ee:e6:1a:f2:6f:
         9f:00:63:7b:20:08:96:b0:25:02:01:56:6b:5e:4f:80:35:dd:
         15:9b:09:d7:39:7c:06:c1:2f:36:34:4d:65:6f:39:5f:44:7e:
         de:3a:c9:f6:8a:bf:c8:15:a1:28:60:d1:90:24:73:46:a4:bf:
         ea:5e:4c:1d:df:fb:e5:b5:60:5e:dd:0c:9b:8f:12:3c:d6:02:
         cb:07:ab:19:2b:47:75:34:a8:84:fd:97:07:1d:5f:78:4a:10:
         6e:e7:40:35:7f:52:1e:31:2a:98:d9:a8:8b:02:be:21:20:da:
         b2:23:3c:25:90:63:8d:32:cc:15:ae:cc:3b:4c:64:e1:b8:41:
         49:e3:c1:18:ce:21:1c:8d:7c:3a:a3:fd:18:d8:b3:66:04:d3:
         58:15:f2:5c:93:59:7a:a4:04:04:30:2b:33:b0:2d:d9:fe:60:
         be:03:17:d4:07:f8:01:8d:e2:63:40:75:cf:13:de:15:b0:3d:
         06:91:98:9a:f5:83:9a:41:3e:33:62:e8:fb:b0:bf:31:0e:ea:
         a2:b9:6b:0c:b8:1b:4c:e4:82:73:f6:56:45:85:69:4f:1e:47:
         c2:69:d9:73:ef:60:a6:9b:be:be:d9:c3:47:e5:6a:06:15:83:
         f5:02:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:57:43 2024 by rpki-client on console-ams.rpki-client.org