Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File:                     1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier:          MIZCRMLL22ClbgjGZ3biqxBT80CbQbtwaTCESbK/0G4=
Subject key identifier:   09:88:76:C5:54:DF:BD:03:38:CB:31:51:1E:09:19:E1:E4:B2:C5:BE
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer:       /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial:       01901F344BB9BB7AA458E46D6B288DB43453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number:          090D
Signing time:             Sun 16 Jun 2024 04:00:39 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:39 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:39 +0000
Files and hashes:         1: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: UnMwLKsSlB1dbvDloZq9+ThoBWQrQvw1iXLIvcOtoOo=)
                          2: TTckRwLzQZOTCqT0wZgtvS_B70c.roa (hash: jtT4CKRdNtdJLcI2px4dzsvm7OZgjjPtK1s7mvGEvBM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:4b:b9:bb:7a:a4:58:e4:6d:6b:28:8d:b4:34:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
        Validity
            Not Before: Jun 16 04:00:39 2024 GMT
            Not After : Jun 17 04:00:39 2024 GMT
        Subject: CN=098876c554dfbd0338cb31511e0919e1e4b2c5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:17:6d:ef:b0:96:b5:d9:34:ac:0d:6c:79:
                    42:b3:63:f4:f5:ad:da:e9:37:00:5a:8b:59:5f:95:
                    2f:a5:c2:9b:6a:eb:52:a2:be:09:6d:5f:a9:b1:b4:
                    b9:84:bd:f5:fc:cc:7f:93:44:92:19:8b:a6:e2:f8:
                    bf:52:e6:39:cb:cb:c4:19:66:c4:b1:c2:86:00:d5:
                    62:a2:15:cf:ff:fb:20:82:96:33:17:d8:f4:9e:04:
                    8d:8e:fe:4a:41:44:77:fa:df:49:0e:70:12:c4:09:
                    bf:a3:f9:bd:5c:0c:80:5d:7a:22:ae:91:7c:27:b9:
                    2f:03:61:b8:39:cb:7c:50:d6:11:89:49:0c:b1:f6:
                    9f:32:a7:03:7e:34:5a:45:71:ff:b0:8a:77:60:0c:
                    c2:6c:fd:d8:93:a7:8a:56:52:3c:4e:76:fd:de:f0:
                    dc:d7:25:83:9b:67:e9:9e:3b:6f:32:f9:a2:a6:eb:
                    86:71:a1:47:b2:1d:05:3d:d1:7b:1a:9a:ad:82:ea:
                    fb:1a:81:87:17:a9:dc:1c:a2:12:c9:d2:53:0f:58:
                    24:73:64:da:04:72:65:78:46:24:64:0d:89:d3:68:
                    81:fb:d3:61:cf:68:e1:30:4b:f1:87:93:e1:8d:89:
                    6f:cf:64:e5:36:d0:0b:d3:0f:ea:fe:2d:e7:16:89:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:88:76:C5:54:DF:BD:03:38:CB:31:51:1E:09:19:E1:E4:B2:C5:BE
            X509v3 Authority Key Identifier:
                keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:3b:fa:4d:e7:e8:ab:bb:2d:cc:ae:27:1f:9e:1e:a0:f2:98:
         b0:d4:f7:b8:10:28:87:b4:d4:e2:16:0d:67:f3:34:06:e7:2b:
         27:4b:db:89:b1:48:8b:07:6d:ad:11:a9:c8:92:95:58:4e:03:
         d0:45:c2:14:6d:76:0f:02:c9:0b:9b:b4:c0:e1:e4:0a:7b:0c:
         3a:9f:5d:8a:73:97:87:dd:22:c5:0c:7c:11:10:51:53:2c:8c:
         63:c0:b7:b6:fa:80:bf:39:7c:83:41:de:68:2a:49:a4:1f:32:
         a4:5d:62:46:e6:78:25:26:f6:75:5d:2b:2a:de:3a:2a:e9:e9:
         fe:03:7a:25:5c:ff:7f:85:28:2a:8d:d2:dc:7c:e3:da:65:d3:
         a4:a7:13:83:43:9a:58:64:52:d9:62:a4:b0:95:55:fa:ed:a0:
         95:80:be:61:ef:92:41:63:b6:fe:98:19:55:d4:39:85:d7:3d:
         ce:ce:e7:a1:59:64:5e:21:72:e7:8e:f9:7c:1a:6f:fa:58:21:
         91:04:32:61:22:8d:57:05:10:3f:1e:fc:bb:49:86:81:b8:96:
         47:db:3c:eb:87:aa:9b:06:91:05:97:30:8f:c3:be:20:30:3d:
         33:26:26:6a:0b:52:ba:5b:a9:1b:56:fa:05:75:6b:f2:2a:a8:
         25:a0:af:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:45:02 2024 by rpki-client on console-fra.rpki-client.org