Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File:                     cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier:          dGol7zmxxYux6WG3prSOLSzsxvPDewzo/2Dll5sSSWA=
Subject key identifier:   EB:37:6A:61:59:9C:F4:1C:CA:97:A0:8A:9E:A3:A0:F1:0E:E8:EC:B6
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer:       /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial:       0190448D591A9BC9D817E84C178B02DA6855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number:          0EC9
Signing time:             Sun 23 Jun 2024 10:03:52 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:52 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:52 +0000
Files and hashes:         1: 0wCe-RMpWP650fdv6ZWDWRZ78LE.roa (hash: NF6AXG8Q5HutlZjGPyR8fhOKnQB1kN40amirf51mz4s=)
                          2: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: wSeV/a8JlaS52NzZtdcD9bWw4CNmKGlg46W/Qf55ly0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8d:59:1a:9b:c9:d8:17:e8:4c:17:8b:02:da:68:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
        Validity
            Not Before: Jun 23 10:03:52 2024 GMT
            Not After : Jun 24 10:03:52 2024 GMT
        Subject: CN=eb376a61599cf41cca97a08a9ea3a0f10ee8ecb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:43:fa:ef:e4:ec:56:e7:cb:37:e3:7c:44:5d:
                    35:84:42:49:37:36:eb:db:c1:2a:8d:89:46:16:c3:
                    d2:c9:dc:b1:b4:e6:92:dc:6d:ad:4d:e5:a4:e1:ac:
                    77:fa:76:d2:3f:35:5b:95:b7:28:d3:4e:c4:41:02:
                    29:9b:9f:28:dd:8f:bd:24:94:39:58:2b:ca:7e:57:
                    c7:e0:00:40:5a:1e:15:36:44:5d:90:0b:1f:c1:fe:
                    20:ed:12:c9:54:7a:f8:ad:09:62:49:e3:1a:4c:14:
                    c1:ec:8f:fa:e8:d7:97:da:61:b4:f7:79:b8:a2:eb:
                    28:fa:7b:4f:0a:65:22:7a:59:dc:22:7d:f6:bb:54:
                    b1:b7:b2:ad:f8:69:ef:ca:2a:47:69:b7:9a:43:7b:
                    46:be:b6:7a:cd:0f:57:59:eb:dd:aa:14:28:86:5e:
                    9e:77:fd:1a:81:0a:a2:54:52:4b:1e:c0:35:dd:82:
                    ad:b4:50:3b:3f:89:e2:04:9f:bc:48:2e:8f:b3:1a:
                    36:a4:34:48:e6:07:d7:2f:1a:da:f7:0c:5f:11:d3:
                    cc:e1:c5:59:0d:37:38:b6:20:d1:15:c8:77:bb:5b:
                    ca:4a:a7:14:96:e9:55:50:79:76:67:a3:da:ea:74:
                    d9:7f:ea:d5:33:a9:7a:2c:81:88:d0:bd:6c:fd:2d:
                    cc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:37:6A:61:59:9C:F4:1C:CA:97:A0:8A:9E:A3:A0:F1:0E:E8:EC:B6
            X509v3 Authority Key Identifier:
                keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:89:29:ed:4b:9f:d7:68:63:5b:bf:ca:cc:5a:65:20:04:18:
         16:52:22:10:81:e3:f3:f6:23:05:a5:5a:5f:23:6a:d6:6e:6c:
         8a:6b:2a:54:15:8c:92:52:4f:66:9c:62:ec:4b:ca:4e:4c:5b:
         65:cb:60:f6:f4:69:a1:be:3f:24:d5:75:11:c1:bc:e7:10:c8:
         6b:55:7c:4c:ef:e4:34:48:07:1e:31:0f:b3:78:f7:62:f4:cf:
         5c:88:ef:d5:21:61:35:84:6d:b7:e1:60:c0:58:5d:2a:f4:c3:
         44:1d:25:5d:2b:0a:b2:aa:dc:29:09:39:5e:9d:05:9e:82:03:
         54:48:b7:bf:b1:fc:4c:6a:d0:3a:15:82:39:19:81:76:3a:94:
         d5:9c:fd:16:fc:92:c8:6b:34:0b:b6:03:c3:c2:88:31:88:d3:
         35:b5:f9:bb:44:79:2f:46:6b:fd:88:88:4e:76:e4:e5:8b:05:
         d6:30:e5:a5:d4:54:25:d3:c2:a4:a9:0d:99:4a:6c:d4:68:a2:
         85:fb:dd:2d:a1:d9:1f:5f:30:20:d0:51:6b:d9:60:11:5b:fa:
         71:10:55:32:c2:d5:eb:f6:ee:2a:eb:4e:0e:07:41:6e:40:da:
         8e:5a:f9:01:ae:70:44:9e:fa:9b:92:95:87:8a:fc:80:8a:b3:
         d9:5c:ed:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:07:12 2024 by rpki-client on console-fra.rpki-client.org