Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File:                     u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier:          GlL+Xk4fQ85WztjqTQm9ahk8WEHRLFPAplU2AKMt8ZA=
Subject key identifier:   0E:BD:C3:59:45:4F:FF:02:B6:AE:73:72:E8:E1:15:D8:FF:6F:D0:BA
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer:       /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial:       01903EBFEC80A58D55620EE4AD3DF9D95B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number:          10B2
Signing time:             Sat 22 Jun 2024 07:01:23 +0000
Manifest this update:     Sat 22 Jun 2024 07:01:23 +0000
Manifest next update:     Sun 23 Jun 2024 07:01:23 +0000
Files and hashes:         1: gMXKuYY3VUIeAtmGhOy7amjQBjc.roa (hash: /ZXDIIFpfz3sPGstO361xbkLo1P5DyMJp94M8/NceMQ=)
                          2: kg-X3vXZg48bU6ImsIztKmS_FzE.roa (hash: nRM7rXh74ZxW2a1memTAGXkFe+xQ7LRRqBUOffrqzOw=)
                          3: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: rf/xpXG+9+CWvX5DA7KFScZIWKkz/34LNMWJiWJq2bc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:bf:ec:80:a5:8d:55:62:0e:e4:ad:3d:f9:d9:5b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
        Validity
            Not Before: Jun 22 07:01:23 2024 GMT
            Not After : Jun 23 07:01:23 2024 GMT
        Subject: CN=0ebdc359454fff02b6ae7372e8e115d8ff6fd0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9b:cb:a1:5f:bc:60:15:61:c2:9c:b6:10:3a:
                    8d:e0:51:f3:50:50:f4:9f:4b:69:b9:50:b7:04:48:
                    a2:87:0d:9b:dd:da:24:ae:00:49:cc:39:b7:58:eb:
                    bc:27:a0:6a:af:e1:6f:3a:8f:dd:99:5e:fa:a1:10:
                    48:25:48:f9:53:fc:80:5e:a4:bc:e4:05:a8:03:3f:
                    bf:83:fc:b4:7e:34:1d:a0:02:8f:03:88:a2:7d:56:
                    81:d6:8d:c9:82:04:59:47:65:cc:dc:c5:4e:4b:42:
                    e0:c9:8e:0d:d1:29:8b:ed:a9:c2:59:f3:ae:9b:ad:
                    27:16:8d:ce:3b:fb:05:90:ef:63:aa:cd:4d:fa:7d:
                    ef:1e:bb:2f:19:18:b0:aa:20:56:1a:fb:0e:1a:37:
                    c7:04:a3:8e:cb:cf:e5:c2:4b:b3:9c:b2:04:7c:66:
                    af:06:b6:89:16:fe:0d:bc:2c:13:e7:22:9b:9b:ec:
                    de:da:f4:ea:30:e8:16:c8:5a:a3:a1:8c:f8:0d:56:
                    78:cb:86:c0:5c:27:58:2d:26:ac:fc:ae:75:8b:41:
                    d9:13:c1:ba:b4:be:c1:29:7b:5e:44:28:d3:98:a8:
                    e5:ae:f9:1d:a4:be:78:b3:33:32:0d:a3:51:d9:9e:
                    29:09:90:52:a1:02:e3:67:f5:2a:cb:77:0e:e0:ad:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:BD:C3:59:45:4F:FF:02:B6:AE:73:72:E8:E1:15:D8:FF:6F:D0:BA
            X509v3 Authority Key Identifier:
                keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:08:c8:ac:25:e6:d6:35:5b:9c:ea:6d:df:8f:e8:46:52:73:
         c9:9e:ae:ff:72:bb:e0:3a:35:bc:ed:35:b2:b2:38:5c:1e:c1:
         27:e5:0e:fc:6d:29:33:bf:66:0b:c3:54:22:3e:64:36:6b:37:
         98:69:3f:b7:3d:50:fa:5b:b6:0a:00:1b:79:7e:5e:78:5a:7b:
         41:11:b9:55:70:e8:e6:93:d0:66:79:80:7a:59:0c:48:4e:53:
         62:f7:10:01:ca:9a:90:77:3f:6c:d9:3d:c7:19:ce:e7:3b:4d:
         93:61:bb:c6:89:ff:84:37:fe:68:09:0a:79:d1:ea:84:13:55:
         b9:f4:02:63:d1:3e:4b:fd:94:d5:ce:2c:44:68:5f:f3:08:71:
         e7:42:f1:61:98:7e:09:d6:e7:51:f0:35:ae:e2:28:ef:2e:a2:
         d3:f1:33:22:66:63:5d:78:f7:a8:a1:03:ff:2f:8b:ac:6c:a1:
         4a:fc:b3:32:6d:2d:f1:9a:93:20:ec:c6:3e:d8:31:54:b5:2f:
         15:aa:c1:af:ee:c4:1f:2d:a0:c9:12:12:80:e6:c0:21:57:13:
         79:33:8d:c4:61:66:bb:ca:fd:7e:ba:de:00:4c:1e:bb:5c:10:
         f1:02:be:bf:f7:20:e7:b9:7a:31:f7:ac:84:81:60:56:66:71:
         f2:98:3a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:35:25 2024 by rpki-client on console-ams.rpki-client.org