Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
File:                     _5m8PRSR-CJfiBFk9ZMUS3olyOs.mft (raw, json)
Hash identifier:          Wyx2Mx/62R7GcnbPGwb9SuhFmVX39wURSI5YYQk+s9w=
Subject key identifier:   B0:8E:4A:52:8C:41:36:46:E3:ED:2F:54:02:CC:C0:8C:40:69:3A:C9
Authority key identifier: FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB
Certificate issuer:       /CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
Certificate serial:       01901EFDA25909B2A25A7E54A9938770FF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
Manifest number:          0B98
Signing time:             Sun 16 Jun 2024 03:00:56 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:56 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:56 +0000
Files and hashes:         1: _5m8PRSR-CJfiBFk9ZMUS3olyOs.crl (hash: 7JmVlVv6vFlrFyF8yzCIbTqhGsWZBxQy2EfPB8ZZOxY=)
                          2: _ZdbqZDjLwqhqco-OCKHkAW7CHk.roa (hash: MyiuhW9qjN+LmLQU0unn/T02LOrN6vckY+ROKtjjNLc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:a2:59:09:b2:a2:5a:7e:54:a9:93:87:70:ff:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff99bc3d1491f8225f881164f593144b7a25c8eb
        Validity
            Not Before: Jun 16 03:00:56 2024 GMT
            Not After : Jun 17 03:00:56 2024 GMT
        Subject: CN=b08e4a528c413646e3ed2f5402ccc08c40693ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:96:df:d9:41:94:23:9a:f6:86:88:cf:c2:
                    ca:12:fd:86:68:7d:de:01:2d:6e:e8:79:db:d2:8f:
                    9b:61:cd:0f:8f:a9:a2:2f:6b:52:01:60:c5:31:2d:
                    31:11:55:69:ca:fb:98:49:ae:58:ed:f1:17:b7:f7:
                    f1:e0:48:93:29:73:78:9d:57:00:b6:ab:5b:3d:0a:
                    58:7b:db:2a:e4:5e:a8:a9:0a:48:bb:d0:cf:02:6a:
                    92:0a:a5:af:44:c3:fa:72:c3:de:11:e4:1e:a4:14:
                    bb:61:de:2e:45:7d:7e:64:78:e1:f9:79:2d:aa:4c:
                    d9:3e:b7:58:3c:e0:bf:d4:01:b4:e6:c3:d1:68:dd:
                    e9:96:fc:c2:f6:82:8f:8f:ab:81:d1:b2:e6:6e:e4:
                    c1:c8:40:0c:8b:4e:bb:b1:16:56:68:41:eb:ad:64:
                    1e:f8:95:aa:db:92:08:bc:8f:66:2e:96:6c:6e:9e:
                    3b:d2:b6:02:be:a8:11:4d:ce:26:90:bc:9e:34:f0:
                    e2:6a:60:bc:cf:2f:02:81:eb:dc:40:47:d7:bd:28:
                    50:8c:92:52:43:92:86:90:f3:22:78:77:10:2f:5c:
                    45:21:a5:42:dd:93:5a:86:45:cc:63:0e:17:9f:e5:
                    45:0c:89:ff:d7:ed:b7:88:54:cd:30:f0:07:ae:42:
                    33:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8E:4A:52:8C:41:36:46:E3:ED:2F:54:02:CC:C0:8C:40:69:3A:C9
            X509v3 Authority Key Identifier:
                keyid:FF:99:BC:3D:14:91:F8:22:5F:88:11:64:F5:93:14:4B:7A:25:C8:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5m8PRSR-CJfiBFk9ZMUS3olyOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da3406-04f9-47b0-a119-b88afef13367/1/_5m8PRSR-CJfiBFk9ZMUS3olyOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:00:55:0c:6d:1b:10:20:b4:79:5d:8c:b3:4d:f7:4d:ca:0d:
         66:0e:5a:d8:0b:2c:c7:87:59:c5:5d:33:00:07:96:3f:41:1e:
         bb:c0:cf:8e:f3:4a:94:17:17:65:59:47:fa:fb:a8:d0:4a:ca:
         4b:7d:40:91:95:2a:f5:6a:a4:65:28:9d:b6:87:96:7d:0c:b3:
         1e:89:ce:3e:8f:59:68:1c:a5:10:03:c6:03:1f:72:76:15:02:
         bc:37:0c:12:f2:83:56:02:9f:23:7f:5e:0e:01:4a:30:32:8a:
         09:14:e9:bd:01:87:42:d8:18:d5:e3:21:b0:d4:aa:cd:23:85:
         b2:61:d9:59:d9:a1:bb:89:20:44:fc:5b:8b:60:43:10:9c:da:
         ee:6a:71:c2:6a:e5:ef:03:27:c4:3c:17:75:14:e7:a4:79:f2:
         0e:4b:e7:75:74:27:f2:de:c9:f9:7d:dc:c9:80:54:a5:43:63:
         d1:45:ca:e4:90:d4:3d:58:2c:06:31:51:7c:a6:fe:a5:9a:5e:
         1a:cb:de:27:eb:00:25:47:c8:86:a3:97:b4:7a:c3:7a:bc:35:
         33:9a:0a:1b:80:21:93:2e:06:ae:17:49:60:99:1f:32:49:a3:
         6d:1e:58:5c:6d:b8:4a:06:3e:07:9d:f9:18:d9:8b:d9:88:c3:
         2b:31:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:31:10 2024 by rpki-client on console-ams.rpki-client.org