Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File:                     RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier:          vViNjOpgf4kwZj3wQ13wCZ0BXrPmfO87l0vusyu03QY=
Subject key identifier:   CC:2D:9E:F5:09:E0:36:DC:13:57:5E:54:49:8D:30:51:76:29:06:0E
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer:       /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial:       01901F6B4D02720E78666E9EA40433B30891
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number:          9E
Signing time:             Sun 16 Jun 2024 05:00:44 +0000
Manifest this update:     Sun 16 Jun 2024 05:00:44 +0000
Manifest next update:     Mon 17 Jun 2024 05:00:44 +0000
Files and hashes:         1: BffRGbnJ9ylCKSP8Zu7YFM9CTps.roa (hash: jRYMFdFuHo9OGKDgxdPoRcfLVjSQl6KgwCQb8vGsDiQ=)
                          2: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: njLoGKWF5SKNcWL04gLhiRfdv5ZKlxXjwkE+yK52cas=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:6b:4d:02:72:0e:78:66:6e:9e:a4:04:33:b3:08:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
        Validity
            Not Before: Jun 16 05:00:44 2024 GMT
            Not After : Jun 17 05:00:44 2024 GMT
        Subject: CN=cc2d9ef509e036dc13575e54498d30517629060e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:14:08:9f:dd:4c:4d:f7:f6:d1:82:3a:25:44:
                    fd:f5:2d:92:d0:69:ac:79:e0:14:44:75:85:98:72:
                    66:16:1e:08:0e:95:b2:83:f2:ef:44:38:e8:87:c0:
                    9f:32:67:d0:81:25:8a:b1:b0:09:52:60:f9:a4:7d:
                    39:f0:2a:56:c0:cf:9d:75:45:81:76:67:91:1b:6b:
                    92:d2:96:87:7a:88:b6:1d:c3:13:27:aa:84:cb:8d:
                    e3:34:11:8e:c5:27:2e:bb:d3:a7:ed:27:2d:75:65:
                    60:5f:c3:a4:2e:93:c1:47:01:1e:5d:c3:b9:bf:ca:
                    94:bc:17:05:29:f5:3a:f1:5e:dd:b0:25:81:9b:ed:
                    47:1c:cb:bb:8c:ed:fb:ad:88:49:de:ca:f1:ab:cf:
                    d9:03:b9:9e:18:10:2e:e1:59:4e:41:2d:f4:d5:bc:
                    a6:97:5a:50:26:aa:0b:76:49:db:dd:25:4b:39:b0:
                    22:a0:6e:f6:4e:94:ff:fa:a4:4a:fa:96:41:df:04:
                    d8:38:a6:28:26:52:ba:e0:ef:eb:43:34:9b:e7:9e:
                    e8:c3:38:22:5d:45:e5:cf:54:54:6b:1e:33:5a:fe:
                    5f:96:8d:00:84:df:67:61:d0:0c:5c:06:0b:3e:c0:
                    6f:33:5c:f9:a7:36:69:3a:09:19:77:e0:27:c5:a5:
                    fa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2D:9E:F5:09:E0:36:DC:13:57:5E:54:49:8D:30:51:76:29:06:0E
            X509v3 Authority Key Identifier:
                keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:93:91:35:ee:69:ca:55:68:e7:9c:d0:6d:fc:ab:0a:53:b1:
         79:4e:e7:63:7a:70:89:2b:e5:93:a1:74:44:07:c4:48:4c:e1:
         e6:57:d3:d5:3a:0f:37:68:ed:f7:58:be:20:56:d6:39:48:91:
         50:62:40:0d:12:37:22:eb:89:0c:0f:84:1f:30:9f:74:0c:7e:
         7c:f1:b9:99:3c:f8:17:59:b7:e2:2b:4e:59:c6:07:e2:1c:38:
         68:3e:ef:4f:44:dd:b2:4d:40:01:b8:38:71:04:c1:40:76:3c:
         03:bc:00:52:85:6f:f3:5e:33:47:97:a6:3f:4f:74:5a:30:fc:
         f7:ec:dd:e2:dd:62:43:2a:74:c0:6b:16:2b:30:4b:e6:ec:1d:
         c3:ad:b9:0a:9f:35:40:c4:35:59:26:a4:27:d3:47:bf:3a:79:
         4f:32:d6:83:21:0a:2c:f4:fe:91:e8:73:5c:44:13:35:69:0d:
         aa:bd:04:47:8a:b7:53:f0:b4:ba:12:22:1a:ba:c9:8e:e8:e3:
         10:cb:29:b4:d8:6e:51:8c:c3:06:00:51:24:f3:d2:61:81:b7:
         11:d4:75:00:d1:75:a5:29:27:7b:cd:25:91:5c:a1:55:c6:5c:
         4c:bf:85:f2:85:96:c8:39:e8:fe:29:81:2f:aa:f0:bc:5d:d4:
         93:60:1c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:30:16 2024 by rpki-client on console-fra.rpki-client.org