Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
File:                     dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json)
Hash identifier:          N/2Kn60uWubYvTop6OZf7uPhuoehT+rvD4GmCx6bDJ8=
Subject key identifier:   93:4E:34:EE:6F:94:60:CA:34:B3:A0:0F:80:39:51:47:CA:70:E1:8A
Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93
Certificate issuer:       /CN=773110a43704d9549df7156e3a789e62285b1693
Certificate serial:       01901DECBD384886ADF3B0AC86C46A58EB58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
Manifest number:          1193
Signing time:             Sat 15 Jun 2024 22:02:52 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:52 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:52 +0000
Files and hashes:         1: EjQxT7tWV4My88QEb-r51W1rC2g.roa (hash: uPfO9E9yUSqylGeQYjSiT7O5KtGS/qoSKvGAOYl1WhQ=)
                          2: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: pDv+p1H2HnTl+xp9hxhqTEU48i87V9Hacdg07iF7Frs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:bd:38:48:86:ad:f3:b0:ac:86:c4:6a:58:eb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773110a43704d9549df7156e3a789e62285b1693
        Validity
            Not Before: Jun 15 22:02:52 2024 GMT
            Not After : Jun 16 22:02:52 2024 GMT
        Subject: CN=934e34ee6f9460ca34b3a00f80395147ca70e18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9f:dc:41:22:46:1c:d4:ef:3e:fd:08:f0:92:
                    4d:b0:f6:c6:66:45:2a:6e:69:3d:99:f2:7b:12:14:
                    aa:e1:8d:ba:3c:fe:07:04:d1:ed:d3:b0:d9:69:a5:
                    2e:ed:27:55:cf:9d:d2:17:17:fc:46:80:e3:15:49:
                    aa:7c:38:19:ff:28:20:93:79:e5:b0:83:fa:03:a8:
                    30:66:28:39:ce:6d:e1:f2:03:e3:00:3e:fb:61:bd:
                    6e:0a:ca:c5:32:be:11:5a:76:40:d8:85:ae:21:d2:
                    ad:46:36:93:04:c4:07:1a:73:fd:3a:79:54:32:b1:
                    12:f3:0e:b8:3f:f2:e5:df:79:04:ab:5b:0b:ab:d2:
                    81:e0:2b:31:63:ad:35:84:cc:1e:eb:43:7f:a3:7d:
                    e5:02:5e:15:b1:c2:6e:b9:16:ac:c4:35:56:b7:b7:
                    a6:61:99:c6:da:40:e2:73:a0:73:f2:57:61:f9:04:
                    d4:0d:08:13:4b:d5:ea:d0:1f:c1:8c:8b:84:00:09:
                    37:35:2d:68:96:3b:bd:03:20:e0:7c:91:22:d0:23:
                    79:86:85:0e:26:c4:36:45:f9:60:1a:90:d6:44:2d:
                    f5:01:8c:6e:f4:ba:c8:00:9c:51:00:41:ed:ae:61:
                    b7:43:c7:5d:b0:18:73:20:fe:94:a0:90:48:7c:99:
                    15:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4E:34:EE:6F:94:60:CA:34:B3:A0:0F:80:39:51:47:CA:70:E1:8A
            X509v3 Authority Key Identifier:
                keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:63:fd:09:ee:0f:d1:fc:fc:4e:63:a3:f1:de:76:f7:c3:1e:
         ba:19:12:fa:bc:71:dd:7f:8d:c9:21:1f:32:32:9b:5d:59:6e:
         b4:50:2d:55:91:0a:0c:c1:8e:1f:5c:97:0e:4c:ef:f2:60:ed:
         67:23:86:00:6d:24:80:aa:ea:b9:fa:b1:35:ea:0c:69:cf:af:
         ba:95:8b:f6:8c:4f:9d:40:49:f5:c8:02:c5:cf:00:2b:8f:0c:
         8c:c2:f9:88:0c:40:d1:23:36:b7:d7:71:19:2a:1c:67:bc:92:
         71:ec:ad:55:e8:63:c3:db:c0:d0:81:2f:61:e3:ad:25:a5:48:
         4e:b2:32:7e:c7:53:d5:af:48:42:55:99:6f:dc:a1:a4:59:e0:
         b4:bb:1e:a4:9e:f4:bf:81:77:a6:42:40:2b:1f:e9:62:90:15:
         f7:d0:58:da:eb:8e:eb:a6:0e:01:c0:92:5c:06:83:2e:82:91:
         37:87:4b:40:1a:e5:a9:35:f7:1f:b3:ef:de:bf:30:6b:82:e3:
         6f:06:06:99:36:77:d8:87:28:6b:9f:af:b5:38:45:81:11:75:
         e8:45:a3:20:e4:77:68:87:65:09:e6:19:c5:c8:f3:90:e5:24:
         31:9a:aa:73:a4:bf:35:f8:53:17:fc:a9:0b:87:18:b0:19:ed:
         a4:4b:c9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:51:51 2024 by rpki-client on console-ams.rpki-client.org