Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
File:                     ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft (raw, json)
Hash identifier:          hPYgFc+lri46wI80hA9OdKd3Gpo3PiB2t8NMZQhQnpI=
Subject key identifier:   AA:78:73:9E:5A:0D:65:70:66:05:E6:7B:78:93:C9:E7:45:61:DA:DC
Authority key identifier: 72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34
Certificate issuer:       /CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
Certificate serial:       0190452F70F9603456C62DC5DA79E3809179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
Manifest number:          0E32
Signing time:             Sun 23 Jun 2024 13:00:55 +0000
Manifest this update:     Sun 23 Jun 2024 13:00:55 +0000
Manifest next update:     Mon 24 Jun 2024 13:00:55 +0000
Files and hashes:         1: ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl (hash: 88tRVI2UxCLKxOgIBQj5I/Z7QCNgxdLrOliki1V8t98=)
                          2: jrmRU1YG25R7U2MKU--Ef3YcvNc.roa (hash: 9YzGjfWcmoYt3GhboYagBlijoUQejnPFaM5/kMnLAak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:70:f9:60:34:56:c6:2d:c5:da:79:e3:80:91:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72493d60b50427dd4316ed9505ad099eb5ac2e34
        Validity
            Not Before: Jun 23 13:00:55 2024 GMT
            Not After : Jun 24 13:00:55 2024 GMT
        Subject: CN=aa78739e5a0d65706605e67b7893c9e74561dadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b8:65:85:46:97:5e:c6:a2:72:10:39:87:ed:
                    1d:47:7f:30:0f:64:c6:89:e1:a7:5a:a6:16:3f:9f:
                    c4:b7:5f:c9:5c:0f:44:e1:48:5c:6a:bb:64:f0:3a:
                    8b:bc:2a:67:63:f3:85:37:b5:68:ca:a3:44:aa:c3:
                    e6:19:91:79:c4:af:3f:7b:dd:42:1f:df:09:28:9a:
                    00:58:50:ea:ff:70:96:f9:bd:bf:62:c4:27:1a:07:
                    b0:35:e7:83:38:41:96:9e:4b:f1:c4:db:21:30:bb:
                    4b:5d:9d:a9:40:3e:3e:e8:9c:56:5e:45:47:e6:97:
                    82:5f:94:69:ac:8c:f8:82:e7:e5:5e:dd:f0:9b:6e:
                    60:31:c8:39:a0:82:55:bc:82:3b:d6:f8:58:8f:29:
                    ec:65:10:22:5d:47:98:c1:e6:5a:3d:d4:48:e6:5b:
                    2a:54:52:1d:c1:dd:70:3f:37:e1:20:9a:2d:2a:e8:
                    76:88:ae:f7:01:de:17:8f:8e:8d:28:13:83:ce:ae:
                    a2:86:3d:fb:5e:3e:37:03:0f:39:11:f6:1a:f8:7d:
                    33:98:c9:a9:35:03:95:6f:f2:e0:bf:ca:84:53:4c:
                    d3:10:e5:21:c1:9c:ac:12:a2:36:7f:c8:72:71:3c:
                    10:e8:03:16:28:d3:4d:5d:e3:6c:23:6f:3a:6a:86:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:78:73:9E:5A:0D:65:70:66:05:E6:7B:78:93:C9:E7:45:61:DA:DC
            X509v3 Authority Key Identifier:
                keyid:72:49:3D:60:B5:04:27:DD:43:16:ED:95:05:AD:09:9E:B5:AC:2E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/71a349-baf4-47b3-a9ed-c6730c8e46aa/1/ckk9YLUEJ91DFu2VBa0JnrWsLjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:5f:8d:90:91:d6:53:6e:19:ff:b4:78:f3:ec:33:3f:80:
         0e:05:66:62:42:f6:60:35:e0:97:9d:cb:d6:86:55:0f:77:07:
         42:ab:3c:2c:34:95:b5:08:de:f5:9b:1f:e6:b6:ed:a9:b9:c6:
         d1:c6:97:38:ba:46:b9:64:3d:8c:01:f0:c9:a2:ae:62:12:1e:
         87:02:60:5c:9e:6f:68:9e:67:81:f5:2b:63:4e:40:a7:41:c1:
         c6:a1:64:f6:8d:ed:13:2b:82:c8:b8:c6:26:42:f3:64:52:00:
         42:e0:c5:28:b1:af:a4:44:9d:fa:eb:9e:8d:b1:17:5a:37:23:
         c0:a2:e6:1d:24:15:29:96:34:bc:e2:47:b4:26:fe:d0:a5:f6:
         3c:32:47:b5:03:d7:fb:c9:d8:47:1d:7e:80:b3:fb:0b:d1:ad:
         3b:01:33:60:25:6c:a9:2c:5c:37:9b:2f:b9:75:f9:90:95:c4:
         ea:23:ce:69:d0:07:df:75:bc:8a:4f:0e:ab:5c:97:ed:49:d6:
         9a:5b:87:27:83:d1:db:83:ac:f5:b8:a9:71:17:7d:24:7a:3f:
         09:e4:9f:a1:46:7e:fd:f7:f0:69:84:51:f3:ed:d3:b5:6d:91:
         ec:1d:41:35:26:18:d3:46:df:88:88:01:cb:1e:5d:8b:a3:66:
         7d:f8:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:15:51 2024 by rpki-client on console-fra.rpki-client.org