Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File:                     mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier:          vY0inXu/cuVRPOlQwZ9uwGkdyou0bXnHWXAIzqsoCHo=
Subject key identifier:   DE:4C:0E:91:C6:08:58:2E:41:EF:65:12:30:A6:12:68:0C:CD:17:62
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer:       /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial:       01901BFE6E572FBC197FF506A9BFEB2E220F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number:          0320
Signing time:             Sat 15 Jun 2024 13:02:57 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:57 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:57 +0000
Files and hashes:         1: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: 94bjmlEkoXC6/wpdajc7qVyaK6riKcAQNz3d0FH1vqk=)
                          2: rCvK7iTCGaYj05vhpnPaohE3rZE.roa (hash: lR2zpTZEzZc10xVaBD4cx0Q46s239G8OV5v2976Zpqs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:6e:57:2f:bc:19:7f:f5:06:a9:bf:eb:2e:22:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
        Validity
            Not Before: Jun 15 13:02:57 2024 GMT
            Not After : Jun 16 13:02:57 2024 GMT
        Subject: CN=de4c0e91c608582e41ef651230a612680ccd1762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1f:eb:df:32:ce:cb:db:45:65:dd:df:bb:b2:
                    92:cc:56:13:0b:87:c0:e0:9d:ca:5c:b5:56:a8:e0:
                    52:5a:46:a2:17:68:d0:a2:52:d1:73:07:5c:7e:c0:
                    db:a7:6f:cc:9f:b4:6f:98:57:00:1f:d6:82:87:2e:
                    e3:60:1d:b9:6e:f1:3d:2f:50:62:13:32:58:90:73:
                    c3:d8:7e:c7:53:80:fd:70:b4:e9:a0:40:45:26:fe:
                    e4:4d:87:71:62:69:7d:9a:af:b9:9f:89:74:1f:90:
                    f2:06:b8:b4:69:e2:32:df:fd:e8:e5:4d:12:a2:f6:
                    4f:d8:9b:3d:3b:89:83:5c:98:a8:55:fa:0a:d8:9f:
                    4d:b0:eb:60:c3:b6:77:c5:35:bc:9e:fa:96:24:4c:
                    9f:2c:0c:0b:72:e5:b6:ac:8c:fc:d9:57:6b:22:6b:
                    c4:2c:ae:a4:73:a2:fd:f7:51:b3:4c:8e:03:f2:bf:
                    81:c3:26:73:da:46:f3:c8:8b:e2:19:59:46:73:dc:
                    d4:7b:73:4c:3e:a0:61:ad:54:84:d3:f6:e8:e8:4a:
                    97:aa:0f:e3:50:a3:e7:aa:7c:f0:d0:99:56:97:92:
                    93:c7:b2:33:40:0c:0d:2b:56:35:02:00:1d:25:50:
                    a9:3c:d2:be:61:0d:2a:c8:d4:60:57:f4:2a:47:09:
                    bf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4C:0E:91:C6:08:58:2E:41:EF:65:12:30:A6:12:68:0C:CD:17:62
            X509v3 Authority Key Identifier:
                keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:0a:f7:55:1c:70:ad:d3:7b:c9:93:b4:f0:d8:2a:4c:b7:4b:
         93:77:6c:14:eb:44:09:0f:27:7a:3e:78:4b:76:3a:64:57:61:
         ee:3c:d5:97:28:51:69:8f:3f:79:31:f2:d2:42:11:41:6b:bd:
         20:bc:c0:48:b4:18:c7:24:fd:3c:2f:78:f3:28:1c:ea:aa:bd:
         44:59:d8:b1:99:b2:ac:6a:5c:32:d1:53:b3:1e:cf:a9:96:64:
         28:43:3a:37:92:07:9b:15:87:3c:9e:e0:02:a9:4b:a5:88:bb:
         a8:eb:ea:f7:d5:06:23:78:0a:b0:be:1a:e4:3f:1e:c6:51:94:
         13:a5:77:c3:64:94:d4:0c:61:61:ca:d5:22:2e:5e:0b:cd:7a:
         1e:5e:e5:94:25:c6:24:92:2a:f0:7d:17:9f:70:29:4b:63:a2:
         39:3e:b5:02:1d:ca:04:74:4c:ee:4c:d5:c9:b2:44:ad:65:17:
         2c:f7:d0:be:ee:50:92:0a:8f:85:b5:ae:cf:32:99:6c:97:78:
         1c:d9:56:08:6c:ed:62:62:43:d9:59:f6:ce:40:2c:bb:28:8e:
         0e:52:95:c0:38:48:43:71:79:51:14:9f:a6:3b:76:23:ce:0d:
         75:94:4f:5d:a3:2c:4c:33:b9:33:24:fa:57:70:0c:72:77:eb:
         15:4e:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:30:01 2024 by rpki-client on console-fra.rpki-client.org