Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
File:                     mb99XHDGMlTQzeNMK6SdlAf8JPM.mft (raw, json)
Hash identifier:          k0GymP8tMfdkMsCSeWw8kVjI+xwDAm/XRyx3X6ZvzT8=
Subject key identifier:   A7:68:3D:2C:70:FF:C3:33:B9:48:96:54:63:58:A1:5C:6C:71:03:77
Authority key identifier: 99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3
Certificate issuer:       /CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
Certificate serial:       019037066B77C79D0900456C8FAAD6AD222C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
Manifest number:          032E
Signing time:             Thu 20 Jun 2024 19:01:25 +0000
Manifest this update:     Thu 20 Jun 2024 19:01:25 +0000
Manifest next update:     Fri 21 Jun 2024 19:01:25 +0000
Files and hashes:         1: mb99XHDGMlTQzeNMK6SdlAf8JPM.crl (hash: gyL7ifdq/WWKqx8DnbBPdvTENvl9ns6GOpPNZ17RKZc=)
                          2: rCvK7iTCGaYj05vhpnPaohE3rZE.roa (hash: lR2zpTZEzZc10xVaBD4cx0Q46s239G8OV5v2976Zpqs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:06:6b:77:c7:9d:09:00:45:6c:8f:aa:d6:ad:22:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99bf7d5c70c63254d0cde34c2ba49d9407fc24f3
        Validity
            Not Before: Jun 20 19:01:25 2024 GMT
            Not After : Jun 21 19:01:25 2024 GMT
        Subject: CN=a7683d2c70ffc333b94896546358a15c6c710377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:46:3c:70:e6:15:a6:17:92:02:a8:9d:4a:
                    c7:81:cd:ea:df:ce:7d:65:74:ac:5a:ad:d3:d4:d5:
                    f9:f9:0e:1f:be:3d:7e:f1:eb:23:30:66:e1:24:41:
                    d0:b4:59:0b:45:b9:1c:1f:41:a7:e6:06:b9:50:91:
                    5f:85:01:38:c2:36:fd:62:04:16:15:5d:18:68:a5:
                    39:b8:35:46:66:a4:71:fc:ad:93:33:f1:ca:41:09:
                    fc:0d:5f:99:d7:19:88:0a:04:2c:a2:a6:21:30:c6:
                    8f:0e:e5:75:a9:81:18:2e:91:60:ad:3e:cd:43:92:
                    1a:a6:cf:c3:a5:08:fb:d7:6b:aa:b5:15:d7:7b:dd:
                    a8:a8:32:d1:b2:31:da:a2:06:88:90:40:f7:bf:65:
                    48:0a:7e:2d:0e:fc:32:fc:3c:64:00:63:7e:4f:1c:
                    58:df:43:7d:09:0d:b1:8c:cb:88:97:d2:fd:da:ab:
                    ac:dd:1c:aa:73:28:ff:e8:e4:ee:46:fb:d6:6a:29:
                    92:7d:cc:3e:d6:2f:3e:9a:7f:ae:c0:ac:23:eb:ff:
                    17:74:eb:d6:01:49:cf:56:cb:ac:db:22:48:11:c0:
                    e6:c8:2d:30:8d:ef:98:10:82:d0:f1:be:e4:aa:26:
                    d3:97:19:8f:54:c3:6c:42:13:7b:89:34:10:7a:98:
                    12:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:68:3D:2C:70:FF:C3:33:B9:48:96:54:63:58:A1:5C:6C:71:03:77
            X509v3 Authority Key Identifier:
                keyid:99:BF:7D:5C:70:C6:32:54:D0:CD:E3:4C:2B:A4:9D:94:07:FC:24:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mb99XHDGMlTQzeNMK6SdlAf8JPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e48256-c6fc-4631-8f5f-58bcda356e62/1/mb99XHDGMlTQzeNMK6SdlAf8JPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c1:c4:2e:16:12:01:95:e9:50:a5:42:f3:d9:cf:ed:b2:ab:
         8b:24:e9:74:70:31:9f:28:22:0f:ff:7a:5b:dd:c6:f8:f4:7e:
         66:cc:11:71:e4:ff:45:09:21:b0:aa:fd:aa:8c:ef:28:a3:c4:
         80:28:58:21:0c:a4:d7:dd:a1:0f:05:7b:46:66:dd:67:f7:39:
         a1:45:36:35:16:c9:20:c3:c2:5c:65:61:08:0c:44:34:74:bf:
         3f:c9:0e:78:3a:fd:ef:ee:e3:ff:c3:12:2e:b2:4e:95:5b:2e:
         aa:f8:ef:18:3b:a0:d9:ac:37:c6:d8:fe:f7:ab:e5:88:b0:19:
         41:b6:e8:9c:15:ea:e0:6e:eb:2a:08:d7:59:5c:25:a8:6b:7a:
         13:f9:95:29:aa:a8:26:b8:0e:9c:b4:04:26:20:99:b6:1a:11:
         e5:65:46:a8:5b:d3:9a:d9:02:78:3e:97:1a:e5:46:e0:07:a5:
         c7:e7:12:f1:9d:56:08:f5:76:96:45:21:88:a9:13:9a:16:6b:
         a7:6d:18:9f:18:94:a6:9d:08:71:c8:b8:46:e9:0c:02:90:7a:
         f7:fc:fe:d8:4c:f8:62:0c:a9:06:6a:7f:c9:b9:1d:12:58:4a:
         5a:bf:e2:dd:0b:f2:b1:cc:0f:51:47:be:e3:c8:d8:1e:79:04:
         8a:ea:93:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:24:36 2024 by rpki-client on console-fra.rpki-client.org