Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File:                     mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier:          GkLidJVut1CH6PPc2/CVkkly9igkOnZdR1HnVCr06K0=
Subject key identifier:   FF:E1:32:09:B0:3B:AB:A7:5B:53:15:8C:97:98:CC:0B:4D:93:A5:B4
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer:       /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial:       01904566852595E900B32148CFAAA90D7D8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number:          A0
Signing time:             Sun 23 Jun 2024 14:01:04 +0000
Manifest this update:     Sun 23 Jun 2024 14:01:04 +0000
Manifest next update:     Mon 24 Jun 2024 14:01:04 +0000
Files and hashes:         1: H9L2j3V1OCm0GEJQ8rEBWFDem98.roa (hash: T+LNAxZwSfX+uHTFBukVfv0EllttJbmPyIAUMgZGHhU=)
                          2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: xeyj76LcdRuvomqXOE1HXATqDFXyGAbnWX75BUuXgvA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:66:85:25:95:e9:00:b3:21:48:cf:aa:a9:0d:7d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
        Validity
            Not Before: Jun 23 14:01:04 2024 GMT
            Not After : Jun 24 14:01:04 2024 GMT
        Subject: CN=ffe13209b03baba75b53158c9798cc0b4d93a5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ea:bc:c7:d4:07:3f:fb:ac:ee:f4:45:f5:e4:
                    62:bb:93:cd:25:fa:30:24:79:85:82:b7:20:c2:55:
                    7e:cf:df:99:f1:79:4d:38:b9:be:e6:6e:e6:5b:dc:
                    d1:3f:97:f5:4d:06:49:45:4b:c1:76:f7:d0:9e:4a:
                    bd:d9:47:f2:d3:9f:e7:bd:87:70:72:5d:fe:1a:43:
                    7a:f5:88:c7:9d:43:95:bc:71:d2:b8:72:5c:e6:51:
                    30:bf:f0:5c:1e:89:67:c4:ac:f7:0d:4e:51:e4:07:
                    1c:d0:e9:5e:10:3f:24:62:7a:ba:0f:70:f8:7b:67:
                    ab:f5:a0:5e:60:e2:0a:71:f7:2b:e0:1d:ff:9b:3b:
                    31:c4:e4:55:53:9d:ef:2a:32:2d:0c:17:65:49:8d:
                    7a:1a:e3:5c:aa:d8:ec:bb:f1:12:43:1b:d6:4d:8d:
                    6f:38:16:20:3e:59:7d:51:1b:9d:3b:7e:ee:67:0d:
                    c3:bb:65:ff:15:1c:8e:8e:b7:f4:ba:e0:85:54:7f:
                    8c:bb:02:8c:1d:47:cc:a0:1c:64:91:7e:2d:be:ac:
                    6a:ab:e7:f9:97:0a:80:2e:ae:97:c7:3d:40:56:7f:
                    4a:65:70:2e:63:38:fc:c1:de:be:47:9d:4e:98:df:
                    d7:fb:21:5a:49:e8:96:a2:d8:dd:14:fa:36:e2:a2:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E1:32:09:B0:3B:AB:A7:5B:53:15:8C:97:98:CC:0B:4D:93:A5:B4
            X509v3 Authority Key Identifier:
                keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:80:30:86:4c:39:04:af:bf:9e:eb:c8:96:ba:50:d2:7a:30:
         d9:ee:e5:f4:14:7b:d2:a0:cb:0c:c4:77:2b:1a:48:63:76:51:
         8b:eb:a0:e5:b7:33:1b:07:1d:67:5d:00:95:21:d7:16:23:49:
         a5:e2:4e:83:d5:d8:cb:de:8f:5c:5b:c0:d1:11:4b:8d:5a:16:
         9c:c1:2a:e0:ad:a7:04:df:60:18:b1:cb:06:40:44:3d:38:92:
         65:be:80:7a:cf:3d:1c:87:8c:f1:9c:2e:8b:1d:b7:a9:dd:14:
         c8:3f:79:5e:63:0b:08:3f:d8:2b:1c:c1:aa:de:44:75:f9:bd:
         bd:0e:98:de:5e:1b:90:ef:14:e5:a8:36:19:ba:3b:da:3e:38:
         12:df:35:be:3e:ff:eb:4f:2e:d7:66:9a:18:aa:1a:8e:31:cc:
         09:7f:ac:a7:a3:0c:22:42:be:70:c5:11:64:cb:36:bf:b0:ed:
         d0:8d:56:a3:00:4c:b5:c6:8e:dc:10:4c:01:42:4a:80:02:30:
         6f:28:94:37:51:31:62:1c:4d:c9:2f:26:bf:be:b6:9b:fb:15:
         88:ca:3a:04:27:b3:7f:31:24:47:ac:f3:0d:2f:73:1c:7a:cb:
         12:35:44:6f:27:1a:3c:88:6d:f6:6f:8c:2a:66:87:3c:5a:7b:
         2c:a2:f3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:16:57 2024 by rpki-client on console-fra.rpki-client.org