Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File:                     91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier:          b7cHcq/DJ3jh60FY//n1Xpo9l/OisAXssHhai2vkg2s=
Subject key identifier:   AB:99:6F:6A:9D:91:60:B8:BB:28:15:B8:75:B5:1F:DB:D5:C2:80:06
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer:       /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial:       01901E21CB91EB04866DA3936F1A63E54C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number:          04D6
Signing time:             Sat 15 Jun 2024 23:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 23:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 23:00:49 +0000
Files and hashes:         1: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: W1WYt6FKZIdX7GB+fskoNnPzHN2Qv9bFYmlpn5M3WCk=)
                          2: jOqiqqxaNfB8TxN-na4UJIl1VPo.roa (hash: wf32aHX6iqdpxypUVEB6XvXpwQ5/nT1NKquu+Z2Atfc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:21:cb:91:eb:04:86:6d:a3:93:6f:1a:63:e5:4c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
        Validity
            Not Before: Jun 15 23:00:49 2024 GMT
            Not After : Jun 16 23:00:49 2024 GMT
        Subject: CN=ab996f6a9d9160b8bb2815b875b51fdbd5c28006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:af:e0:b4:ba:7d:66:0c:11:6e:0d:82:4d:
                    c2:80:15:ad:ea:8a:8f:8d:48:87:17:9a:da:04:9e:
                    2c:c0:b3:d5:28:45:97:29:b9:7c:ab:26:3e:50:ff:
                    06:b4:a4:fc:6e:f4:99:bb:d0:49:2f:63:3f:25:14:
                    b8:56:e2:11:e5:47:9b:15:d0:15:79:3d:07:3f:49:
                    e1:71:a5:85:cc:9d:ad:ec:4f:08:16:d2:cc:31:6a:
                    97:93:35:65:ad:c0:a9:ed:1e:9d:aa:71:c5:21:04:
                    4f:3e:dd:3d:9b:51:69:4f:6c:ad:27:93:64:a7:e9:
                    ec:4e:e7:54:37:74:f0:e5:2e:5e:a5:ac:9e:41:1d:
                    9d:e1:24:fc:3e:45:6b:00:59:d8:bf:d6:c9:44:c3:
                    47:bf:f9:f0:e7:d7:8a:05:e0:76:3a:1e:a5:78:56:
                    60:0a:fb:ad:bc:28:74:ae:fd:82:5f:11:78:e5:f2:
                    ea:f5:3c:ed:1d:02:73:48:40:ca:cb:70:c2:5c:90:
                    35:ba:b2:e7:7b:0a:7d:6d:d8:41:6f:14:d1:6d:3d:
                    22:a2:57:2c:28:00:48:0a:06:58:e0:21:8a:83:08:
                    dd:ba:c8:3c:cd:9d:7c:d6:b8:9b:8e:93:3d:b0:11:
                    ce:d4:ac:b8:fa:0a:44:37:37:9b:32:37:5b:6c:8b:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:99:6F:6A:9D:91:60:B8:BB:28:15:B8:75:B5:1F:DB:D5:C2:80:06
            X509v3 Authority Key Identifier:
                keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d8:bb:41:eb:d4:43:dd:5c:76:f1:89:f2:a5:24:f0:65:64:
         d9:c3:58:b3:47:f6:10:ce:20:18:45:ad:26:ba:27:10:f4:f5:
         7e:8a:38:dd:28:0c:aa:24:98:d2:44:f2:c0:7f:97:d0:10:01:
         c7:74:cb:4a:cb:25:5d:14:b2:cb:39:c9:30:fe:7d:3e:74:33:
         d1:3c:38:d1:b1:13:75:9e:b6:a5:77:c5:06:bd:de:3a:3a:3b:
         0e:95:db:89:35:8d:7d:a4:87:36:0b:c2:5e:30:1e:b0:6f:bb:
         c4:20:5d:cd:a4:dd:3d:df:9b:61:ae:22:a3:dd:52:4f:07:fd:
         f3:b3:32:fb:b5:d9:25:f5:b7:1d:e0:ae:53:94:24:47:01:b1:
         0f:09:90:9d:1f:07:01:43:60:b2:1e:e4:c8:8e:ee:fd:a9:6d:
         e6:e9:63:49:ba:98:b5:58:76:18:6f:7f:37:af:5d:b0:01:9a:
         dc:11:e6:ac:c4:34:4e:04:84:32:72:c1:98:ac:5f:1b:1c:13:
         77:95:d2:6b:a9:5b:05:4c:fa:a3:94:e8:26:30:7b:20:8d:85:
         ca:53:72:53:5d:5a:aa:24:89:1b:3b:3a:7a:f7:75:69:c1:7c:
         93:3a:6f:70:63:6f:b8:e7:de:32:3a:3d:ae:b1:c1:6f:9e:93:
         ae:0f:b8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:40:39 2024 by rpki-client on console-fra.rpki-client.org