Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File:                     w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier:          gju1t8qADZ555BlykiCh4Se1ygkdfEJyvJvqYLywcRs=
Subject key identifier:   99:58:F3:72:39:16:FE:09:1C:9A:DE:E6:30:C7:9F:14:4D:66:BA:04
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer:       /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial:       01901DEB59E6105CFA05B0F9B952A10C2030
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number:          0673
Signing time:             Sat 15 Jun 2024 22:01:21 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:21 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:21 +0000
Files and hashes:         1: DWfzrcKb9Tln-0ewrEqDIZxvJ_g.roa (hash: Ca8F5EwlE2mIEcZwtjQbqv34COWrAYtXGzvWct7I5k8=)
                          2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: hTxbKZHh5HQ5bLGPPNeNqYiAomxUgm+gCZ1XPpT+rg0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:59:e6:10:5c:fa:05:b0:f9:b9:52:a1:0c:20:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
        Validity
            Not Before: Jun 15 22:01:21 2024 GMT
            Not After : Jun 16 22:01:21 2024 GMT
        Subject: CN=9958f3723916fe091c9adee630c79f144d66ba04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:c3:5f:5e:7a:64:54:6d:ba:69:38:ed:06:
                    8a:b3:af:09:95:67:3f:d6:a2:b4:05:ec:f8:08:a8:
                    bb:9d:88:1f:52:57:d2:07:d5:71:18:d1:3d:5e:34:
                    4c:52:ce:ca:c3:f8:7d:c8:e7:cf:ef:af:31:dd:f4:
                    b7:31:ce:de:a6:f9:66:45:76:3f:ff:d6:f0:4c:87:
                    5a:5b:97:e5:07:5b:de:77:aa:ca:db:d2:cd:c3:ae:
                    64:31:f2:8e:f9:1d:67:04:bd:c2:55:87:9d:09:05:
                    65:85:47:5e:81:76:2f:de:d2:2a:d7:c5:7b:3c:04:
                    d1:55:7c:88:d8:ba:86:ed:85:ca:07:16:7c:59:95:
                    21:d1:9a:2b:25:2e:c4:d4:a8:d1:24:16:62:22:18:
                    49:89:da:49:2e:56:8b:c7:5d:23:fa:78:a8:b5:79:
                    b5:e1:f9:80:91:16:da:9d:f9:4b:6c:f6:bc:5f:f9:
                    3b:c9:74:04:42:3a:ae:68:74:d6:c5:01:a3:3f:62:
                    3c:9d:dc:ce:c5:bf:70:6d:bc:65:dd:4c:01:db:75:
                    88:f2:82:d7:1d:3a:37:10:dd:29:d4:59:21:5b:00:
                    29:f6:e3:fc:7b:53:da:46:a1:17:0a:52:72:e0:52:
                    28:9d:90:e4:12:ef:32:2f:dd:ce:99:c7:93:8c:ec:
                    9e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:58:F3:72:39:16:FE:09:1C:9A:DE:E6:30:C7:9F:14:4D:66:BA:04
            X509v3 Authority Key Identifier:
                keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c1:4d:a5:a2:0b:8c:53:e3:84:18:24:14:21:1c:51:8f:d9:
         0a:1e:2e:84:f5:54:6f:2a:dc:30:e8:91:09:f8:09:53:a6:31:
         27:eb:a4:a3:13:83:e8:6f:9d:e1:8d:f3:53:f6:4b:97:ba:90:
         a7:89:b0:3a:8c:4e:f8:af:5a:40:5d:cd:dc:1e:a0:f9:23:e4:
         9d:d7:9c:22:a9:42:84:45:69:9f:11:ac:78:2f:4c:4f:cb:21:
         d3:27:b6:1e:11:1a:af:9e:51:69:e7:ae:08:5b:9d:ee:55:f9:
         f6:6c:50:df:86:a9:a5:e1:46:81:2d:d6:83:8c:cd:2a:2f:a8:
         09:39:73:9d:57:3f:fe:15:05:2f:ed:97:05:dd:b3:57:09:f0:
         42:60:f5:73:c5:32:21:f4:c6:ec:11:c9:65:4e:9f:92:d7:5c:
         15:32:cb:7d:93:90:6a:d6:bf:a1:74:06:39:75:00:1b:d1:66:
         ab:42:54:0e:3d:dd:8e:15:8e:08:c0:7c:f8:f2:bd:81:de:41:
         5a:d8:4a:09:8d:4c:6e:d7:a0:75:3a:0a:12:45:91:8f:61:e2:
         e9:c5:bf:75:a9:c8:ab:45:99:24:14:9b:8a:a4:86:99:bd:1d:
         b1:43:5d:50:95:1a:f9:c4:2a:a3:37:d7:03:8d:bb:50:6d:d8:
         11:33:7d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:36:51 2024 by rpki-client on console-ams.rpki-client.org