Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
File:                     sMmblRxqb2rcyGjYhalArfAFGhk.mft (raw, json)
Hash identifier:          trXjbodEZGK19j2IBq2kEE8b/ZQFd1QRZ5CAZj7iBV4=
Subject key identifier:   F7:4B:AF:78:E5:19:54:9C:57:A3:64:D0:28:BC:68:28:37:2C:F8:AE
Authority key identifier: B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19
Certificate issuer:       /CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
Certificate serial:       01901EC673B5CA1BFBDDFD3D2F1B54E3D307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
Manifest number:          0857
Signing time:             Sun 16 Jun 2024 02:00:40 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:40 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:40 +0000
Files and hashes:         1: 1wSat9pGHQy7ydyiNfXByzfu7as.roa (hash: Wo3KEaJaBpNMuqocNOu+DJF/Ef2apezcGDTX2WI3oMc=)
                          2: sMmblRxqb2rcyGjYhalArfAFGhk.crl (hash: /DBqu1wOWAr3eCrguIPCKCzfYRisdBMjw+Zt5U6peWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:73:b5:ca:1b:fb:dd:fd:3d:2f:1b:54:e3:d3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c99b951c6a6f6adcc868d885a940adf0051a19
        Validity
            Not Before: Jun 16 02:00:40 2024 GMT
            Not After : Jun 17 02:00:40 2024 GMT
        Subject: CN=f74baf78e519549c57a364d028bc6828372cf8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:50:45:df:d7:6c:c7:f3:2a:a5:50:ad:5e:
                    21:21:5e:50:f3:fb:11:72:55:de:64:1a:25:6a:49:
                    10:6d:cc:a5:ae:98:21:2d:ae:35:a7:dc:fb:23:a2:
                    da:b4:41:b3:67:ba:c9:b9:3b:9f:4c:69:b3:60:f1:
                    d7:a6:bb:a1:b3:8f:5b:df:d3:57:10:82:7c:fe:b8:
                    6f:71:26:7c:27:3e:6f:ce:e4:73:ff:8c:70:91:d5:
                    ee:1e:83:19:5c:01:ad:60:4d:2f:d9:87:32:cd:57:
                    4d:7b:94:56:9c:ff:c6:85:20:c5:bf:c3:32:7a:55:
                    46:5d:7e:22:b9:fc:5d:d4:dc:ed:18:ad:57:04:bf:
                    49:df:eb:a0:6b:41:e7:ff:2a:c2:93:37:77:6a:c0:
                    9b:ca:c1:78:3d:63:04:ab:3c:f2:57:f0:e6:96:d4:
                    8f:0d:d6:62:8e:2d:36:1e:4e:3c:40:f8:df:69:a1:
                    c0:37:a3:67:f8:3e:6b:21:e3:12:ea:11:2f:93:14:
                    4e:89:b9:b4:29:26:ef:ee:08:6a:50:4c:12:fa:fb:
                    fa:4c:53:0f:38:9a:f6:fd:8f:92:01:53:6a:63:0f:
                    60:da:66:31:b5:05:57:01:b5:8d:20:67:7e:14:20:
                    06:92:81:cb:53:67:f5:32:bd:90:04:3d:7c:93:97:
                    ee:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4B:AF:78:E5:19:54:9C:57:A3:64:D0:28:BC:68:28:37:2C:F8:AE
            X509v3 Authority Key Identifier:
                keyid:B0:C9:9B:95:1C:6A:6F:6A:DC:C8:68:D8:85:A9:40:AD:F0:05:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMmblRxqb2rcyGjYhalArfAFGhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0a7bbf-bf20-4114-972c-3e6956ed2c6a/1/sMmblRxqb2rcyGjYhalArfAFGhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:3d:9e:ed:c0:94:2a:62:9e:d7:bd:e5:3d:c5:b0:62:87:f1:
         fa:e0:95:d9:f9:81:df:33:77:e7:f1:46:4d:bf:cd:39:18:9a:
         5c:44:61:c7:39:6c:ee:d4:9a:d0:20:0d:79:7f:07:e4:de:9a:
         19:6f:0d:8e:15:a7:7e:81:4f:a2:6c:9b:8a:28:06:45:c7:7f:
         81:de:86:00:b8:f7:93:54:44:16:92:4e:91:e3:32:69:f0:5f:
         6a:4d:8d:1f:7e:f6:37:34:4a:a7:d4:92:fe:bf:d2:e9:eb:6f:
         4e:21:12:01:84:1d:0d:da:94:7a:e7:c6:de:75:77:e5:e9:1a:
         e8:02:cb:22:5d:9b:67:ca:6a:4c:01:97:61:91:92:c1:0d:aa:
         24:8f:09:5f:b2:e9:08:16:ad:42:b7:bd:15:72:90:9a:3b:e4:
         ac:57:30:cc:48:6c:90:68:9b:68:4e:47:23:f3:06:80:4f:8e:
         77:e1:a3:87:1b:57:a3:65:f7:0f:31:fc:84:06:3f:f1:52:a3:
         e0:58:c6:05:ff:0a:a1:2c:64:36:3f:d8:5f:db:3a:5f:49:5e:
         81:f2:23:18:f9:34:97:62:25:1b:54:aa:c3:c2:ee:10:66:d9:
         b6:3f:59:86:e9:1c:11:3d:fe:03:d4:ec:3c:7e:84:4b:14:66:
         bd:9c:71:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:06:11 2024 by rpki-client on console-fra.rpki-client.org