Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File:                     u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier:          ONrLXP+/Lr1OGSaps8XAF8oj1keBAbovatL2Zs1mqoE=
Subject key identifier:   61:ED:0D:34:BB:03:53:1E:96:ED:FE:04:60:38:3F:C8:34:FE:58:B9
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer:       /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial:       01901EC6615CB97E4C3ECF3E1546B6661EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number:          07E1
Signing time:             Sun 16 Jun 2024 02:00:35 +0000
Manifest this update:     Sun 16 Jun 2024 02:00:35 +0000
Manifest next update:     Mon 17 Jun 2024 02:00:35 +0000
Files and hashes:         1: B0V48ZEWlyYIig5s51L4Yuy2APc.roa (hash: x5dqisgVW9kx4TbM/w9rgJONTgVwPDDqdeu232WmKzU=)
                          2: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: SxHdFudcgXbp4MG1dZ5JGuf9bWkQpD8Q5WSOqZR6WA8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c6:61:5c:b9:7e:4c:3e:cf:3e:15:46:b6:66:1e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
        Validity
            Not Before: Jun 16 02:00:35 2024 GMT
            Not After : Jun 17 02:00:35 2024 GMT
        Subject: CN=61ed0d34bb03531e96edfe0460383fc834fe58b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:7a:e2:42:18:aa:8c:1c:35:43:07:4e:60:
                    d3:4c:27:48:20:18:32:6e:36:18:e0:f9:a7:ab:24:
                    c9:bb:cd:3c:87:ce:1c:04:8b:8b:63:df:4d:c3:6c:
                    53:66:32:1c:b9:c2:41:52:c7:cc:d0:ee:d3:00:8f:
                    e6:78:7a:36:7d:55:c4:33:cc:e1:e6:28:00:7e:a4:
                    fc:e1:e9:19:55:b6:f3:e2:79:06:d1:0c:e0:95:6d:
                    78:0e:1f:56:27:55:91:64:bc:39:fb:d5:71:2f:78:
                    dd:7f:43:bb:95:7c:4b:25:d6:50:d3:74:ae:a9:eb:
                    0f:4e:ff:2e:89:b8:5a:69:e5:aa:ae:42:1f:3d:08:
                    31:10:41:fa:6a:05:d0:ec:00:cf:d4:cf:ca:e7:2f:
                    ac:b3:fe:9b:6f:0b:84:0b:6c:69:1a:b5:df:39:ba:
                    00:a6:cd:b6:98:ca:2d:68:36:d9:1f:4f:de:1f:6b:
                    71:89:3d:cb:75:d7:e8:79:ee:88:fb:9e:3b:f0:28:
                    f1:da:7f:70:ae:89:5c:35:46:ce:d7:ab:46:38:2a:
                    77:e0:d4:84:b0:ae:58:f8:88:3c:2d:68:e3:80:f6:
                    b0:52:ab:d0:f5:2b:16:48:63:b7:1e:f4:e9:66:04:
                    67:92:f8:6d:4f:9a:50:23:ce:1e:d3:93:31:65:87:
                    41:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:ED:0D:34:BB:03:53:1E:96:ED:FE:04:60:38:3F:C8:34:FE:58:B9
            X509v3 Authority Key Identifier:
                keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4c:cb:79:f3:7f:b1:59:2d:8b:47:a6:18:73:57:a5:2f:7a:
         6a:09:2e:21:38:93:3a:eb:96:4e:b6:c6:01:de:a3:55:ad:84:
         88:42:ca:56:1d:49:20:3d:72:79:a4:af:91:df:8c:d5:45:e5:
         1a:80:f2:0c:f8:07:45:34:cf:f1:07:de:ff:74:d3:71:14:56:
         3f:95:8d:84:08:17:65:bf:fd:2e:44:ac:2a:29:9b:59:85:38:
         c9:c6:20:16:02:46:7e:c8:19:02:0b:b2:10:72:aa:24:e5:e9:
         16:9c:99:cc:0b:68:95:26:0f:b0:34:57:e0:1f:66:00:f0:6c:
         2d:88:76:1f:d3:86:23:00:8a:a3:2c:2a:4c:b8:be:22:a1:ce:
         0f:95:65:59:d0:2b:47:35:ce:d1:6e:53:3d:3c:71:f0:af:fb:
         0a:a5:82:03:8f:d8:e7:ff:dc:dd:dd:ac:99:d2:f7:51:39:fd:
         fc:07:70:9c:8e:40:db:04:02:43:9b:72:a9:64:67:d3:a8:dd:
         94:75:64:5d:22:07:75:ec:02:09:96:06:9d:b0:2a:37:88:e4:
         a8:ae:fb:78:f3:6d:b7:c9:3d:51:dd:a3:19:3e:eb:0f:d6:fe:
         9c:a6:70:fd:f3:bd:94:35:17:9c:1c:d0:b1:3c:66:b6:9c:df:
         d1:a1:9f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:04:08 2024 by rpki-client on console-ams.rpki-client.org