Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File:                     P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier:          8bTgRguefyWS2QFKT/NT64ENMXWfyTkqpCAWFC47SRc=
Subject key identifier:   FF:B8:6B:C2:17:DA:6C:86:9C:7A:6A:E3:BE:4D:DC:AF:45:74:E2:E1
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer:       /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial:       01901DEB1119FA1E98C85797EDF683912BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number:          08A6
Signing time:             Sat 15 Jun 2024 22:01:02 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:02 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:02 +0000
Files and hashes:         1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: dJYtfRo7j9l3X0Sj/KpkfJc1jZMXzx8FFUSsnauzR0Y=)
                          2: h99NXphOtb3Z6-pga4Mlgr6JMR4.roa (hash: 1Q0QVgCKU/dxoXcyWP7vDK2P5dB8gYkIo1cOxEQkTQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:11:19:fa:1e:98:c8:57:97:ed:f6:83:91:2b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
        Validity
            Not Before: Jun 15 22:01:02 2024 GMT
            Not After : Jun 16 22:01:02 2024 GMT
        Subject: CN=ffb86bc217da6c869c7a6ae3be4ddcaf4574e2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f6:39:86:60:35:7c:87:d7:9f:65:a8:cb:dd:
                    e8:dd:b3:12:65:a2:5f:d2:c1:1c:0a:3d:24:93:61:
                    3a:02:f2:2a:5d:fe:7d:b3:f8:2d:25:e8:b6:50:4b:
                    c4:89:03:cd:76:18:45:7c:79:b0:af:83:ab:e7:ec:
                    96:d2:22:1b:33:9c:9d:85:22:12:12:50:50:07:dc:
                    87:a4:06:30:cb:d4:e2:22:2f:2f:0c:f7:46:34:22:
                    67:9f:ae:23:7f:fb:ce:3b:93:cf:18:ff:4a:3a:52:
                    49:fc:4b:79:3d:e1:fd:be:f8:c0:d7:82:16:3b:46:
                    2e:9d:0b:5a:9e:cb:99:5c:7c:d2:b6:58:8d:1d:c4:
                    bd:36:fc:83:e8:53:ce:07:40:40:a8:20:24:97:bd:
                    59:74:2d:06:15:98:c7:2e:ed:d9:32:5f:c2:58:d2:
                    06:48:51:6b:3c:be:47:fe:b5:be:46:ae:d2:28:69:
                    12:33:e8:2c:52:e6:72:c5:86:b9:1a:fe:a5:63:9f:
                    ac:17:e5:76:03:c5:12:87:94:a2:e2:3c:83:4e:26:
                    e2:57:14:3a:7a:5c:9d:ca:ee:e3:99:a6:f8:40:78:
                    3e:91:e4:1a:56:29:13:91:f0:a8:7c:cc:b3:84:89:
                    d0:ce:56:03:69:c3:b6:51:89:04:20:2c:69:5a:88:
                    f6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B8:6B:C2:17:DA:6C:86:9C:7A:6A:E3:BE:4D:DC:AF:45:74:E2:E1
            X509v3 Authority Key Identifier:
                keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:70:fc:c2:80:52:09:d9:3f:53:5d:40:88:f6:6e:fc:2b:ba:
         b8:c0:69:0d:71:eb:df:98:5c:5a:87:aa:35:af:7c:1b:18:b1:
         b4:33:b8:f7:26:f8:ef:c4:13:76:12:be:4b:d0:d0:57:c0:e3:
         fa:e7:39:94:fc:62:42:b4:80:e7:1a:ee:9b:d9:48:89:b8:0e:
         b7:41:f6:f4:76:2d:0e:50:b8:dc:b7:e2:7c:91:e8:f2:48:2f:
         a8:61:86:bb:ae:90:6b:af:7f:59:2c:0e:7b:cb:8a:a4:41:a9:
         ed:80:3d:6a:95:cc:70:fd:18:45:02:eb:b5:c3:18:3e:79:26:
         95:1c:fd:82:ea:63:93:e0:55:57:ed:b5:bc:64:a9:cc:c8:ba:
         a8:0e:75:bb:24:ef:64:bc:09:6b:e4:b6:99:dc:db:42:a0:52:
         91:25:56:e5:4d:00:42:05:4f:30:3d:7c:86:b2:92:31:a7:22:
         b6:17:54:3c:c6:27:f0:2a:4f:52:4c:c4:d8:8a:a2:ed:5d:b2:
         7a:eb:09:ec:60:ef:0a:42:51:5b:bd:50:a9:5c:6c:52:f8:fe:
         17:32:35:1a:a6:25:eb:d0:0d:74:a1:74:4a:f4:51:f8:36:8d:
         b0:d2:cf:c0:2f:db:61:fb:3a:d3:59:aa:b5:6d:44:87:6b:36:
         84:b9:a9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:04:08 2024 by rpki-client on console-ams.rpki-client.org