Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File:                     a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier:          mS0+f6FtZJ6D4VUV+rcA9+5o74hj+D/y/ov41mBphyo=
Subject key identifier:   EE:05:48:7A:94:38:A1:2A:E8:BC:77:5E:FD:64:8D:99:03:8C:5B:04
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer:       /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial:       01901D46885152EBD1E2FE540B4D1AD0491F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number:          02FB
Signing time:             Sat 15 Jun 2024 19:01:19 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:19 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:19 +0000
Files and hashes:         1: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: BcquVWzqW9JqoLn4JQykhL2nFqoIs79uumpOfGqoNek=)
                          2: lWYayBKD4usRGQ6Y-Qs13Rlb-sU.roa (hash: sPtqGnyKiDp5ELKZM2GjMcUXJnNFzaNh6m2uVRvJ5lg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:88:51:52:eb:d1:e2:fe:54:0b:4d:1a:d0:49:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
        Validity
            Not Before: Jun 15 19:01:19 2024 GMT
            Not After : Jun 16 19:01:19 2024 GMT
        Subject: CN=ee05487a9438a12ae8bc775efd648d99038c5b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:e3:88:10:a3:07:3d:c1:53:96:80:13:b5:
                    98:b5:57:62:14:76:d0:a7:2d:81:9b:f5:cd:1b:2a:
                    6e:7c:5c:81:e8:29:8d:1b:fc:0f:4b:39:5c:36:6d:
                    45:04:21:c0:de:d7:97:52:85:80:68:02:83:c1:4d:
                    c3:00:92:30:d2:e5:08:fe:bc:60:48:ae:bc:c2:c2:
                    5a:bb:9e:4a:c3:7d:9c:a8:dc:a5:73:61:64:92:7b:
                    98:ba:47:1a:91:e1:c9:bb:13:cd:22:46:23:fa:15:
                    3d:08:89:25:36:d2:44:fb:2f:e9:44:70:53:66:cd:
                    9e:32:9e:62:4e:95:67:a8:4b:73:8c:d3:b8:a4:87:
                    8f:93:f6:cf:27:8e:26:2b:e5:e6:03:5e:9f:3f:e9:
                    ba:2a:cd:3c:f6:14:c9:32:88:60:4b:3d:79:02:ae:
                    36:7e:91:c1:e6:64:69:62:d2:3f:8c:e0:2a:76:53:
                    d3:00:76:62:d7:7c:58:83:ba:49:df:e4:e5:d6:0a:
                    5c:af:64:72:65:1c:fb:2d:66:5e:ba:da:13:c0:d2:
                    ce:97:77:07:f4:7d:82:e3:b5:90:7a:a6:3f:3d:0f:
                    ee:d3:9b:90:19:63:ab:b1:c6:9c:53:ec:fb:01:ac:
                    5f:de:41:4f:30:cf:c6:47:7c:74:35:84:f1:b9:91:
                    18:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:05:48:7A:94:38:A1:2A:E8:BC:77:5E:FD:64:8D:99:03:8C:5B:04
            X509v3 Authority Key Identifier:
                keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e8:49:f7:43:8a:32:de:91:8f:f1:df:df:60:f6:95:f4:dc:
         c6:c7:d3:00:49:98:64:c2:0a:54:46:d2:c5:16:de:8d:ea:8b:
         c6:c3:59:7c:46:37:93:74:55:9c:bc:2d:30:60:2f:d8:92:70:
         99:eb:a0:81:82:96:bc:26:ff:e0:04:e5:90:58:fd:26:88:54:
         7a:2e:02:21:60:50:13:36:97:45:61:37:5f:54:37:d5:e0:80:
         ce:18:44:ab:3c:22:9f:a8:54:a3:e5:ef:d4:76:aa:6a:14:66:
         87:f1:93:e2:a1:b4:a3:f2:30:cc:f3:15:6b:a6:cf:d4:5c:c5:
         fe:49:e2:ac:06:bd:8c:ad:19:f8:21:be:e9:e0:67:83:96:8c:
         a9:3e:08:15:ee:1b:10:65:4c:c8:9e:67:28:63:19:c5:b4:51:
         24:76:4b:53:35:1e:5e:c5:1a:c1:a9:1a:e2:e2:38:cc:63:1d:
         36:e0:78:e5:2f:d2:2d:ff:8f:08:03:08:51:5c:04:83:75:18:
         35:c1:76:ab:c1:2c:de:e1:86:ff:31:6b:9d:f7:87:f2:28:6a:
         3e:98:c8:fc:27:50:02:49:5e:ac:35:22:28:c5:6a:9d:9b:41:
         1c:c0:d1:92:8b:5a:fb:61:26:66:65:6c:e6:1c:46:1d:6e:ac:
         df:d4:d9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:17:01 2024 by rpki-client on console-ams.rpki-client.org