Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
File:                     mnuajNgZ9KkgM01-cuwjQIcNd0k.mft (raw, json)
Hash identifier:          4DmU/Nj19/xb67fAWky8FZPKFP56BQIkrncVJKhST8Q=
Subject key identifier:   A1:AE:B9:E4:6C:EC:10:4F:07:38:13:1C:E3:F0:D9:72:E8:25:5C:60
Authority key identifier: 9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49
Certificate issuer:       /CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
Certificate serial:       01901EC708451313841A434957E099D61002
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
Manifest number:          0431
Signing time:             Sun 16 Jun 2024 02:01:18 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:18 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:18 +0000
Files and hashes:         1: 4tsZbL5A-lt4qxBh8lvrcJSIYN4.roa (hash: Xwy2J4T3u2rEQl/pI/cSkrUkLpdIg3KFW31/bkXfxBg=)
                          2: AHHImsuxzyZDWdnSmIiq8zgEJww.roa (hash: dyD7Zi+nn0bxQqRMYGtYuYnC44yjQFwIIMK4ScSqTXM=)
                          3: ICAHXJuWZUKtWJFwJvyoZ6Ah3GY.roa (hash: 2V6Bsd7cMXOk69WZxmRnbMCBHnlUyMg+XoG2OQE88wM=)
                          4: _ZeURdZ_Cnu61RG7l0IHAmAyiSc.roa (hash: DjrSA/+wvmiJYvWWi+flE9/3ebWGfoasJlXKS2i8FdM=)
                          5: mnuajNgZ9KkgM01-cuwjQIcNd0k.crl (hash: 1V7ewwOBw0Ak6fgPTRwADs21YH7zURsSRZMVRBUlQ7w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:08:45:13:13:84:1a:43:49:57:e0:99:d6:10:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a7b9a8cd819f4a920334d7e72ec2340870d7749
        Validity
            Not Before: Jun 16 02:01:18 2024 GMT
            Not After : Jun 17 02:01:18 2024 GMT
        Subject: CN=a1aeb9e46cec104f0738131ce3f0d972e8255c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e2:d0:f4:e8:d5:61:08:77:44:03:b6:a9:f7:
                    34:df:99:55:7f:ed:ee:76:e4:2f:2b:c5:76:3f:c7:
                    0d:0d:3c:5f:89:b9:5c:81:08:66:ec:6b:1d:5c:06:
                    78:19:32:8a:5a:98:54:63:e8:be:7c:24:99:d2:31:
                    a9:02:23:bb:98:ea:a9:1d:bb:67:2e:8e:ad:7d:16:
                    87:6c:ac:43:06:fa:53:90:5a:44:18:c1:87:af:52:
                    39:c7:9f:3b:40:49:58:bd:58:f9:b2:f2:6c:14:8d:
                    c7:6d:5e:3d:e2:d1:2b:53:65:73:d7:aa:10:1f:17:
                    0c:7d:45:0a:1d:d0:32:a5:2b:ce:c7:98:ed:0d:7c:
                    84:1d:8c:20:e5:f0:87:61:61:ab:0c:ae:9f:45:78:
                    6b:75:fe:45:06:c7:14:96:0c:08:24:cf:47:64:14:
                    c4:b8:df:6d:c3:b0:cd:ad:65:a2:d5:24:84:71:4b:
                    82:47:1f:e1:16:aa:68:e0:69:fc:f6:69:6c:1c:c0:
                    ab:38:db:b6:ba:24:72:d3:de:ad:a4:77:7d:95:e9:
                    14:43:cf:23:df:93:f7:2e:1d:b0:3a:46:45:f4:01:
                    89:a9:98:bf:0d:4b:df:ea:08:10:3d:0f:0d:f1:48:
                    f7:f1:a1:83:c0:ba:a8:93:0c:d5:9b:12:fb:6e:03:
                    f5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AE:B9:E4:6C:EC:10:4F:07:38:13:1C:E3:F0:D9:72:E8:25:5C:60
            X509v3 Authority Key Identifier:
                keyid:9A:7B:9A:8C:D8:19:F4:A9:20:33:4D:7E:72:EC:23:40:87:0D:77:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnuajNgZ9KkgM01-cuwjQIcNd0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e0ebb-4686-406e-b99f-21faf144cb62/1/mnuajNgZ9KkgM01-cuwjQIcNd0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:61:5a:0a:7c:73:42:0e:be:04:73:5d:94:44:29:36:71:82:
         61:ff:ac:1c:14:96:60:16:ea:64:8c:70:79:1f:06:4a:8d:5a:
         8c:bb:26:d1:21:5d:b8:99:06:d1:f4:0b:8b:9e:9a:77:65:bf:
         e1:bb:26:76:42:0c:67:cc:dc:3b:dc:02:89:3d:44:ed:b7:c4:
         73:ec:3a:32:8f:f0:0f:62:b3:40:3f:0e:24:c4:d0:9f:4d:ec:
         b0:3e:27:e1:ce:0d:a6:e4:b4:b3:8d:4b:cf:0f:88:36:35:38:
         2d:3a:06:4e:79:4a:de:3c:18:f8:34:ce:97:04:9d:d0:76:bc:
         a9:15:92:a8:64:86:6a:1d:a7:fb:b9:47:fb:91:b9:4d:c1:5a:
         a7:04:21:62:26:12:0c:c7:8d:16:05:a1:2e:05:97:83:f9:0e:
         29:4e:34:27:83:ed:db:0b:e3:97:39:20:69:76:38:e4:f2:48:
         02:2d:de:77:62:80:3a:ff:39:0e:f8:ff:50:10:b8:ae:7d:a2:
         d2:a7:1a:f6:be:64:70:3a:a0:2a:81:7a:8d:ef:38:d3:73:6b:
         6b:61:7d:9b:4e:3c:4a:e8:cd:3a:1d:b5:5f:f8:98:4a:ce:bb:
         f2:62:d7:20:0d:30:ed:32:5d:d7:eb:07:07:55:f1:3e:70:4a:
         a0:5b:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:06:23 2024 by rpki-client on console-ams.rpki-client.org