Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
File:                     brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json)
Hash identifier:          Oa61E0yrAH4NaSvoT6ELFBZ6KPmyRB/dz7uB3+8fk9k=
Subject key identifier:   ED:81:1D:35:12:DB:23:C4:E8:18:95:35:A3:8B:9F:19:2A:A2:DA:E9
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Certificate issuer:       /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial:       01901DEB908EBE742674316BF22B217F4294
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
Manifest number:          0AF9
Signing time:             Sat 15 Jun 2024 22:01:35 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:35 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:35 +0000
Files and hashes:         1: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: Z/BXirUp/xB1WLcl+cnqUYo6M1V5BdOqmIaFGkemNCw=)
                          2: h2PKVziHgjbPzvExGjakfQE76A8.roa (hash: jdQ4IFNE4ICdVJAkwBK7pSN43833tJMcRY9MVnppBd8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:90:8e:be:74:26:74:31:6b:f2:2b:21:7f:42:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
        Validity
            Not Before: Jun 15 22:01:35 2024 GMT
            Not After : Jun 16 22:01:35 2024 GMT
        Subject: CN=ed811d3512db23c4e8189535a38b9f192aa2dae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:78:7e:0c:cc:0a:bb:d8:b6:2d:4b:35:fe:
                    94:44:2a:bc:8f:99:41:46:80:3c:db:57:91:e0:aa:
                    a6:20:dd:7b:fa:0c:d0:28:0e:30:ac:34:f3:59:60:
                    c8:94:7b:58:85:ae:4c:3a:c2:c4:f8:6d:01:19:25:
                    60:15:53:66:ef:68:ba:7d:a6:1b:25:e6:61:1c:bb:
                    94:af:27:5a:6c:e9:1f:eb:2f:ef:3e:82:7d:7c:09:
                    99:be:a2:2b:f1:55:08:6e:f7:67:9c:ff:37:27:e2:
                    2e:0a:ea:7f:52:16:b3:c5:96:5e:09:83:a4:9a:4a:
                    55:d6:ef:91:07:ba:c4:54:33:4d:ae:97:cd:c5:86:
                    e8:2d:1f:bd:aa:27:85:22:d3:74:31:39:f6:82:e8:
                    fb:ee:57:c5:66:47:bc:fc:06:ba:6e:7f:22:9a:c8:
                    ab:63:c6:97:36:ea:41:1a:5e:45:c1:0c:fb:61:d4:
                    a6:01:65:53:6a:10:00:4f:93:3d:37:64:bd:bf:e0:
                    88:52:0f:ac:1c:f5:95:23:a1:54:11:8a:1e:43:28:
                    98:78:a3:f4:5f:e8:d7:57:27:d5:4a:84:fd:8c:bd:
                    fb:11:b1:b4:12:dd:95:e4:20:0a:b1:33:5e:fb:e2:
                    e2:59:d1:1a:72:1f:9c:de:59:43:32:0c:35:e6:83:
                    85:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:81:1D:35:12:DB:23:C4:E8:18:95:35:A3:8B:9F:19:2A:A2:DA:E9
            X509v3 Authority Key Identifier:
                keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:20:1d:41:c1:7d:5e:ec:4d:30:17:87:49:0e:40:88:27:dd:
         93:7e:53:68:41:d7:f9:62:3f:b8:05:87:1c:9c:59:a4:b8:3b:
         70:1d:17:70:dd:db:fd:22:60:9d:44:a3:0c:47:4e:0f:99:83:
         5c:f4:b7:e6:72:ea:69:b5:f3:02:fc:32:b8:2d:17:02:c1:b4:
         cc:45:67:de:1f:9d:f9:aa:d1:20:1c:41:6b:d1:46:ee:a9:3e:
         75:db:f8:9f:73:9b:1f:86:0d:03:c3:f9:45:69:db:ea:d5:1c:
         d9:e3:56:32:2d:cd:27:39:a5:2d:b6:2d:19:73:33:0e:cc:f0:
         fd:8e:75:77:79:22:24:00:f3:6b:94:55:ed:99:f1:c0:bc:5d:
         70:d6:21:10:a1:aa:ea:01:a5:17:32:88:34:01:21:ef:56:05:
         d0:4f:90:9a:d2:36:34:4e:d0:76:dc:46:cf:71:b9:4b:8f:af:
         f8:dd:4a:ae:b0:bc:e9:57:e3:ba:a6:dc:ba:5c:c1:14:3b:14:
         70:4d:81:74:75:e8:16:ff:41:43:bd:7e:96:83:e9:a9:53:84:
         c1:70:98:6a:58:bf:94:c9:55:32:0d:76:9d:24:91:01:d2:40:
         19:95:bc:e5:38:d5:9d:30:95:4e:14:6f:66:37:a3:2c:24:8a:
         26:ed:b2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:09:06 2024 by rpki-client on console-ams.rpki-client.org