Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
File:                     brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json)
Hash identifier:          NhgFWx8oHdMSER/98zZwrP1kuHimkVUPImAeeSXTrZg=
Subject key identifier:   FB:A5:F0:04:F3:7B:7E:38:EE:58:2B:F7:F9:DA:60:E5:68:E2:18:9A
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Certificate issuer:       /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial:       0190448B2887B7194C67553054763B7B27C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
Manifest number:          0B0D
Signing time:             Sun 23 Jun 2024 10:01:28 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:28 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:28 +0000
Files and hashes:         1: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: At+nV1QPXe6cv4TKoVHdKUTllvN2yJPPyd2/sJguzsw=)
                          2: h2PKVziHgjbPzvExGjakfQE76A8.roa (hash: jdQ4IFNE4ICdVJAkwBK7pSN43833tJMcRY9MVnppBd8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:28:87:b7:19:4c:67:55:30:54:76:3b:7b:27:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
        Validity
            Not Before: Jun 23 10:01:28 2024 GMT
            Not After : Jun 24 10:01:28 2024 GMT
        Subject: CN=fba5f004f37b7e38ee582bf7f9da60e568e2189a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:4c:b6:25:8f:cd:49:a0:0d:fe:7d:d0:86:
                    4a:33:10:4e:8a:9f:9c:d0:0c:54:47:85:87:98:22:
                    4f:59:5a:da:5e:30:a2:76:d0:88:f0:70:64:36:50:
                    98:67:18:b3:69:81:b7:87:36:3f:78:ea:66:a2:41:
                    df:8a:0c:43:5f:c1:1b:ab:5e:e6:ab:1e:71:44:ac:
                    9f:eb:69:0f:78:f8:70:3d:15:14:ae:23:71:32:ec:
                    08:59:72:c1:46:93:c6:63:98:c5:15:70:ab:b9:fd:
                    79:a1:21:50:63:d8:21:cc:f3:b0:22:7f:06:b8:50:
                    cd:c4:42:74:da:1e:82:1c:2f:c3:ee:89:ad:e4:dd:
                    0f:1c:42:2e:30:36:d2:7b:a3:bc:c1:6c:04:2e:58:
                    6a:cd:8c:d4:99:60:2d:42:2d:06:3c:21:7b:d6:38:
                    eb:1c:fd:88:3f:6c:4e:69:2d:96:1b:56:f9:cd:59:
                    2a:39:8d:fa:e5:ed:89:0e:f2:f1:23:f1:2e:39:17:
                    cc:63:bf:b4:1d:c9:dc:54:cb:71:59:e8:7d:55:66:
                    c0:92:f8:9e:37:0b:e3:87:e5:dc:99:56:86:e0:66:
                    1b:4a:59:6b:b7:4d:8a:d5:9a:00:4b:6e:80:8b:d3:
                    c6:04:a2:7d:17:57:68:c0:e7:4a:2a:65:ad:44:93:
                    de:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A5:F0:04:F3:7B:7E:38:EE:58:2B:F7:F9:DA:60:E5:68:E2:18:9A
            X509v3 Authority Key Identifier:
                keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:c9:bc:ca:6d:88:24:d8:58:a9:fe:af:8b:6b:ff:ac:98:2e:
         d0:69:3e:c1:af:5e:71:6f:58:60:f3:70:1c:38:52:94:31:11:
         be:7d:0b:6a:c2:28:66:7e:b5:30:0d:f9:fe:29:ea:5e:9e:8f:
         86:12:15:5e:e7:57:2e:82:94:67:87:f4:5a:a5:42:2b:43:85:
         af:44:dd:4f:d3:8b:87:81:ef:d7:4c:07:8e:f6:17:80:23:61:
         58:35:d9:a3:6f:ec:c9:68:d0:d5:c7:0a:e4:e8:ac:0f:91:3a:
         5d:d6:91:b5:90:b4:0e:87:d1:d8:14:b7:fe:db:52:f7:f2:be:
         5e:3a:59:ad:8d:d9:63:13:a8:9e:3e:e6:3b:3f:03:ad:64:e3:
         83:dc:fa:2b:18:33:30:1d:8c:cf:3a:08:aa:51:79:fa:d1:4a:
         25:77:a3:9a:b3:e1:9d:dd:1b:b8:88:27:cc:a6:4c:ff:fd:61:
         6d:58:8d:1a:e9:40:2c:00:d4:3d:0c:b4:2b:fb:10:3d:79:4d:
         55:64:15:3e:de:ed:1f:da:b6:d0:66:ff:3d:ec:15:de:8c:7a:
         c2:2f:10:8b:f2:d9:46:6c:2f:c0:ae:69:39:6c:80:e5:a4:50:
         77:8b:04:a3:d8:23:82:88:b4:96:7e:ef:3c:15:7b:54:5e:24:
         bd:84:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:57:36 2024 by rpki-client on console-ams.rpki-client.org