Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.mft
File:                     Bskt8sn6opFfxf61pCcBg0GfrvI.mft (raw, json)
Hash identifier:          +Kb1+/3P6qwNTWP8lkQRmsFT+kLX/tLfPnsOZf74wGU=
Subject key identifier:   AB:84:DC:A8:A7:EE:08:82:F0:FD:99:D5:CA:95:70:19:E2:BE:46:1E
Authority key identifier: 06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2
Certificate issuer:       /CN=06c92df2c9faa2915fc5feb5a4270183419faef2
Certificate serial:       01901BFCB123AE9FF2575AE835102D3E49BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.mft
Manifest number:          0F87
Signing time:             Sat 15 Jun 2024 13:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:03 +0000
Files and hashes:         1: 9PdQPRnnZyiyxaFI3CXVAqLbtPo.roa (hash: 77bdVRJLI57StmPTeMBaNq7W14GnEAlDVEzircm5EEU=)
                          2: Bskt8sn6opFfxf61pCcBg0GfrvI.crl (hash: szpOfxrdoj0pAt091Oy4Ug/k3ifv7tl/WJ0Tca2mxOU=)
                          3: Dzjm-dRUCEwIJF7oGvd6oWViXeY.roa (hash: Gs3jTXU8pRchN+b1A0n39SNDur/2UAOqvJ43Yt+2l9Q=)
                          4: KnvhxTL7dpxo_BOyegXjlI3Uf7g.roa (hash: mxPJTf9+JvvTuMo9nE+wQn/cTfpeOOmk+MoHiCrfIbo=)
                          5: L9PRnb3hz2wMPcfyvw8fA7CD1vM.roa (hash: cr15ChGxbAppf+/EW+Zpuy3YgwXknAa2LX/OAQnYurA=)
                          6: ZbE_ouSxhARCro-5cPFYIF61h-0.roa (hash: 67kHqs8lVq+cOtyt3VAlKd8PVh34Eva1hX2lK1P+gzw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fc:b1:23:ae:9f:f2:57:5a:e8:35:10:2d:3e:49:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c92df2c9faa2915fc5feb5a4270183419faef2
        Validity
            Not Before: Jun 15 13:01:03 2024 GMT
            Not After : Jun 16 13:01:03 2024 GMT
        Subject: CN=ab84dca8a7ee0882f0fd99d5ca957019e2be461e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c4:c8:d9:70:d1:78:ff:db:d7:aa:c4:86:57:
                    10:a6:c7:8d:10:ef:13:32:28:59:b3:4e:b8:0b:8e:
                    52:5f:a5:22:f9:b7:07:17:15:b0:3a:a8:13:43:ba:
                    68:5b:c4:3f:95:95:61:18:cc:0d:cc:42:0b:35:72:
                    d0:7a:d7:fe:fb:11:8b:6b:52:04:40:41:8b:ff:bf:
                    54:46:f8:0e:f2:4c:08:a6:5c:aa:61:72:88:99:98:
                    eb:cc:1c:b4:46:93:5b:38:ae:2b:98:e2:53:a3:8b:
                    98:50:88:02:76:59:f0:86:8f:d2:5c:20:a0:ee:45:
                    cc:f0:23:d6:b5:5c:b5:3e:b2:0b:b6:df:85:e8:a5:
                    00:b6:e3:e5:90:c8:7e:f9:86:8d:83:b3:ab:de:99:
                    5e:45:d6:f0:f0:fa:6b:25:0e:db:9e:be:62:71:e5:
                    cd:27:f1:1b:92:d1:9b:0b:2b:4a:cd:8b:7b:68:7b:
                    a6:9e:1d:45:51:01:14:ff:ea:ed:eb:28:5d:33:cc:
                    25:6c:57:a4:23:93:97:75:30:30:38:5d:b7:de:e5:
                    4c:59:6a:b3:fc:6d:28:16:fc:66:4b:b1:50:de:e6:
                    7f:5f:bd:c3:b4:1e:f7:b9:17:38:37:df:34:aa:65:
                    41:48:e9:e6:5c:c6:0f:07:b8:ab:df:ad:d6:4c:af:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:84:DC:A8:A7:EE:08:82:F0:FD:99:D5:CA:95:70:19:E2:BE:46:1E
            X509v3 Authority Key Identifier:
                keyid:06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e9:07:15:2b:cc:bc:78:d5:30:9e:6b:58:3d:13:4b:c7:77:
         37:b1:55:9e:71:4b:7b:a6:6e:a1:90:bf:b6:36:ce:46:81:ff:
         a7:10:81:c4:92:e6:3c:97:09:19:c5:11:d1:61:32:1f:13:34:
         2b:2c:51:10:f6:59:ec:aa:bf:c4:38:6f:84:b4:c2:d3:80:39:
         d1:ce:ce:58:05:37:b9:4c:28:7c:4c:dc:da:e5:09:d4:ab:dd:
         78:56:88:48:73:68:36:d8:ed:5f:38:76:e3:c5:66:bb:c4:a5:
         d4:29:c8:a7:a6:8c:cc:9f:38:b6:0a:3b:4d:d3:23:4b:c4:ab:
         30:80:bf:70:55:d8:f5:44:53:1e:af:3b:da:af:41:5d:38:0f:
         83:0d:28:e3:14:ac:60:7f:1e:78:ca:82:00:24:c0:6d:b6:44:
         98:55:40:65:d5:46:b3:d1:da:e7:c1:b3:9f:1c:e0:0a:91:3e:
         4f:4c:9e:49:a2:6c:48:75:e0:82:73:96:71:21:0d:66:be:38:
         0f:22:9c:cb:76:c9:13:42:87:18:d0:0c:04:0e:41:7e:db:36:
         df:91:ae:2a:78:c8:ed:dd:8d:91:75:08:86:90:e5:3f:2c:25:
         52:2b:47:b8:56:b7:a9:02:c1:c8:bf:07:c3:a9:ed:be:b0:3b:
         38:c7:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:00:07 2024 by rpki-client on console-fra.rpki-client.org