Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
File:                     h6WU4wS2ghg6ojWeQOHc75P-BXA.mft (raw, json)
Hash identifier:          pPzsvddBpeqLW096jeJI546Wp5aM1ttIJqrb9puX0pE=
Subject key identifier:   61:70:E1:19:D4:4B:5E:9F:75:E6:E3:68:32:0F:3E:BE:7B:9E:3B:D0
Authority key identifier: 87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70
Certificate issuer:       /CN=87a594e304b682183aa2359e40e1dcef93fe0570
Certificate serial:       01901D460F93B007F837DDADDA3A0C5F3E69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
Manifest number:          D8
Signing time:             Sat 15 Jun 2024 19:00:48 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:48 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:48 +0000
Files and hashes:         1: BZn3NEXBMWr6kmXOCtwLyIlwdjQ.roa (hash: UCx7R5UHrj5GYllL3s0aeOGnMm+lkjlDGe14SSDqPEI=)
                          2: h6WU4wS2ghg6ojWeQOHc75P-BXA.crl (hash: b/GIz3hf9nYdL/dMPpfCyC/GN7ZZ5WevSEw39MFLf3U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:0f:93:b0:07:f8:37:dd:ad:da:3a:0c:5f:3e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87a594e304b682183aa2359e40e1dcef93fe0570
        Validity
            Not Before: Jun 15 19:00:48 2024 GMT
            Not After : Jun 16 19:00:48 2024 GMT
        Subject: CN=6170e119d44b5e9f75e6e368320f3ebe7b9e3bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:5a:8f:87:32:61:34:72:80:26:12:7c:1b:
                    9e:c6:a8:93:0b:88:cc:e7:35:db:58:1a:26:84:6b:
                    ce:43:60:03:f3:52:5a:5c:f8:c4:95:24:f7:64:5c:
                    6c:56:77:12:a7:12:87:e2:48:6c:1e:9a:a7:ea:25:
                    a4:ab:f6:df:21:1a:b6:c0:18:9a:4b:22:0c:23:04:
                    87:84:d6:c9:f3:0a:41:8f:aa:ae:20:2c:4b:4a:f1:
                    9e:f7:df:00:66:d0:63:65:5c:32:c5:04:59:50:2a:
                    48:7d:05:8d:bc:82:97:27:a8:eb:e4:63:70:f6:67:
                    22:b6:6c:ae:66:65:80:70:e0:8c:44:45:7b:74:6e:
                    bc:5f:f5:56:e8:af:75:b7:3d:95:fa:0d:bf:5c:df:
                    8b:4f:3f:65:32:e2:2b:cf:45:52:5a:51:6a:c7:b8:
                    88:55:6a:95:8f:80:f2:a8:a4:c5:7d:ad:d7:c0:48:
                    ae:c9:48:43:0b:ea:fa:32:13:9d:b9:88:09:e1:c3:
                    99:cc:6b:75:ee:fd:84:6a:18:5d:ee:69:ad:23:cb:
                    32:80:58:85:49:84:a1:32:89:55:bf:b3:bc:5f:e5:
                    c6:90:82:c4:6e:8f:af:7f:47:9f:37:f3:ca:37:bc:
                    be:e7:f1:d3:4a:15:60:60:2d:d8:38:f4:a9:fe:16:
                    9d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:70:E1:19:D4:4B:5E:9F:75:E6:E3:68:32:0F:3E:BE:7B:9E:3B:D0
            X509v3 Authority Key Identifier:
                keyid:87:A5:94:E3:04:B6:82:18:3A:A2:35:9E:40:E1:DC:EF:93:FE:05:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6WU4wS2ghg6ojWeQOHc75P-BXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f8699-7b52-406e-82c0-b9e34a38f3a9/1/h6WU4wS2ghg6ojWeQOHc75P-BXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1f:a9:1d:96:13:d6:8e:53:ef:dc:d9:74:bb:f0:98:85:57:
         cb:45:09:8f:65:75:97:01:2f:98:c9:33:15:08:d5:fb:32:9f:
         9d:a3:31:6b:96:87:05:59:c7:e8:d1:a8:0a:83:98:c6:fc:42:
         17:98:99:b0:22:f8:73:ca:46:7e:78:c0:a9:52:54:bd:02:9a:
         e6:1b:71:b5:0e:cc:5e:10:30:a4:e4:f8:02:bb:eb:b5:e5:43:
         e1:cb:cd:5b:ba:88:07:6b:00:4d:c4:a5:1e:54:ad:60:d0:ea:
         20:93:ba:db:ef:65:3a:e6:84:5e:8f:e4:2d:2a:cc:52:9b:ce:
         69:68:ba:c4:2e:e9:85:cd:a7:4c:a6:a2:96:e2:a2:41:3c:61:
         47:cf:24:d3:45:f4:e0:14:44:08:29:9c:31:90:3a:c7:10:4d:
         ec:a0:00:2e:41:9e:90:b2:9a:4b:ee:ef:55:15:ca:5a:da:93:
         90:8b:8a:f2:40:95:18:2d:72:c7:7e:50:c7:7a:02:39:28:c8:
         3f:34:9e:35:c0:de:ce:c3:57:1d:a5:5e:89:5a:00:72:89:3d:
         2d:88:3c:fc:69:e6:ef:98:e2:ec:6c:4d:66:49:d2:71:ae:af:
         c1:c5:86:c7:8f:8e:b0:e4:cc:4c:ac:a7:96:18:0a:93:f1:01:
         43:0a:86:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:10:03 2024 by rpki-client on console-ams.rpki-client.org