Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
File:                     szmLWx2aluQRW3vPb8pj-69jnKc.mft (raw, json)
Hash identifier:          ZR5yAUIEE69AL11fefdAJRe/bvhFhUc3f/8Ab6ivFdY=
Subject key identifier:   9A:92:59:23:AB:0F:8F:76:0E:02:EF:F3:CD:C2:F2:F9:F3:22:9C:4F
Authority key identifier: B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
Certificate issuer:       /CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Certificate serial:       01901E58F7F199406024D74EFD54BFCC1364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
Manifest number:          0CC3
Signing time:             Sun 16 Jun 2024 00:01:05 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:05 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:05 +0000
Files and hashes:         1: 8MfZ80s9lVSXl_wOG0ks7ccbqVk.roa (hash: oD0Cyqed+CYgNER2PRAuKOWU+IG3acP1Eni8xWOvuRE=)
                          2: szmLWx2aluQRW3vPb8pj-69jnKc.crl (hash: jTFLY2TWpAl+AUM7JT0DgazzocERNe+0MB3RUWV4KHo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:f7:f1:99:40:60:24:d7:4e:fd:54:bf:cc:13:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
        Validity
            Not Before: Jun 16 00:01:05 2024 GMT
            Not After : Jun 17 00:01:05 2024 GMT
        Subject: CN=9a925923ab0f8f760e02eff3cdc2f2f9f3229c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:0a:5d:32:3b:d0:1c:f8:72:c8:85:ed:22:
                    2d:75:d7:81:53:21:d4:65:7f:48:94:93:d7:5c:aa:
                    e1:ae:2c:70:9e:f4:80:c8:33:8b:5d:ee:6b:f4:ed:
                    c8:69:2c:30:d7:4b:d5:9f:d8:a9:df:29:da:7b:58:
                    ee:fc:4c:3f:28:65:b5:38:c7:cc:e0:cb:02:0b:ec:
                    74:38:de:53:93:b3:45:e8:38:94:25:3d:05:a8:b7:
                    e9:b5:0c:b8:5f:f8:ee:37:c2:93:96:fc:67:eb:c6:
                    e8:56:3f:4b:93:c6:46:c6:e6:89:6a:ca:c3:4e:40:
                    a5:d8:fe:30:d2:b9:0e:c2:25:72:c8:1e:bf:90:ce:
                    88:41:8c:e5:26:8b:cf:f3:e0:44:3b:b5:c1:5c:40:
                    ca:83:d7:b1:87:37:4a:68:c3:d0:92:aa:05:c6:f6:
                    cb:8c:8d:9b:da:88:e0:35:2e:58:c4:76:09:b1:f1:
                    dd:d5:23:b8:62:4b:47:8a:f8:b9:b3:45:61:7e:f1:
                    44:2c:6a:4b:b3:24:e0:d7:fa:c9:7f:fd:54:2a:39:
                    cd:7d:1f:67:70:b4:1a:e7:84:52:94:4f:cb:6a:38:
                    d3:a1:55:3c:22:5f:ec:a7:05:46:72:96:c4:66:32:
                    47:3b:1a:d8:4c:46:7b:00:41:e4:a9:1f:07:16:9b:
                    e8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:92:59:23:AB:0F:8F:76:0E:02:EF:F3:CD:C2:F2:F9:F3:22:9C:4F
            X509v3 Authority Key Identifier:
                keyid:B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:b8:ea:d3:b3:39:6f:cb:92:23:d4:5a:a5:2e:7b:25:18:85:
         55:e4:6b:e9:86:91:e8:55:30:32:0e:90:b0:19:44:d5:09:e0:
         1e:b3:62:56:37:b6:1b:84:28:dd:9b:e6:2c:95:1d:95:fc:de:
         51:fc:86:00:34:10:04:c8:56:8a:98:f9:b8:41:b7:50:cd:21:
         8e:7a:83:b1:03:ea:b3:c1:01:c1:8f:c0:bb:9d:c9:59:f1:1f:
         f1:fa:71:73:f6:86:df:28:73:5e:f8:62:e0:5e:01:73:4b:5b:
         e1:be:17:76:41:6c:88:85:b3:52:73:47:d1:d0:89:05:dc:47:
         8a:32:ac:5f:b3:42:e1:a6:11:52:b0:68:4d:65:8b:6b:3d:0a:
         47:28:20:17:10:b4:d9:b8:5d:f4:45:7a:7a:02:ac:6d:53:a3:
         1c:c1:b8:4e:98:dd:72:72:35:d9:31:bf:78:54:3d:74:73:a2:
         ce:70:8f:bf:cb:d7:74:d0:89:6d:ee:34:73:c6:20:45:26:18:
         47:7a:11:3b:8d:cb:9c:57:2c:a3:2a:e6:bf:30:6e:e7:13:a3:
         ae:00:cc:6f:16:a1:0f:9a:c0:34:f3:a7:88:3b:95:7d:88:e9:
         09:51:96:8f:36:52:78:9c:1f:34:0d:54:3a:5e:73:ce:b2:5e:
         01:4f:8d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:11:08 2024 by rpki-client on console-fra.rpki-client.org