Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
File:                     szmLWx2aluQRW3vPb8pj-69jnKc.mft (raw, json)
Hash identifier:          rF49gNE2+W/GFGXjWaI9UFBuvbciz44Gfec9Rf8+++w=
Subject key identifier:   E1:8E:B1:C2:21:80:02:9D:CD:AC:EC:41:0D:43:7C:03:82:E8:38:E8
Authority key identifier: B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7
Certificate issuer:       /CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
Certificate serial:       019048D57C30BFB782CE9203FD6CFA4CE53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
Manifest number:          0CD9
Signing time:             Mon 24 Jun 2024 06:01:08 +0000
Manifest this update:     Mon 24 Jun 2024 06:01:08 +0000
Manifest next update:     Tue 25 Jun 2024 06:01:08 +0000
Files and hashes:         1: 8MfZ80s9lVSXl_wOG0ks7ccbqVk.roa (hash: oD0Cyqed+CYgNER2PRAuKOWU+IG3acP1Eni8xWOvuRE=)
                          2: szmLWx2aluQRW3vPb8pj-69jnKc.crl (hash: CxAkh4dRbMqMww8k+JmxCEceSOxLGoWOLvw/0e86KO4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d5:7c:30:bf:b7:82:ce:92:03:fd:6c:fa:4c:e5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3398b5b1d9a96e4115b7bcf6fca63fbaf639ca7
        Validity
            Not Before: Jun 24 06:01:08 2024 GMT
            Not After : Jun 25 06:01:08 2024 GMT
        Subject: CN=e18eb1c22180029dcdacec410d437c0382e838e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:87:6e:e6:80:95:6c:b4:fa:3c:8f:97:ac:b8:
                    36:a1:69:e1:df:de:be:3f:16:87:34:da:a5:d6:57:
                    05:63:de:b2:6a:8f:e1:1b:ad:52:b3:c8:bf:53:24:
                    b0:d0:8f:c2:e7:3b:3a:23:0e:43:7c:dc:59:da:83:
                    d6:28:fc:c6:21:6a:b4:62:9d:32:59:5c:5d:00:c8:
                    0d:5e:ad:92:e5:96:d1:e6:e6:b8:69:51:ef:21:dd:
                    e8:67:58:92:3f:71:5d:d1:29:92:a8:87:7f:e2:16:
                    02:06:9d:b6:43:7c:01:8b:e5:d3:95:5f:34:64:be:
                    a1:b6:c0:4e:47:a8:a1:30:c6:5c:69:00:01:a1:12:
                    96:e9:bf:31:1a:b5:31:81:1e:1d:1d:a0:6e:43:9c:
                    12:8d:c9:59:fc:5d:43:3a:ad:73:30:ff:46:a1:2d:
                    9f:d3:9e:c7:be:3d:f2:e7:9e:69:9c:ae:46:37:47:
                    47:d7:ae:ab:19:29:e6:a2:b5:49:2d:eb:cb:e0:b0:
                    c9:7b:64:b0:fa:5c:2e:52:db:7b:89:6d:59:1e:a8:
                    f1:43:76:24:7a:e1:2f:24:8c:e6:dc:b7:37:7e:4f:
                    16:79:1f:4e:00:d5:61:8b:75:1a:96:22:35:fa:45:
                    2c:d0:3b:3a:47:5e:0b:92:05:9c:57:8c:df:e7:f8:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8E:B1:C2:21:80:02:9D:CD:AC:EC:41:0D:43:7C:03:82:E8:38:E8
            X509v3 Authority Key Identifier:
                keyid:B3:39:8B:5B:1D:9A:96:E4:11:5B:7B:CF:6F:CA:63:FB:AF:63:9C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szmLWx2aluQRW3vPb8pj-69jnKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/444437-6843-4ad4-b764-79cc52c06d4f/1/szmLWx2aluQRW3vPb8pj-69jnKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:08:4e:54:73:69:e0:84:ea:2c:02:ef:06:93:c2:f0:7c:ee:
         34:4d:83:b9:bb:e4:99:e1:47:43:3d:27:6e:8a:85:d6:cb:49:
         ca:e7:f2:de:a6:9d:be:60:a2:16:6f:2c:60:22:fe:35:67:6d:
         a5:8e:6f:db:58:30:90:b5:d1:32:8c:26:ad:32:43:0b:7d:9a:
         33:f9:d1:37:94:e7:57:6c:fc:89:e9:f6:df:2a:b1:10:be:68:
         0c:f5:bc:51:dc:9c:3f:b9:07:a0:40:7f:ae:46:d4:0e:06:80:
         a5:46:52:a9:4e:e7:6b:32:3e:0f:30:fc:ec:ba:ad:05:58:21:
         ec:47:18:b9:68:f2:66:b9:a9:5b:fd:74:83:99:eb:3b:f4:be:
         77:08:6b:09:36:a6:0c:ae:4c:c2:51:c6:77:04:5e:d0:c0:22:
         e3:e0:df:86:a2:d6:24:01:ed:41:08:46:f0:4a:87:b5:aa:8b:
         a3:70:03:81:23:bf:b0:13:74:0e:ed:29:80:fd:c9:15:0b:ac:
         e3:cd:03:5b:3c:94:40:d9:e9:eb:99:8b:bb:5f:a6:20:ff:08:
         ef:10:2d:38:d5:01:4d:5e:b6:ad:be:67:65:7d:b8:8b:04:e7:
         d3:79:fc:06:8f:02:79:e9:eb:20:60:4f:ef:0c:a2:fb:b1:f2:
         13:a4:a3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:45:17 2024 by rpki-client on console-fra.rpki-client.org