Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
File:                     Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json)
Hash identifier:          GM0BMld+0dgFrpU07HjmsvF8Jp06QzhgEHTIRcyxZ3Q=
Subject key identifier:   B8:AD:C2:FD:DA:31:48:BD:1A:B2:CA:26:AB:4D:A9:6D:90:D7:E4:A8
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Certificate issuer:       /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial:       0190497A3FA3C3253F077146D4AE8627FA53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
Manifest number:          1070
Signing time:             Mon 24 Jun 2024 09:01:06 +0000
Manifest this update:     Mon 24 Jun 2024 09:01:06 +0000
Manifest next update:     Tue 25 Jun 2024 09:01:06 +0000
Files and hashes:         1: L2WDQsBqKDl0hP07UvmJJ6oaPVY.roa (hash: ZmwdzRnjWf20ldUNctykwUqcik84nCmfee5+r1fEQjg=)
                          2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: eCzDNEUobRAP5iZMOIoZgZSwDlERpIbGf9Y90Ay+xM4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:7a:3f:a3:c3:25:3f:07:71:46:d4:ae:86:27:fa:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
        Validity
            Not Before: Jun 24 09:01:06 2024 GMT
            Not After : Jun 25 09:01:06 2024 GMT
        Subject: CN=b8adc2fdda3148bd1ab2ca26ab4da96d90d7e4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5b:1f:4a:c7:75:08:96:26:2b:b0:74:48:3b:
                    4b:b9:88:06:48:32:69:6d:ec:bc:7d:b9:3a:24:b2:
                    0a:7f:39:a3:07:15:4d:87:c9:f5:cb:c6:0b:64:4c:
                    8e:d4:0c:7a:5a:26:77:a6:1a:db:6d:42:66:e6:d2:
                    b4:8b:2e:bc:ee:6a:4a:10:f6:86:fe:99:a5:3e:6c:
                    6a:ad:07:5d:21:86:54:fc:1d:f2:40:7c:c2:89:1d:
                    56:be:f7:02:8b:00:f9:c8:11:b8:a8:dc:23:13:da:
                    a5:83:68:ac:84:38:e6:eb:49:59:b7:f2:3e:cd:c5:
                    18:58:1d:c9:09:62:f5:c2:44:35:48:5a:23:1b:64:
                    c1:93:aa:d4:18:8c:70:32:ca:ce:f6:62:02:1e:be:
                    03:c3:82:42:5a:aa:5e:05:f9:6b:b1:0a:1c:4e:21:
                    71:17:4a:67:a5:43:31:df:f9:e5:21:24:d7:b4:d3:
                    b7:d5:01:fb:4f:94:69:f2:0a:bb:a7:6d:cb:21:70:
                    b4:61:da:98:c1:7b:ae:d9:77:4b:e4:ee:7a:e0:40:
                    3d:4b:07:2c:a6:1c:25:10:6a:b7:e2:9b:12:4d:12:
                    b7:28:83:45:89:dd:48:36:3a:77:ee:68:9f:f3:3a:
                    bf:b1:a3:dc:eb:88:66:84:40:ea:2b:df:38:08:ad:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AD:C2:FD:DA:31:48:BD:1A:B2:CA:26:AB:4D:A9:6D:90:D7:E4:A8
            X509v3 Authority Key Identifier:
                keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:25:59:bf:2c:86:23:b7:0f:21:b2:e6:9f:f6:fd:6c:fa:e2:
         3b:eb:86:3b:5d:e1:0d:09:c2:bf:85:e6:dd:3c:91:1a:b5:2c:
         a0:47:45:c2:fb:87:49:52:b8:40:90:5d:90:7c:18:2f:36:5d:
         ca:57:db:43:21:c0:35:80:07:9a:a3:88:ae:66:69:53:ac:65:
         20:f8:93:78:7c:be:92:01:b0:77:76:0c:d1:6f:d0:56:2d:81:
         fb:c7:43:8e:5d:ab:bb:4b:66:b2:e2:b6:2e:3d:17:12:95:0c:
         38:3c:2f:77:28:ae:a0:00:20:ff:27:9c:69:bf:09:6b:93:5f:
         d8:dd:c3:02:ce:8d:d1:fd:84:cf:1c:16:6e:f8:d6:9e:f9:a1:
         99:f6:68:85:b5:b2:dd:f8:14:3e:76:36:a2:01:c6:97:82:da:
         0c:fe:d2:07:3e:e2:f6:26:1b:d4:7b:c9:12:2a:b4:42:4b:a0:
         84:1f:aa:0f:ab:cb:45:c9:ea:e1:18:43:93:d7:16:b9:36:ac:
         84:4c:22:27:a0:05:a5:a2:60:8b:6c:24:e3:19:5b:93:f3:ca:
         05:35:21:09:65:48:30:fc:93:8f:f1:10:80:12:3c:79:29:76:
         99:61:70:03:04:6f:3a:04:3b:85:3f:59:9e:d5:e9:4c:53:89:
         9f:ac:fb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:36:23 2024 by rpki-client on console-ams.rpki-client.org