Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
File:                     k9t6NCzZOS76XNM4lHQcqKW09Cs.mft (raw, json)
Hash identifier:          LgzV0pakMs66pqnsS5oOQXmyYFvL6X7F918qfnhNv6U=
Subject key identifier:   8D:25:08:3C:72:56:6A:F2:E2:44:00:00:EF:2B:52:11:04:A6:76:17
Authority key identifier: 93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B
Certificate issuer:       /CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
Certificate serial:       01903B50D1F1234736E64D0BDDE0381029B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
Manifest number:          0ED8
Signing time:             Fri 21 Jun 2024 15:01:10 +0000
Manifest this update:     Fri 21 Jun 2024 15:01:10 +0000
Manifest next update:     Sat 22 Jun 2024 15:01:10 +0000
Files and hashes:         1: AURfUP6FTf594sA_LY5fAdWU6mg.roa (hash: +0Ju5ixO1NinWN8aR1DsCdAThvo7crvF0abypXQ9lQ0=)
                          2: k9t6NCzZOS76XNM4lHQcqKW09Cs.crl (hash: ikmK4xodKIKGXNeE44o11In/YzmDSvgv9wnvXXf74Ac=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:50:d1:f1:23:47:36:e6:4d:0b:dd:e0:38:10:29:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93db7a342cd9392efa5cd33894741ca8a5b4f42b
        Validity
            Not Before: Jun 21 15:01:10 2024 GMT
            Not After : Jun 22 15:01:10 2024 GMT
        Subject: CN=8d25083c72566af2e2440000ef2b521104a67617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c4:30:d1:91:19:50:2a:a8:21:d4:f2:a2:6a:
                    72:a1:68:30:ce:70:c4:41:dd:e5:17:31:38:58:e3:
                    19:76:3b:52:0b:31:30:4a:f3:e2:f8:de:eb:24:c7:
                    e0:3a:67:62:5f:95:d2:29:a5:d1:90:4b:20:a6:c5:
                    30:02:fb:40:ad:de:53:7e:24:34:59:d9:3b:0d:7b:
                    62:e5:5b:ea:56:46:0e:1e:61:32:be:ec:f4:a2:fd:
                    aa:42:de:27:8d:7b:c3:9c:b3:39:d8:47:6e:ab:63:
                    a5:58:2c:8b:76:4f:8f:9c:f4:04:39:31:b4:94:e8:
                    97:8b:53:50:64:ac:ab:9c:28:36:eb:e1:23:ef:3f:
                    1e:6f:9b:b5:f2:6d:48:e3:6d:20:62:3e:16:41:e7:
                    75:d0:3c:3d:1c:e6:1d:30:44:b4:1b:0c:bb:3c:c6:
                    31:01:15:6e:e5:86:a9:4a:12:08:5d:e4:52:3d:d6:
                    59:83:8e:39:c5:c0:bf:16:ea:fd:af:8a:9a:1d:ec:
                    66:74:44:1f:90:60:eb:e8:dd:b6:33:7f:67:d0:a0:
                    10:99:64:f0:bc:e6:39:18:00:35:93:e8:8c:0a:ce:
                    5c:fa:64:73:cd:6f:b7:48:8c:12:27:66:9a:d6:53:
                    c1:d4:c9:1d:1b:21:db:db:48:9d:90:ed:b2:c3:19:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:25:08:3C:72:56:6A:F2:E2:44:00:00:EF:2B:52:11:04:A6:76:17
            X509v3 Authority Key Identifier:
                keyid:93:DB:7A:34:2C:D9:39:2E:FA:5C:D3:38:94:74:1C:A8:A5:B4:F4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9t6NCzZOS76XNM4lHQcqKW09Cs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/308f53-8bff-4990-8d7b-e7185cdeccd3/1/k9t6NCzZOS76XNM4lHQcqKW09Cs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:62:ed:fc:2d:63:8c:77:91:86:7a:05:c0:8c:a3:dd:12:00:
         11:cf:66:d4:5c:bc:b8:b5:34:b9:be:55:ab:34:7c:d3:f9:02:
         96:f8:79:be:c8:36:26:6f:c9:f6:e2:3f:24:d5:a7:e2:5c:07:
         61:13:b6:c7:05:df:e1:40:1e:8b:13:9e:dd:00:5e:08:87:f3:
         cb:e6:ad:a9:18:18:ce:8d:7f:cd:4f:d7:30:71:1d:92:c2:a8:
         a7:aa:0a:23:77:f8:2a:2f:0f:d7:f2:69:68:e7:7e:6e:06:2d:
         70:1b:bf:59:2d:e9:89:87:22:b0:8b:f8:4f:96:e9:44:82:e0:
         f0:9a:5e:d5:d1:e9:54:bd:fc:83:46:f9:8d:fa:db:e9:57:4f:
         0d:8a:73:3a:f2:0f:37:b4:0e:b8:56:28:59:36:ed:86:a4:81:
         da:bc:55:6e:4e:12:ac:4f:d1:2d:3b:75:f7:64:d6:a3:a3:8a:
         63:43:5b:9e:58:12:78:39:a4:d7:d6:8e:22:c2:9f:22:10:ea:
         5b:4a:ac:77:9b:12:75:d8:b1:03:a1:ce:05:31:5f:b8:83:73:
         0c:3e:95:7a:6c:8b:88:05:62:d6:fe:f7:74:e5:86:73:d5:c7:
         88:93:b1:ac:17:91:e9:0d:ec:0e:cc:67:26:b1:66:ee:a8:3e:
         cf:3d:57:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:57:32 2024 by rpki-client on console-fra.rpki-client.org