Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File:                     sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier:          1MuSgCb6j3kedHYVyUYTOFVhLDH3w30nbhnuNtU8oUs=
Subject key identifier:   6D:86:34:EA:96:B7:5A:E6:0C:86:89:10:8C:5C:63:8A:51:FD:58:9E
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer:       /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial:       0190448CD4BE92C170DB59FDAA0077FF355A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number:          09A4
Signing time:             Sun 23 Jun 2024 10:03:18 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:18 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:18 +0000
Files and hashes:         1: TqJLC5T4qcU83RFlw_zjrj7i0Q4.roa (hash: 9ID69/1oJ36KmKFpX8gutiLoNsxwXLg7m07ievGlz8A=)
                          2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: r7f4C0eRHn6QEjhmY7SEGz7MlIU/aBfwJW6qJnOl71A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:d4:be:92:c1:70:db:59:fd:aa:00:77:ff:35:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
        Validity
            Not Before: Jun 23 10:03:18 2024 GMT
            Not After : Jun 24 10:03:18 2024 GMT
        Subject: CN=6d8634ea96b75ae60c8689108c5c638a51fd589e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:1b:cc:50:98:9c:b0:37:f8:1f:14:f8:51:
                    32:34:63:d7:3f:3a:c5:ae:5e:7f:d7:57:96:f7:5c:
                    4c:b3:fc:83:58:50:62:31:e9:cc:42:33:fb:df:e8:
                    d1:e5:e7:98:13:62:f4:8a:ca:bd:e4:bc:78:c1:af:
                    0d:c0:49:d6:5c:63:c9:46:b5:b4:30:2f:e2:16:33:
                    bf:85:58:58:de:22:15:4b:69:c0:6d:7d:ed:7e:39:
                    97:fc:0f:c4:59:4f:62:ea:42:e8:b2:8b:c9:0b:39:
                    e9:29:33:24:ae:71:79:03:b4:30:59:4c:29:98:8f:
                    5a:a2:41:4f:47:af:44:ab:09:3e:e0:ef:0f:81:de:
                    af:5a:49:42:24:7d:b0:61:6a:77:c4:de:0b:7f:8b:
                    91:bd:b8:0d:df:41:56:a1:6e:6e:a0:eb:88:82:ff:
                    66:c3:04:09:41:59:4c:7d:cc:c0:1d:05:98:c6:92:
                    c7:52:78:c0:43:a4:43:10:1f:fa:8c:4f:46:a7:12:
                    f2:72:3a:ae:82:6d:6c:2b:79:67:12:34:8f:18:2b:
                    78:b7:d2:bd:d8:5f:b9:ad:7e:0a:3c:ba:91:a7:b1:
                    ba:99:73:6b:48:7d:bc:7c:47:8f:16:1d:0d:e2:46:
                    42:98:c9:ab:3b:90:c4:2b:87:9c:f3:77:3b:01:aa:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:86:34:EA:96:B7:5A:E6:0C:86:89:10:8C:5C:63:8A:51:FD:58:9E
            X509v3 Authority Key Identifier:
                keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:55:b2:cd:8e:fc:44:99:75:08:75:eb:1f:da:79:66:62:1c:
         00:30:27:8b:f1:dd:85:d2:7b:72:ce:e3:99:14:64:37:c9:03:
         f3:c1:09:9a:01:89:4a:05:88:b2:2f:8d:5d:84:5c:96:b5:01:
         96:ea:d2:b2:41:fd:29:ed:e9:15:20:56:87:69:f3:4e:c5:c6:
         60:5c:21:b8:fa:3d:e0:2d:a9:f2:74:8c:af:d9:9c:cd:d8:b9:
         1d:f0:28:74:d8:f3:37:4b:28:d8:28:e3:fa:0e:cb:fb:86:8e:
         0e:ee:54:2d:7f:4f:f3:af:cf:db:e0:64:bb:bb:88:b0:55:c9:
         6c:ee:41:5e:16:fe:42:c2:74:f6:59:91:8c:b7:1a:d3:ea:18:
         14:cb:38:1f:97:da:88:b1:24:e5:de:64:b4:86:67:c5:c0:4b:
         fe:97:24:7a:d4:79:ff:f0:e6:20:5d:d9:f4:37:0f:d6:dd:15:
         cc:20:b3:c2:4a:f1:c4:f1:f9:3b:80:da:f9:b1:4f:0e:e6:19:
         78:f7:e2:9a:a9:02:43:2e:8e:5a:09:7a:b1:7a:cb:6c:1a:45:
         52:8a:f9:26:04:67:ce:6a:a6:70:2e:ca:6b:57:9f:26:5d:7e:
         a3:66:a1:87:31:b6:8d:e2:b2:b6:78:2e:98:54:bc:c5:45:30:
         75:b1:da:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:05:22 2024 by rpki-client on console-ams.rpki-client.org