Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
File:                     B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft (raw, json)
Hash identifier:          VB0HhXmz65EplfNQ17nAg2Qt5q0KkPef7cxVnSXiPE4=
Subject key identifier:   0D:A6:09:EB:23:81:BD:ED:1B:10:A7:55:B1:04:08:60:20:70:D5:98
Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
Certificate issuer:       /CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Certificate serial:       01901C6A99421441E7E5D5FEB201C106C859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
Manifest number:          08E6
Signing time:             Sat 15 Jun 2024 15:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:06 +0000
Files and hashes:         1: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl (hash: ndOOuAinxIacXB2l3401k86xCFMHkACQdNnfD966tns=)
                          2: oRPPoo_FQQshe5-05UGeODF2NTo.roa (hash: lrYfaDtMuNb2xy6HnrslCk5nUq1YfOHVDx4nsc4NOyA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:99:42:14:41:e7:e5:d5:fe:b2:01:c1:06:c8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad
        Validity
            Not Before: Jun 15 15:01:06 2024 GMT
            Not After : Jun 16 15:01:06 2024 GMT
        Subject: CN=0da609eb2381bded1b10a755b10408602070d598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e7:ad:0b:8e:e1:42:7b:07:e2:10:af:09:67:
                    fa:4c:fb:11:43:99:2e:4a:1e:2e:ad:06:37:90:9a:
                    f9:3b:9c:11:79:80:ef:4b:f4:b6:b8:be:cb:e2:fb:
                    c4:a2:da:dd:1c:a6:9c:68:e6:07:49:c2:70:b5:ec:
                    dc:7e:ce:19:d5:dd:6b:82:de:ef:f5:9f:5a:be:c6:
                    fa:c8:1d:d0:cb:1f:5e:5e:a3:33:72:63:31:a6:80:
                    7e:e6:1c:17:33:e0:90:b9:f2:30:93:1b:ea:b6:21:
                    c4:64:20:12:74:37:dc:9e:7a:89:d5:3b:31:9d:0a:
                    22:7b:84:81:31:08:7c:79:92:09:22:ab:66:74:b3:
                    9c:5f:56:73:85:d2:b3:c8:e1:66:c2:00:68:29:b3:
                    3d:2c:65:ff:88:16:4b:ac:3f:d3:01:16:41:91:85:
                    da:3c:c2:a1:d0:fe:ed:a7:db:4b:63:19:ea:54:58:
                    8e:00:bc:8d:92:2d:1d:75:74:ec:44:d3:c4:2c:53:
                    74:d1:fa:cb:e5:de:9b:b8:92:6a:64:26:e5:d6:92:
                    77:f6:e2:2f:21:ec:93:bb:44:12:16:6b:0b:77:ad:
                    e0:82:77:55:37:4b:b5:40:68:34:f9:d2:f6:02:07:
                    d1:e3:f5:b8:28:22:18:4b:bb:f2:99:05:f5:23:26:
                    c2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A6:09:EB:23:81:BD:ED:1B:10:A7:55:B1:04:08:60:20:70:D5:98
            X509v3 Authority Key Identifier:
                keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ee:f5:63:3f:5c:fd:56:7d:42:10:a9:9e:70:06:97:0f:04:
         19:ba:a3:75:15:1d:31:d8:6b:bb:25:b4:8b:7b:73:c3:4d:7b:
         95:b1:45:ee:52:cc:2c:c0:03:56:e6:cc:f6:e4:36:8c:4a:47:
         cf:c1:0c:c3:ae:12:22:47:fb:1c:7d:de:fd:c6:63:75:79:65:
         b0:ed:2f:d3:cc:ff:54:55:81:a8:b2:6c:18:0f:7a:e2:82:4c:
         10:74:eb:15:2e:e2:b0:89:34:dc:31:b3:f7:49:ed:c2:dd:a0:
         fe:56:2e:a0:62:f0:0e:2e:a8:63:e6:26:01:00:2d:72:61:d4:
         73:d9:94:a8:d8:e9:8e:2b:57:6d:57:5c:e2:ee:ba:81:ee:a9:
         ad:a6:fa:d3:a5:ed:ce:34:53:27:14:17:0b:db:4f:bb:a7:64:
         68:ba:e9:bd:59:45:49:d1:3e:c5:76:b3:27:47:3b:95:1a:9a:
         06:79:67:54:18:24:6d:43:ee:fd:d5:32:6b:1d:6d:21:fa:20:
         98:30:e2:c2:ca:0f:40:bf:da:79:b6:c2:c0:fe:0f:6a:3e:0f:
         04:6c:78:86:aa:a6:99:a5:8a:ef:ab:a2:1c:16:75:9e:c6:74:
         aa:9f:c4:b1:a1:0c:b4:48:70:38:d8:c4:f0:b8:b0:65:90:ca:
         28:41:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:42:16 2024 by rpki-client on console-ams.rpki-client.org