Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File:                     V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier:          KKmUiox5dIDdfdwQ1bUQUabCzbBM+T9+uQgI+775998=
Subject key identifier:   95:0A:C2:DE:72:C8:FB:78:2B:CF:67:51:D7:EB:09:EA:2E:95:FA:BD
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer:       /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial:       01901DEC5C3440C8C8B6885AE9CBD3930A91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number:          0AE5
Signing time:             Sat 15 Jun 2024 22:02:27 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:27 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:27 +0000
Files and hashes:         1: OTClwVpeLNYR-O65oZYvby9WwTo.roa (hash: e7Mih644ejfqvbKf7CrLGWZG48WBppyjNLqguxeucoA=)
                          2: T32jFffh8fdMOYcOgHyyilvAacc.roa (hash: 0H8udQEAJqRyQ8CTjH9741tkxYG99GACk7TGS1IHbM0=)
                          3: TBtGk_n0757D1fUFIXoumWoss-I.roa (hash: DwtOUepeJhZOPLXSyp1432e/eSCAUu2OoyC4qsdKMj4=)
                          4: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: HYTpx38Nt5FTX3O8F37aw59Fwew5+TIk7QRkp0mU940=)
                          5: geDSu9T8nTE2h1ULb9yJLuKeHi4.roa (hash: NEsebbf3uWe/EGMg5OzBNiIX9Px88dsaJiDBEKZkl+o=)
                          6: rf41ysYaivnRswwPGtBlWli3aKo.roa (hash: EegTVrZW69kkt4UEL44QAyflUSoIxkJ4m6z/TH5IT1w=)
                          7: v3sJnKUEG8k9hhi7g_PRR5O5S3Q.roa (hash: COYTauiPmssLhpskoehqlb1hGjlkYxtqPD9W1Rz2ljo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:5c:34:40:c8:c8:b6:88:5a:e9:cb:d3:93:0a:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
        Validity
            Not Before: Jun 15 22:02:27 2024 GMT
            Not After : Jun 16 22:02:27 2024 GMT
        Subject: CN=950ac2de72c8fb782bcf6751d7eb09ea2e95fabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:90:f7:b9:10:a5:77:5a:02:56:1e:86:7f:
                    c6:2c:7c:94:a8:0e:69:02:7b:13:30:64:cb:af:3b:
                    d3:ff:59:f8:67:e2:68:87:59:55:40:75:65:03:16:
                    cf:16:ad:55:3a:a3:d8:07:ca:01:3b:c3:f6:62:e9:
                    41:25:37:33:4a:ca:81:50:10:9e:36:ed:c3:8e:fb:
                    69:58:87:09:56:97:b4:e8:d9:21:83:77:7d:8b:e1:
                    70:15:4a:5c:0a:2a:62:12:d9:c7:8b:8c:d6:f7:f5:
                    f0:0c:3a:7a:f4:58:24:6b:ee:ba:6c:8f:4f:3e:ec:
                    5b:c6:12:89:64:2e:ad:bd:82:c7:16:7e:71:4e:2f:
                    1e:2f:01:e9:63:fa:68:49:2d:ea:a1:68:df:7c:ce:
                    94:d3:6a:72:77:1f:b1:d5:13:21:41:62:42:0a:c6:
                    bb:fe:01:3c:79:9c:57:b6:38:d1:b9:9e:1a:e8:58:
                    f8:54:0a:5a:b8:da:87:f7:18:e3:7d:00:c9:a9:b1:
                    07:0f:42:ac:8c:1f:2c:63:a5:6e:1e:c4:a1:8c:52:
                    f4:6b:02:09:2a:6b:c2:60:c1:a4:51:5e:ad:e2:29:
                    12:cd:2d:5e:03:a7:47:21:f3:ba:fa:aa:64:a6:6e:
                    f2:15:1a:8f:75:17:b1:f4:20:03:22:83:7e:80:0b:
                    98:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0A:C2:DE:72:C8:FB:78:2B:CF:67:51:D7:EB:09:EA:2E:95:FA:BD
            X509v3 Authority Key Identifier:
                keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:21:3d:ac:82:84:61:f3:ad:d6:fc:a8:04:d9:e0:cf:1e:2c:
         f7:54:29:38:bc:2f:e8:e6:66:79:db:d6:37:15:66:ea:b0:bf:
         74:4c:a3:9f:e4:2a:55:5b:d2:9a:37:1e:03:53:af:13:d6:e7:
         78:f3:6b:53:9f:88:1f:f0:4a:39:d8:49:17:24:f9:44:48:fc:
         7a:72:92:5a:af:01:75:48:bd:ac:61:12:c6:a4:f1:27:7a:b5:
         4b:f4:05:2a:c5:58:5f:e9:96:b6:8d:8b:a4:d7:91:39:dc:9b:
         cc:67:a9:61:54:96:d8:cb:f1:fb:de:f0:bf:09:92:03:df:7b:
         07:c8:3e:e1:4b:91:2d:89:51:22:25:c7:a2:37:80:05:73:9e:
         61:26:78:96:96:05:db:36:86:16:9c:4b:1a:14:d5:35:7e:9e:
         98:22:4d:09:49:0e:ff:72:cd:fa:af:db:b1:66:75:e9:76:14:
         7a:f4:80:3c:e0:8e:4b:b5:ce:2c:ad:6f:49:4b:bb:5d:6f:d4:
         2c:66:9e:90:3f:de:05:9f:e5:e3:df:eb:27:79:6b:e7:da:b6:
         03:20:87:f4:04:ff:15:40:4c:bf:42:39:b3:43:dc:04:04:a7:
         b1:13:2f:8e:dd:3f:d3:2c:04:5f:9a:50:00:c4:07:93:2c:01:
         a4:41:83:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:57:09 2024 by rpki-client on console-fra.rpki-client.org