Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
File:                     huGrpgDN5ewxgxmxVZS2irlslWw.mft (raw, json)
Hash identifier:          Ybn0Xv1Uj1JLfTiRWJyoctE4F9z9qI+5IVNGKffAyEE=
Subject key identifier:   AC:72:F9:B0:99:7A:87:00:60:FF:C3:88:5C:28:7E:B9:4E:2B:35:0D
Authority key identifier: 86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
Certificate issuer:       /CN=86e1aba600cde5ec318319b15594b68ab96c956c
Certificate serial:       01901DEB7842D168EBA06BF5A64D243458E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
Manifest number:          0AC8
Signing time:             Sat 15 Jun 2024 22:01:29 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:29 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:29 +0000
Files and hashes:         1: gYQ-1qIh-UzRZlY5ivJD1QNwnek.roa (hash: 0Wm/SqP17ajbIJd4t2GwDAx1IhcA/ruJWIh3lhfTRhA=)
                          2: huGrpgDN5ewxgxmxVZS2irlslWw.crl (hash: 8VbsIHZepFuiOsiUBAmvgDXAXNAoJczR+LcTxzALkzM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:78:42:d1:68:eb:a0:6b:f5:a6:4d:24:34:58:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86e1aba600cde5ec318319b15594b68ab96c956c
        Validity
            Not Before: Jun 15 22:01:29 2024 GMT
            Not After : Jun 16 22:01:29 2024 GMT
        Subject: CN=ac72f9b0997a870060ffc3885c287eb94e2b350d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:03:3f:d2:d2:6e:c1:4c:af:8b:6d:e4:85:8e:
                    b7:b7:c1:7e:7c:f6:7e:a9:8d:55:be:24:2e:69:07:
                    b0:97:a2:a3:34:ba:66:71:cf:b2:d4:00:94:fd:9a:
                    00:e5:bd:ac:ac:bd:15:d3:bd:18:e7:8d:c4:1f:68:
                    f5:dd:fd:0c:8f:6f:3d:f7:c3:ab:a3:0f:8e:57:92:
                    c2:65:de:56:b8:bb:1b:a1:ce:03:74:b6:17:16:5d:
                    48:89:aa:01:0f:aa:cd:07:cb:8b:cc:97:69:7b:f1:
                    57:5a:b1:b6:a1:47:35:92:8d:43:6e:82:16:70:f2:
                    51:57:ae:df:40:0a:f0:bc:f0:b3:4e:44:7d:f5:cf:
                    dc:91:2d:4a:16:3d:df:97:6b:d7:67:78:26:4b:4d:
                    81:22:ea:fd:49:e6:e7:bd:4d:2c:a9:61:d7:0a:ae:
                    3e:68:36:86:17:b5:53:ec:81:2c:79:de:37:51:2a:
                    ac:4d:0a:2b:c0:43:0a:a2:2a:43:79:18:62:3b:09:
                    d6:47:75:21:0e:fa:25:5b:ef:12:eb:8a:13:de:ba:
                    0a:3a:99:7d:62:57:23:2f:c2:07:a2:8f:41:74:de:
                    6f:3e:1b:b6:61:96:71:4e:24:78:ac:26:2f:35:0d:
                    8a:16:bb:27:e4:58:83:2a:4b:8c:3b:95:76:88:c9:
                    d1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:72:F9:B0:99:7A:87:00:60:FF:C3:88:5C:28:7E:B9:4E:2B:35:0D
            X509v3 Authority Key Identifier:
                keyid:86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4e:bf:cc:cb:49:87:f2:cc:e8:94:22:be:92:5b:5f:df:79:
         6a:2c:17:6c:6b:32:c8:e8:41:70:a9:4f:ef:38:43:7b:02:37:
         1f:ff:c4:6f:f7:df:72:f2:92:aa:55:fc:1b:6b:43:1a:d3:84:
         c9:f5:e9:b7:e6:ad:80:9e:fb:ce:6e:d9:d4:92:de:0a:72:0a:
         46:06:e0:3b:a2:c2:33:5d:b0:74:d7:74:3d:0f:f1:17:2e:90:
         67:9d:46:84:ba:f7:5c:12:94:36:c6:a2:a8:7c:dd:20:77:1f:
         7e:64:b7:5f:68:d3:9b:40:e6:27:05:9a:20:6a:c4:59:e9:9b:
         05:77:1c:9e:ac:6e:7a:98:ef:6c:e0:1e:24:0e:4f:99:41:1e:
         bb:33:83:05:fc:62:02:60:38:5c:ff:47:de:32:a6:4a:4e:3e:
         55:16:17:27:15:85:1b:88:f3:1a:69:74:a9:0c:c9:ee:37:70:
         a9:ef:0a:64:52:26:f1:5b:80:32:a0:62:24:3e:d1:12:21:2c:
         e0:de:3e:bd:0a:59:26:33:46:30:ed:12:c8:bd:34:c5:3f:29:
         78:83:e0:0d:31:9d:00:cc:ac:ed:e6:b1:4f:ed:70:47:2d:d1:
         27:b1:8a:89:a2:96:45:76:49:6f:fc:c5:06:4c:ac:da:39:78:
         54:ef:f4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:16:55 2024 by rpki-client on console-fra.rpki-client.org