Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
File:                     kGSznoDKHN5MrcC8jqK0HqbSfHY.mft (raw, json)
Hash identifier:          uC13U29WxHK3WVjMqkoV8e7oWZ31uDj7YZ/M0Xotltc=
Subject key identifier:   23:F0:E6:20:25:CA:9F:DF:7F:BF:36:14:7E:83:50:F0:E2:8F:39:D8
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Certificate issuer:       /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial:       01901EFDAE8CEB0CC73CED3595D1B97531EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
Manifest number:          11C8
Signing time:             Sun 16 Jun 2024 03:00:59 +0000
Manifest this update:     Sun 16 Jun 2024 03:00:59 +0000
Manifest next update:     Mon 17 Jun 2024 03:00:59 +0000
Files and hashes:         1: 7FbcCSTUohUZkrk8-PnBGbJ_8Hs.roa (hash: sO5C+3foD0pQMBJ7ClDoNlsFfaxLEJJEawMkzg/BgwI=)
                          2: kGSznoDKHN5MrcC8jqK0HqbSfHY.crl (hash: pTDWpb6YPRqBcmyzCMWDP6VPvOxXgY3Jf3L4nyKWCkk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:ae:8c:eb:0c:c7:3c:ed:35:95:d1:b9:75:31:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
        Validity
            Not Before: Jun 16 03:00:59 2024 GMT
            Not After : Jun 17 03:00:59 2024 GMT
        Subject: CN=23f0e62025ca9fdf7fbf36147e8350f0e28f39d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:c8:89:bb:e8:a4:79:ba:db:f2:97:68:a0:
                    d1:86:7f:7c:a2:03:84:ca:45:18:f7:6e:35:c4:00:
                    dd:b3:87:97:de:91:19:e7:c6:54:02:8f:73:f5:91:
                    41:5d:ae:99:85:e2:06:6b:3e:2e:47:71:76:86:22:
                    ad:57:46:fc:e4:e6:23:c1:dc:6a:09:6b:2a:b9:c2:
                    2b:b6:47:ba:79:23:ee:06:e7:87:5c:07:58:92:a4:
                    4a:60:76:ff:14:83:de:4a:75:9a:60:2d:c6:c8:e4:
                    0d:25:3a:28:7e:56:6c:ab:6a:ec:eb:82:94:35:c5:
                    e5:6f:9e:be:48:f3:34:25:3d:67:ea:c0:00:52:7a:
                    9c:73:63:a3:68:90:a2:17:c5:60:3d:f4:21:9e:64:
                    3b:b9:62:1c:92:dd:1d:19:0f:c2:6a:08:80:ec:81:
                    a9:ce:7b:f3:41:46:cd:e9:37:c6:42:2e:9e:38:69:
                    0c:23:d9:77:c0:34:59:8f:8e:81:39:2b:4e:3d:3f:
                    06:70:3f:ab:41:ef:85:70:1a:fd:61:a1:a2:5f:27:
                    70:ff:03:57:e3:25:e5:76:7e:d9:7c:2c:a6:94:3b:
                    fd:60:9a:8b:8b:c4:68:85:dc:aa:fd:ed:f0:3a:1b:
                    e0:e1:fe:84:67:ca:8d:ce:ae:e5:d6:8d:d7:91:4a:
                    09:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F0:E6:20:25:CA:9F:DF:7F:BF:36:14:7E:83:50:F0:E2:8F:39:D8
            X509v3 Authority Key Identifier:
                keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:25:b0:b5:60:40:7a:8c:72:4c:20:c8:27:39:a8:ff:f8:fb:
         13:c9:a8:c4:02:d1:5e:1a:8a:dc:df:79:b3:6e:50:e6:a4:9a:
         1a:2a:39:96:a3:ce:58:d7:e8:bb:91:d0:49:3a:32:ef:2e:6c:
         28:3f:ec:e3:20:e3:15:f2:bf:91:89:a5:4f:32:23:02:39:77:
         6a:50:2f:43:c2:b8:36:6c:66:07:80:ce:1e:e7:8a:43:8f:af:
         15:a8:39:01:66:bb:16:27:59:78:5c:22:90:08:36:e1:f1:b0:
         8f:77:1b:9a:93:97:77:dc:81:78:9e:a6:85:b3:a6:93:e9:73:
         ae:4b:39:a9:2b:59:02:83:1f:82:79:03:db:e9:47:31:92:75:
         0c:f5:03:63:07:8b:51:03:51:a2:62:84:eb:d5:22:9c:57:6d:
         3a:bd:d3:71:c1:b7:ab:52:a1:a4:db:46:2b:2f:77:4c:46:30:
         57:d9:30:2a:44:08:78:94:b4:27:5a:c5:d4:71:14:72:4b:87:
         ea:d9:f4:bd:f8:3c:33:ab:57:aa:1c:df:e6:44:69:26:da:19:
         31:c4:f7:67:15:d9:2d:e4:aa:99:76:55:22:31:d9:d0:c4:90:
         b6:4b:19:22:a4:8e:27:2d:4d:2e:cd:b8:b5:12:3c:61:ee:ca:
         db:1b:b2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:37:10 2024 by rpki-client on console-ams.rpki-client.org