Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
File:                     Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft (raw, json)
Hash identifier:          mpPHOLlawcNhdLUZ9ub81586UrHYUKk98cpvU4ul4CY=
Subject key identifier:   98:8B:0E:0E:39:0C:04:3F:F9:46:A2:A6:14:D3:93:FD:91:A3:AA:BF
Authority key identifier: 5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C
Certificate issuer:       /CN=5e79acd4ee40fda43022a2c9642b071da649526c
Certificate serial:       01901D45EAEDE34B9A70307C7BC3C1A83B10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
Manifest number:          09F6
Signing time:             Sat 15 Jun 2024 19:00:39 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:39 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:39 +0000
Files and hashes:         1: T0WH8YeAKrW3KGWraxOckJxN150.roa (hash: JiRrYzrbnBn8RlI3SkTFSR0zFBy1KhHr47me8hA2Shs=)
                          2: Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl (hash: jQV6gFwL2gky3FuaEd0u260rNv67gYsQT+qmw0HrYvs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:45:ea:ed:e3:4b:9a:70:30:7c:7b:c3:c1:a8:3b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e79acd4ee40fda43022a2c9642b071da649526c
        Validity
            Not Before: Jun 15 19:00:39 2024 GMT
            Not After : Jun 16 19:00:39 2024 GMT
        Subject: CN=988b0e0e390c043ff946a2a614d393fd91a3aabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f0:e2:cc:c3:03:81:1e:34:e4:dc:c6:38:bd:
                    77:7f:9e:84:6f:de:7f:cd:66:4a:a5:b0:ac:61:c8:
                    64:73:b2:70:1e:e9:b2:3b:6d:93:0b:f5:f8:9b:fa:
                    19:aa:f5:7b:71:ec:05:a9:0b:69:19:48:46:2b:ec:
                    40:a8:e4:da:b1:1e:87:50:b9:9e:7a:f4:73:d0:81:
                    0b:86:47:84:f6:ca:43:c4:fc:83:ac:d9:e8:4d:5b:
                    5b:b8:87:df:6f:6c:33:6f:d6:3b:8e:ee:eb:08:b9:
                    0c:bb:dc:81:1a:e2:59:8f:2e:96:94:7a:48:75:9b:
                    f5:77:84:22:01:d5:24:ee:1d:8a:f7:f3:df:48:96:
                    fa:4b:f3:d6:65:fa:aa:7f:85:93:90:41:64:3b:63:
                    c3:31:14:21:4a:15:08:9a:e5:d9:7b:e9:d0:c6:76:
                    df:fe:72:28:bd:1d:4e:73:6c:11:b0:1b:68:be:9a:
                    38:ba:26:e9:25:c8:17:51:66:bf:1f:90:c7:9d:71:
                    4b:a7:b2:64:b1:48:da:98:86:1c:cc:10:d1:e2:66:
                    e9:c3:e5:46:04:ba:ae:11:ca:64:64:5a:82:ed:b3:
                    7c:1f:9d:72:6c:9a:b8:5b:75:77:5d:a9:83:9e:6b:
                    39:33:d7:c1:94:7e:21:ec:6a:5b:15:64:db:1d:3b:
                    bc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8B:0E:0E:39:0C:04:3F:F9:46:A2:A6:14:D3:93:FD:91:A3:AA:BF
            X509v3 Authority Key Identifier:
                keyid:5E:79:AC:D4:EE:40:FD:A4:30:22:A2:C9:64:2B:07:1D:A6:49:52:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnms1O5A_aQwIqLJZCsHHaZJUmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8bcb30-87e4-43b5-8246-eb8da5954f3b/1/Xnms1O5A_aQwIqLJZCsHHaZJUmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:c0:3b:42:56:df:d4:e0:58:44:3f:33:5e:c4:c1:a5:05:55:
         9c:7e:97:d9:17:d7:1e:47:49:14:2a:97:80:41:12:ff:5e:1f:
         85:4d:b0:1c:a9:3f:eb:15:5b:0a:4f:77:ff:35:b8:46:d2:fc:
         e9:9b:3a:ae:30:a4:bd:a3:e0:18:59:2f:52:28:55:cf:0c:b6:
         92:ea:f3:bf:f9:c0:f0:3e:e4:a7:cc:d7:f6:04:f2:06:59:eb:
         68:c0:79:32:49:25:95:ea:b2:4e:80:79:65:94:2d:5b:68:df:
         b3:b8:c6:dd:90:1c:34:5f:dc:ea:5c:0c:23:45:72:31:3e:50:
         9b:2b:56:97:71:26:5d:d0:9a:f9:a2:32:d1:6e:42:b5:de:2d:
         59:22:39:2e:07:1f:c3:d2:64:b0:7e:15:0b:fe:d7:02:b5:7d:
         e5:79:92:98:bb:0d:51:1a:24:b8:a3:59:b5:14:2e:6f:6a:5b:
         11:69:8c:69:75:17:52:8d:dd:2b:57:ef:6b:63:6f:b3:46:bc:
         a3:83:73:f8:b1:1e:ea:66:ef:0a:7e:a8:cd:7c:45:05:6b:fe:
         29:62:11:37:b3:c6:6f:5a:49:f9:f3:16:9b:6b:4a:d5:87:6c:
         9b:b1:02:1b:1d:99:80:ef:5d:dd:cb:f9:94:89:44:86:ec:e0:
         7d:78:92:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:07:29 2024 by rpki-client on console-fra.rpki-client.org