Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
File:                     Ru0nXFpziIjVgGle3TZxWVlEeSE.mft (raw, json)
Hash identifier:          HqUTb1pglNmAXg7CCGYSlONJJU4FilOfHUqv+sy4AKQ=
Subject key identifier:   B0:44:2A:5F:00:50:7B:87:84:C9:8B:E7:20:3B:46:7D:BB:7A:AE:FF
Authority key identifier: 46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
Certificate issuer:       /CN=46ed275c5a738888d580695edd36715959447921
Certificate serial:       01901EFDB6B08F8ED009CF45193BE7DDD475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
Manifest number:          0217
Signing time:             Sun 16 Jun 2024 03:01:02 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:02 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:02 +0000
Files and hashes:         1: AxE22lzFBbmtAC1GmdqQZJ2fHL0.roa (hash: S1Z7RPkGeWijknehBamkx9rCcS6FTFRLyrRuvsGqAtQ=)
                          2: Ru0nXFpziIjVgGle3TZxWVlEeSE.crl (hash: l2UGJIVOeEDWwF9c0mPYdXv1/tfaq5RhJSBgDrnVf0U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:b6:b0:8f:8e:d0:09:cf:45:19:3b:e7:dd:d4:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ed275c5a738888d580695edd36715959447921
        Validity
            Not Before: Jun 16 03:01:02 2024 GMT
            Not After : Jun 17 03:01:02 2024 GMT
        Subject: CN=b0442a5f00507b8784c98be7203b467dbb7aaeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:b0:b4:35:7b:3a:5b:62:af:c0:87:5d:48:
                    79:9f:21:43:12:56:52:db:18:51:53:62:9a:f1:ab:
                    d6:9f:cc:61:21:c3:a0:a2:4d:23:a4:0d:94:05:10:
                    40:28:23:27:6e:c0:0a:f8:68:53:bb:19:b0:c8:90:
                    5c:4d:8a:83:e7:3c:c6:9b:1a:6a:ee:73:c5:e5:d2:
                    32:9b:81:40:a3:94:62:b0:4b:29:5c:81:4a:c2:cd:
                    fb:78:f8:e4:27:7b:9c:93:0f:a1:8a:be:cd:b1:d3:
                    e6:2a:51:11:28:ca:2e:c2:83:e5:51:e7:c4:d0:4c:
                    9d:db:56:27:d7:ad:35:0c:c9:d3:e7:32:5c:36:1a:
                    fb:f3:f3:06:a0:eb:f7:15:6e:be:9e:0c:18:d1:91:
                    7a:4b:1b:b8:be:bb:e5:87:de:5d:a6:db:4a:ff:2b:
                    d1:b4:58:3b:3e:11:03:b9:8c:e6:da:5f:b8:12:8d:
                    aa:42:08:cf:03:48:50:40:1a:af:66:c5:07:24:41:
                    1b:11:49:35:df:6d:85:de:58:5e:da:ba:c8:1a:85:
                    fc:50:c3:26:f6:41:73:e2:ae:aa:36:b2:eb:c3:1e:
                    82:b9:11:bd:6a:0d:3a:fc:2a:7b:c2:33:f9:72:89:
                    68:b7:6b:b1:fb:b2:5a:87:82:ab:16:fc:22:2e:1c:
                    58:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:44:2A:5F:00:50:7B:87:84:C9:8B:E7:20:3B:46:7D:BB:7A:AE:FF
            X509v3 Authority Key Identifier:
                keyid:46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:53:89:32:f0:f9:d1:15:53:ec:72:33:fa:17:7e:f3:00:cf:
         66:dc:13:c1:87:0d:65:ae:c6:e9:3a:ba:7e:fa:29:ce:bf:e2:
         6c:7c:d8:c0:c7:26:df:ab:93:7c:17:0a:da:54:e7:f5:cd:2c:
         1a:37:65:f8:e9:80:72:8e:13:55:7e:95:af:25:20:98:f3:57:
         d4:fb:47:17:02:99:73:41:1e:b7:29:f1:26:6a:27:d2:ad:fa:
         2f:96:31:e6:ae:92:b1:75:d1:aa:76:36:05:70:e2:73:98:19:
         fb:1d:95:70:d8:17:5d:9b:d6:4a:74:27:13:20:b8:37:83:be:
         91:1a:83:a5:e7:06:68:6c:b0:c4:ea:c5:ce:17:4a:71:d4:fe:
         69:9a:c6:17:09:d7:d4:49:49:46:85:1a:3b:4a:4f:32:ed:31:
         d5:82:1c:03:f8:0f:b3:7e:60:73:f6:11:be:19:ec:a4:36:e8:
         bb:b0:3e:8f:10:80:1e:ec:2f:63:97:22:3e:12:76:df:3c:99:
         36:13:10:d5:85:13:13:af:64:0e:a2:77:f0:c5:31:31:9e:52:
         78:58:90:c1:98:4b:d5:b3:2f:83:95:2f:8d:55:12:fd:c1:9c:
         43:54:55:9f:7d:99:27:bc:44:53:b8:03:c4:7c:f4:67:64:1f:
         31:67:a5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:37:16 2024 by rpki-client on console-ams.rpki-client.org