Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
File:                     mpGNfRgPNudlEqQWEaCyiotAxS4.mft (raw, json)
Hash identifier:          pk4eAkW+MzcrChwLbOjbEsZ4Dsb9Yd8YIBICEdqiw7k=
Subject key identifier:   C2:FE:25:19:3E:C4:F7:48:BD:46:05:62:C3:84:4A:E8:A3:AE:8B:20
Authority key identifier: 9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E
Certificate issuer:       /CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
Certificate serial:       01901CD8976AE9217A238367587590414DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
Manifest number:          0BC0
Signing time:             Sat 15 Jun 2024 17:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:14 +0000
Files and hashes:         1: Nznyy9xshgCweLUD1_bugCiQoXo.roa (hash: gXQcEF6exSelIBpq7F1GMZVPqcnvH6gLtsL5J/YdGqk=)
                          2: mpGNfRgPNudlEqQWEaCyiotAxS4.crl (hash: lnhlEitTL7S0iB79Sp0+am3Hx1990YZjzYJfo45ksww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:97:6a:e9:21:7a:23:83:67:58:75:90:41:4d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a918d7d180f36e76512a41611a0b28a8b40c52e
        Validity
            Not Before: Jun 15 17:01:14 2024 GMT
            Not After : Jun 16 17:01:14 2024 GMT
        Subject: CN=c2fe25193ec4f748bd460562c3844ae8a3ae8b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:12:3f:be:cd:7d:ef:3b:b7:a6:c6:e2:b7:
                    de:04:07:07:b8:a3:62:6e:ea:bc:aa:d8:c6:36:66:
                    34:ff:0e:34:44:03:65:15:b6:25:5f:bd:90:14:00:
                    25:f9:68:2c:cc:9b:f6:cd:80:e9:b3:a2:b2:13:6b:
                    ab:3c:5d:bb:f3:31:14:42:25:3b:5a:2b:46:d2:dd:
                    59:9b:23:ba:b6:6a:20:a1:81:29:b6:40:e1:ae:52:
                    66:7c:ba:04:70:dd:b0:7d:3a:02:e5:01:a3:5f:4c:
                    15:a4:33:68:41:b0:50:ea:50:86:bb:bb:f6:33:5e:
                    b4:92:6e:8d:2e:4b:a8:24:b7:07:d6:18:a8:30:da:
                    89:b1:e6:3f:9b:03:3d:b7:79:53:74:b8:2c:ee:00:
                    e0:9c:34:2e:95:09:1d:3a:4f:bc:35:f6:7f:2e:9b:
                    a5:0e:af:db:48:ff:95:61:e3:69:d4:c2:f7:3a:3b:
                    5b:d1:d5:82:27:48:40:30:72:8d:cd:90:46:10:96:
                    6c:78:9b:a8:5f:a0:fd:01:fa:3e:d6:45:17:b2:ca:
                    12:44:1c:67:d1:28:5f:fe:35:ac:26:25:1d:66:ba:
                    6b:57:fc:37:2b:6f:7d:2b:fc:b5:c2:cd:ce:ca:93:
                    f7:d2:af:21:33:4d:da:d2:3e:84:51:af:1a:8b:62:
                    5c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FE:25:19:3E:C4:F7:48:BD:46:05:62:C3:84:4A:E8:A3:AE:8B:20
            X509v3 Authority Key Identifier:
                keyid:9A:91:8D:7D:18:0F:36:E7:65:12:A4:16:11:A0:B2:8A:8B:40:C5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpGNfRgPNudlEqQWEaCyiotAxS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269363-b35f-422c-b076-93f486b8b961/1/mpGNfRgPNudlEqQWEaCyiotAxS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1d:b7:41:a1:87:6c:96:45:a7:07:e6:b0:a5:a2:c2:27:54:
         e4:eb:1e:08:8d:e3:a4:33:aa:60:94:f9:fe:b9:43:e4:f0:a6:
         09:51:06:c0:be:24:a1:57:e3:e9:eb:77:34:7f:c2:0e:96:c2:
         7f:c9:60:1b:01:34:8f:24:91:8f:c2:50:04:76:a5:ce:59:3e:
         e6:9b:6e:1b:be:23:eb:1d:53:ad:7f:5b:b5:00:fd:c3:4f:78:
         3d:d2:ef:3c:d6:53:43:9c:25:5a:fc:18:7d:a6:99:55:0b:9e:
         52:d7:b8:a5:cd:b6:6b:ac:cd:6c:c0:46:d3:26:73:da:30:1b:
         4c:f0:15:66:03:e1:cb:a5:a4:ef:d6:96:71:c2:3a:09:94:9e:
         da:91:f6:c6:49:81:39:4b:52:60:f4:66:6f:6a:20:79:d6:87:
         ca:d3:a9:26:53:6f:9d:c9:95:6f:91:04:90:06:02:a8:4c:cd:
         dc:ab:6b:f3:5d:6c:20:7b:84:1e:83:56:9d:6e:63:ce:c3:f1:
         76:0c:2a:18:3e:a6:c3:5a:73:dc:a4:0e:fe:38:90:ed:90:c4:
         8d:98:fa:c9:21:70:47:4c:ca:8b:a6:07:72:46:98:33:1d:bb:
         f7:5f:b5:ea:22:a4:aa:23:ee:c7:0c:54:26:bb:b2:28:27:fe:
         7a:c7:f5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:31:23 2024 by rpki-client on console-ams.rpki-client.org