Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
File:                     hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json)
Hash identifier:          MIylqzSK1JZb9H2dF+c38cDjJ8nhxPWq/Kdd0kmLiaI=
Subject key identifier:   7F:E9:98:BC:88:2C:2F:47:56:FE:71:07:AF:E6:9B:F7:4F:EB:A7:C0
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Certificate issuer:       /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial:       01901F345632C4C284AD9D1A668924E88C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
Manifest number:          11C9
Signing time:             Sun 16 Jun 2024 04:00:41 +0000
Manifest this update:     Sun 16 Jun 2024 04:00:41 +0000
Manifest next update:     Mon 17 Jun 2024 04:00:41 +0000
Files and hashes:         1: NzgX5FxQVTKyP0RkOGA8ki3UZSI.roa (hash: oE8elrF3lo1hobttvaz8QfoYxakKNg29DssnKS4YlK8=)
                          2: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: 7BLRHU1ggoM2rsd5HFU6mHf/vBKWr/JW0vFDk76ZJWc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:56:32:c4:c2:84:ad:9d:1a:66:89:24:e8:8c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
        Validity
            Not Before: Jun 16 04:00:41 2024 GMT
            Not After : Jun 17 04:00:41 2024 GMT
        Subject: CN=7fe998bc882c2f4756fe7107afe69bf74feba7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:e5:4a:63:10:40:1b:d8:31:4c:03:ad:5f:
                    ea:a7:31:89:44:a7:22:b0:d4:f5:44:7d:1b:21:a5:
                    6c:9e:a4:16:22:48:de:65:49:c3:6b:60:cd:22:ae:
                    e9:66:e6:60:bf:f4:81:07:bd:56:87:52:84:38:06:
                    e3:c7:12:34:a2:80:f0:f4:b9:aa:25:e3:40:0d:ee:
                    f3:f7:a9:5d:48:f3:50:c5:cb:3e:a4:e0:78:40:dd:
                    d4:ad:6d:62:31:0d:ef:fb:8d:66:6a:f6:b0:25:12:
                    46:1c:68:b5:88:cd:9e:b0:2a:64:e0:52:04:49:37:
                    9b:5b:08:a7:9a:2a:9a:ab:04:27:5c:41:4b:3f:ae:
                    02:8b:02:00:1b:28:bc:34:d1:88:08:35:f0:f5:b2:
                    df:96:46:e9:f9:fb:d7:27:9a:52:b0:2b:ff:4a:d1:
                    e6:8a:83:72:d1:ab:76:5d:0e:1c:35:8c:e0:1d:15:
                    76:90:92:4f:ab:95:f2:2f:83:72:88:22:72:73:51:
                    45:83:6b:96:95:79:9d:5a:7f:31:f4:5e:1c:f8:6f:
                    40:2c:5b:02:d8:53:71:65:0d:80:3f:18:9b:7e:c4:
                    48:2a:01:d8:be:bb:fa:e1:1b:15:e5:32:a3:4b:2e:
                    f4:cb:6e:6d:a4:72:55:36:9f:fb:a1:2c:b3:5b:25:
                    3a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E9:98:BC:88:2C:2F:47:56:FE:71:07:AF:E6:9B:F7:4F:EB:A7:C0
            X509v3 Authority Key Identifier:
                keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5e:bf:c6:1d:1e:14:b2:dc:02:8e:b9:f1:0c:76:8d:4f:f2:
         b3:46:62:79:4e:7a:d2:0a:47:6a:48:c1:a3:63:a2:64:79:59:
         d8:da:7e:8b:b7:e1:6e:6d:81:bc:ae:0c:f5:50:e7:3f:26:49:
         59:fc:af:82:f2:33:cb:ed:77:27:d9:5b:06:02:95:98:7b:6b:
         52:0a:ed:98:80:50:7d:05:64:b5:9c:cc:f1:01:5b:5f:d9:33:
         6f:c7:5e:d1:60:e3:1e:58:41:0b:93:fa:04:b1:a2:b9:7d:0f:
         fe:27:87:30:52:dd:db:73:ee:c6:f6:7b:89:47:a9:e9:ca:f2:
         18:2d:05:d7:f8:af:26:10:2b:ed:d4:12:b3:2b:f9:e4:e9:a6:
         6b:7b:d9:57:e9:92:48:a4:d6:36:dd:f7:6c:cc:6f:54:0b:52:
         59:5f:bd:2c:6a:2c:bf:74:1f:92:96:5d:f1:f5:6d:27:4a:f3:
         db:5b:1c:ec:f8:3d:05:ed:57:eb:91:09:8a:e7:c9:26:fc:e0:
         bb:b9:c5:22:88:70:87:60:4c:10:09:7f:4a:19:00:62:80:a8:
         7c:0a:5f:ff:5b:0d:de:29:7d:2d:be:c9:89:ba:61:0d:a5:97:
         5b:5d:ba:9f:b3:3e:69:ca:16:95:9e:7f:ef:83:a5:b1:e7:56:
         0f:d9:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:37:44 2024 by rpki-client on console-ams.rpki-client.org