Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
File:                     rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json)
Hash identifier:          HhXqcpmt8eQbpSlXTtodWCxphE25djUuqfXJTjzKOlo=
Subject key identifier:   9F:FB:4F:05:E3:B5:34:FB:FE:E1:23:99:E4:D8:86:B9:50:23:80:E9
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Certificate issuer:       /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial:       01901E8FFBC5A2708C1F9D2D135CBF76A809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
Manifest number:          0F08
Signing time:             Sun 16 Jun 2024 01:01:10 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:10 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:10 +0000
Files and hashes:         1: EDgSaZwV4G-vCadph_HbcA1FV9I.roa (hash: y0G1Yovm9AiF27/VRAzxCkVWRIxa7rz8Hf75po8bnqM=)
                          2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: 9pKny21AQGEKv3bHw6QzpcjGSJEOoDR+3jUdhOWALfw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:fb:c5:a2:70:8c:1f:9d:2d:13:5c:bf:76:a8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
        Validity
            Not Before: Jun 16 01:01:10 2024 GMT
            Not After : Jun 17 01:01:10 2024 GMT
        Subject: CN=9ffb4f05e3b534fbfee12399e4d886b9502380e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:da:cb:04:ca:28:e5:53:8e:ed:2a:ce:42:13:
                    e5:43:d2:88:ef:60:6e:9c:cf:1d:9b:a3:4c:6c:37:
                    8f:36:79:53:2d:37:8a:24:80:15:6c:8d:8f:d1:6b:
                    ba:ef:a3:84:a3:49:35:72:fe:b1:7f:b5:f5:48:e1:
                    19:38:e2:f9:0e:98:a4:1e:e6:40:5a:4a:38:c6:66:
                    c8:ec:6b:a0:2d:82:66:41:fb:b3:f8:38:ec:76:1c:
                    64:29:4d:46:46:f0:00:9c:c8:97:0a:36:cd:83:80:
                    39:76:de:74:06:b3:6c:3a:72:01:94:1d:2a:06:71:
                    84:3e:e2:37:f0:c5:7c:ac:3d:cc:65:81:ad:41:b2:
                    6b:d1:c8:57:61:35:98:ee:1c:e0:17:f0:12:cb:c5:
                    62:00:fe:0b:80:ef:34:54:ed:f1:28:ab:a2:15:e9:
                    fd:52:ec:c1:f2:e1:2a:df:fc:fd:cc:26:9d:59:be:
                    63:1c:09:95:fb:58:23:c8:f4:f5:bd:e8:39:b7:08:
                    c0:82:0c:a9:af:4f:e0:a5:27:ce:3a:5e:5f:a3:24:
                    c8:56:a3:50:b0:65:39:e5:15:9a:67:8a:f0:63:07:
                    ed:13:64:cb:b4:f4:16:a3:0c:e6:3e:67:db:a2:64:
                    6e:52:3a:f5:b4:a1:2d:e4:26:da:6b:7a:89:24:03:
                    55:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FB:4F:05:E3:B5:34:FB:FE:E1:23:99:E4:D8:86:B9:50:23:80:E9
            X509v3 Authority Key Identifier:
                keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ce:52:3f:ca:0d:fa:35:f2:81:3a:aa:e6:17:d3:6b:d2:a3:
         28:01:d4:c4:9a:69:bb:61:4e:39:41:74:f7:48:53:f2:6e:f8:
         2f:a7:00:7e:dd:23:95:83:a2:06:79:69:60:96:c8:6b:67:85:
         e9:ee:af:53:f4:55:78:7f:f9:d9:ec:d9:ef:ff:6b:ac:77:4a:
         de:63:e1:2c:d1:8e:c3:1f:93:ee:07:fc:dd:28:1f:2e:f5:08:
         08:05:c8:c9:7b:55:dc:4d:2c:41:ab:2a:0d:80:f8:66:ce:11:
         f2:12:39:2c:2b:e0:6c:0d:0f:a4:75:75:4c:88:e8:64:15:dd:
         21:e8:c4:0a:4d:fd:74:73:f8:af:8d:e2:e2:db:72:f6:2a:58:
         b5:0b:94:01:af:ce:43:18:76:87:e3:06:16:1c:e6:21:be:91:
         e4:90:30:a0:2a:05:46:e5:9c:86:c6:98:60:59:0c:84:58:ea:
         47:a6:5d:67:86:68:86:72:12:ca:a5:a6:43:eb:cc:06:35:3d:
         36:9d:6f:e9:a4:1a:f4:a0:a7:d0:8f:7a:1f:68:ee:91:e1:e1:
         b1:29:c4:ac:c2:06:4b:5f:99:9e:0f:ab:d0:83:13:c6:fb:a2:
         d2:90:03:a6:6c:32:8a:78:71:fe:94:06:14:a0:c7:6d:2f:d7:
         8c:67:2c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:32:11 2024 by rpki-client on console-ams.rpki-client.org