Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
File:                     mPArXPtBclCOBze_Jc1dIqAdxFo.mft (raw, json)
Hash identifier:          QOxC+vQBHP87LL++t24EzLK2CjSsSKgCOKe0K+DXzgQ=
Subject key identifier:   A9:C5:02:C4:98:65:11:82:E0:DA:07:7D:37:B7:04:56:C2:F0:32:9B
Authority key identifier: 98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A
Certificate issuer:       /CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
Certificate serial:       01901D0F8150AC50CB5334DA5204D7C45711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
Manifest number:          02F5
Signing time:             Sat 15 Jun 2024 18:01:13 +0000
Manifest this update:     Sat 15 Jun 2024 18:01:13 +0000
Manifest next update:     Sun 16 Jun 2024 18:01:13 +0000
Files and hashes:         1: MZlZKyECGY5z3xPOFQOq4x1GbdM.roa (hash: Pzkv2dIGqmufdZbwaaqCYoLqLqCyoKpkRh6faM0+6jc=)
                          2: mPArXPtBclCOBze_Jc1dIqAdxFo.crl (hash: vrZRcZicZVQK6D/JYXR0B9eDoqNl5RX5RpyMZw2e4cs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:81:50:ac:50:cb:53:34:da:52:04:d7:c4:57:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98f02b5cfb4172508e0737bf25cd5d22a01dc45a
        Validity
            Not Before: Jun 15 18:01:13 2024 GMT
            Not After : Jun 16 18:01:13 2024 GMT
        Subject: CN=a9c502c498651182e0da077d37b70456c2f0329b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:9d:76:82:90:77:66:72:ef:d2:2f:eb:13:
                    86:b2:c0:39:c1:da:f5:1c:6b:f2:57:9c:33:c2:f0:
                    e6:53:31:52:47:1e:2b:79:7c:c5:b2:7e:2f:b2:21:
                    df:d0:a4:70:42:ea:03:69:ca:a7:b8:81:b3:37:1e:
                    35:29:71:17:8f:25:6c:a3:61:52:86:cd:48:ef:ae:
                    b0:8a:f2:5a:be:74:26:33:b9:34:a9:6b:8b:78:a2:
                    ad:d9:20:3f:a9:da:4c:7a:e7:a3:49:1b:29:85:c6:
                    1a:a2:c1:ca:3f:c3:1f:5a:2f:5e:b1:2d:77:b1:93:
                    d8:68:2e:93:1f:b0:52:63:a0:c1:15:1b:9a:0f:98:
                    c5:81:66:55:19:90:c0:40:32:32:87:c0:36:b6:f1:
                    f4:94:83:68:4d:7a:5a:6f:d6:e7:58:b8:30:7f:a2:
                    29:ad:b0:ac:cf:12:fd:86:07:c4:6d:00:7c:0a:35:
                    7a:df:87:64:ef:f0:1e:b6:92:ce:0b:31:7b:e3:6b:
                    68:4c:78:a0:19:c2:3e:7a:03:8e:47:35:3d:01:65:
                    ab:39:de:87:d1:fd:33:de:cd:8c:3d:63:99:6c:db:
                    73:8b:7c:ce:79:3e:7e:1f:29:61:e2:af:2f:14:b3:
                    d3:b8:5e:51:0e:23:50:e9:e0:2e:32:3f:94:48:77:
                    9b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C5:02:C4:98:65:11:82:E0:DA:07:7D:37:B7:04:56:C2:F0:32:9B
            X509v3 Authority Key Identifier:
                keyid:98:F0:2B:5C:FB:41:72:50:8E:07:37:BF:25:CD:5D:22:A0:1D:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPArXPtBclCOBze_Jc1dIqAdxFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/43d301-f81a-492e-922c-c971dc713b1f/1/mPArXPtBclCOBze_Jc1dIqAdxFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9d:5e:4d:9e:87:3a:c0:19:b5:2f:d7:aa:a1:1a:fe:a4:eb:
         e4:94:e9:f1:73:44:fe:12:ee:06:e0:3b:ae:53:b0:c3:3e:ca:
         6f:ed:b7:c7:30:5a:39:b3:61:d8:d1:de:71:89:d0:5a:e7:fe:
         bd:1f:8a:c9:ba:92:0d:3d:4f:56:d7:dd:a2:d1:57:7d:1f:5a:
         fa:2b:d4:ff:fb:4c:c5:56:9c:ea:06:dc:5d:49:1e:9c:26:96:
         5a:4f:40:2a:c4:95:a9:a9:6f:d3:ad:a7:75:29:10:a6:55:96:
         06:f9:5b:60:a4:1c:3a:ab:bb:32:88:62:c3:fe:ef:db:86:ec:
         87:a4:ad:ad:d5:f9:01:77:df:03:b2:ac:a0:42:27:86:f0:ce:
         33:cb:11:1f:fe:db:9f:f0:9c:22:73:da:ec:b4:38:97:9c:9c:
         a3:f6:3f:6c:98:3e:64:6b:9e:e0:9e:df:da:88:a1:4a:42:a2:
         7f:fe:a6:e8:58:f7:5a:41:5b:19:a5:1d:c0:80:a4:26:7a:3f:
         07:dc:f9:10:c3:f2:71:d7:74:34:3e:b0:50:b3:bf:4f:93:d2:
         05:9d:93:b6:40:66:15:f9:2d:b7:fe:7c:70:f3:ee:54:2f:16:
         7b:8d:22:23:92:b1:5e:e0:dc:97:52:c4:e7:53:9b:16:00:ee:
         0c:ba:51:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:28:58 2024 by rpki-client on console-ams.rpki-client.org