Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
File:                     6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json)
Hash identifier:          6uwWnfNxnxd/30zKtjU1GrOI+47fUKjJvKvl9JPE9i8=
Subject key identifier:   90:98:2F:10:11:67:12:EA:45:9C:FD:D1:1C:6F:CA:9A:79:25:DB:37
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Certificate issuer:       /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial:       01901DEABDDAB122CD8CD0D11E21A75D5D94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
Manifest number:          0963
Signing time:             Sat 15 Jun 2024 22:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 22:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 22:00:41 +0000
Files and hashes:         1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: ZThZ9GtWx2qgyNQJamsaYGpDjB0n3+xtGVZwSUwW/fs=)
                          2: _7XF_J_mPDANHxsGvqVu8pSlUuQ.roa (hash: jsSSSAfb2OwW2QL8sSnKHPAEVs+qtfqpJezquD3e+f8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ea:bd:da:b1:22:cd:8c:d0:d1:1e:21:a7:5d:5d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
        Validity
            Not Before: Jun 15 22:00:41 2024 GMT
            Not After : Jun 16 22:00:41 2024 GMT
        Subject: CN=90982f10116712ea459cfdd11c6fca9a7925db37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:fd:fd:56:04:30:24:70:92:8d:f3:e3:15:
                    70:be:ab:e9:79:61:44:6c:f9:e9:58:d1:5a:14:6f:
                    fc:40:14:70:77:84:b9:66:7e:34:53:a1:17:f1:fe:
                    32:9c:74:58:fd:15:99:61:d3:0b:17:bd:b9:15:99:
                    04:9e:c9:6e:d5:0e:10:3d:32:0e:2c:6b:3b:94:cc:
                    d9:86:6a:5c:bc:33:4e:05:a7:a0:54:db:97:f3:e1:
                    5b:53:41:aa:07:6a:d8:40:dc:11:7c:d6:b5:ff:f4:
                    ed:69:81:de:b4:9b:80:e2:d6:ac:32:17:6c:32:c6:
                    50:36:f4:c2:f8:39:00:a5:50:e6:80:18:dd:5b:fe:
                    0a:d9:63:5d:17:f6:86:37:c0:13:bd:52:d5:59:e7:
                    e8:2c:7f:7a:db:72:51:d0:9e:e8:ac:6e:0b:63:c8:
                    a2:47:48:a1:b7:48:02:7a:db:4c:81:76:ea:02:c9:
                    57:bd:6c:97:6f:2a:ce:9c:c1:19:6c:87:7f:73:18:
                    70:3e:f3:ec:97:9f:a0:dc:3a:fe:41:f1:c8:8d:3e:
                    f0:0a:b4:68:27:61:9c:07:d1:bd:7a:5a:0c:45:03:
                    9d:85:d0:fe:bf:c5:14:6f:69:77:b7:c7:fb:64:22:
                    05:bb:76:6a:d9:73:67:8c:f3:e2:8b:68:c7:1e:c5:
                    c9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:98:2F:10:11:67:12:EA:45:9C:FD:D1:1C:6F:CA:9A:79:25:DB:37
            X509v3 Authority Key Identifier:
                keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:10:68:a1:8f:b7:e6:08:1f:77:14:74:82:24:7d:c6:ed:57:
         d4:b4:1e:15:47:c1:97:bb:57:d7:c9:c9:37:bb:0c:b5:5b:3a:
         d3:15:a1:dd:33:c2:ee:cb:3a:e3:f6:44:e8:38:c4:55:7a:30:
         a6:d8:50:43:44:2b:e9:d4:21:d2:34:de:03:bf:d2:65:95:4b:
         32:c4:d0:30:08:78:0c:e3:24:8c:18:1c:5e:7c:2d:87:2f:3c:
         ca:b6:7f:92:f1:7e:3c:81:ab:2f:56:77:21:d8:93:b3:da:65:
         a5:f0:9f:ce:50:68:e2:97:1f:26:03:79:2e:4b:6b:ed:06:f3:
         3c:49:8a:d0:4b:22:73:58:b3:6e:6c:d0:d1:50:bc:fa:99:85:
         02:4f:d0:62:20:6d:06:1c:5e:5a:9e:55:17:17:11:53:a1:30:
         a5:05:b3:b3:cb:83:ab:0e:a4:f8:20:6d:30:54:a8:43:d6:a9:
         af:b5:1c:c4:2c:17:82:04:3f:1f:ed:c4:0f:1b:e2:f4:86:2c:
         d9:f8:4f:70:08:0c:2c:f7:13:16:2b:47:42:9c:17:01:1e:3f:
         99:86:7c:5f:e8:db:2b:a0:0b:39:36:95:a4:4e:6e:8e:17:0d:
         34:05:87:e7:b5:81:4d:ac:af:1f:d2:29:e7:9b:39:41:78:77:
         fc:05:0a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:49:50 2024 by rpki-client on console-ams.rpki-client.org