Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
File:                     hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json)
Hash identifier:          4gKKNQp1wY1x1XZgT6/1xJlWNukafhTuFNKS9GWX8EI=
Subject key identifier:   C8:61:FE:51:13:00:3F:07:F5:FC:53:16:DC:0B:F6:08:CF:18:2C:0B
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Certificate issuer:       /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial:       01901EFDAF349BE88643FDC3BE164163EACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
Manifest number:          07CF
Signing time:             Sun 16 Jun 2024 03:01:00 +0000
Manifest this update:     Sun 16 Jun 2024 03:01:00 +0000
Manifest next update:     Mon 17 Jun 2024 03:01:00 +0000
Files and hashes:         1: UobBjKbwdVswKHrh2eOx7rJ-Ehg.roa (hash: qtKY2awFyUKgmVCHi0RTbV/H0VDPV3mk+0Owh1BrW60=)
                          2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: TaoKu+5IjZxY5LfdCvcCLjFiEgm3LhqDRPpEUd6mXac=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:fd:af:34:9b:e8:86:43:fd:c3:be:16:41:63:ea:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
        Validity
            Not Before: Jun 16 03:01:00 2024 GMT
            Not After : Jun 17 03:01:00 2024 GMT
        Subject: CN=c861fe5113003f07f5fc5316dc0bf608cf182c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:f2:bf:35:91:6f:5d:7d:39:ee:64:77:7b:
                    fb:16:ef:37:3b:7b:3d:ec:de:17:56:90:d4:3d:7d:
                    66:34:5a:0a:99:1e:d1:9c:c1:60:d0:61:19:a5:4c:
                    22:3b:0d:e8:57:3e:1c:a3:11:27:8d:0b:a8:6e:86:
                    15:8b:d5:ac:c1:df:e0:68:83:fc:bd:b2:20:d0:9e:
                    04:76:8e:0f:88:d0:d1:6c:11:ba:3c:d8:a4:41:d4:
                    e8:a7:8f:76:51:d7:10:eb:c4:0d:98:02:c8:4d:02:
                    ef:90:3f:ac:fa:5a:20:75:f9:79:f6:3b:89:f5:38:
                    37:40:90:5f:4d:4a:7a:52:b0:47:98:e2:f1:e3:97:
                    1c:21:92:37:a8:54:2c:4d:cc:e3:e8:4e:2c:13:29:
                    a1:7b:0f:27:e2:83:00:1d:b1:2b:75:da:23:d3:47:
                    18:2b:3d:2c:0e:50:b9:f5:af:14:58:46:c0:f0:f4:
                    62:ea:f0:ec:87:6d:d6:86:35:de:84:8e:a1:c7:5b:
                    77:9d:fe:2b:91:74:e3:5c:73:aa:dc:3f:ae:8a:71:
                    e5:02:8e:0d:5a:74:4a:7d:50:17:1a:30:3e:ad:77:
                    01:22:a0:d6:9c:68:5f:69:ba:95:fc:b5:27:ca:96:
                    23:c1:87:f8:07:42:dd:62:84:8e:a8:c0:3b:e1:1a:
                    a3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:FE:51:13:00:3F:07:F5:FC:53:16:DC:0B:F6:08:CF:18:2C:0B
            X509v3 Authority Key Identifier:
                keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4e:71:44:a9:7a:ff:a8:b2:52:35:db:bb:91:49:c1:03:c8:
         2e:8f:8e:6b:ec:b3:d6:ae:6d:38:f6:09:98:40:bc:ca:2d:f2:
         bf:33:62:07:1e:f7:de:c1:82:d3:33:b4:1f:93:97:7f:8f:93:
         05:77:36:01:f9:b6:61:1a:f6:83:ad:12:18:ea:43:5e:59:ae:
         d8:db:ba:07:13:dd:71:8d:96:80:41:c8:15:4b:a0:6e:aa:4c:
         71:05:b5:d8:e6:7f:bc:36:66:d8:d5:a2:18:6b:e4:74:67:de:
         70:24:57:1c:52:97:4d:be:5b:20:79:29:b5:a6:09:c6:39:ab:
         c0:62:91:cb:d5:35:25:c0:71:21:b1:1f:47:5d:b0:12:36:26:
         15:9b:9c:84:3e:97:0d:b5:c6:1f:3e:90:fa:9a:2e:c8:0e:36:
         ae:a1:eb:bd:55:29:c4:ea:09:b6:25:7b:08:ed:27:1a:4a:a1:
         c2:94:67:64:91:29:22:9a:f1:9f:b6:ae:90:eb:f9:f3:ca:95:
         ad:c8:2e:dc:6a:7e:80:f5:bb:59:11:90:9c:97:8d:3c:6a:23:
         66:ec:7a:b3:af:aa:54:92:02:14:b9:9e:60:da:b9:1b:98:0e:
         93:b2:b8:8e:57:89:10:4b:ad:ba:97:1c:7c:2f:e3:f1:cb:de:
         c6:04:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 06:38:18 2024 by rpki-client on console-ams.rpki-client.org