Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File:                     hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier:          Hjhtvuvpqc9ca1jJHrHk/VDzoQiexDLFP/U4i8z6sks=
Subject key identifier:   40:3C:9A:20:FF:49:55:DB:08:8A:34:50:F4:1E:19:86:27:8D:54:69
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer:       /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial:       01901DEBFF780864AB6A3F6DEBFEC34EFEF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number:          0319
Signing time:             Sat 15 Jun 2024 22:02:03 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:03 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:03 +0000
Files and hashes:         1: Yi73awUfNeeD2qULm-KB47t1eWs.roa (hash: ylHyQvumKVd2KGOFcPgDrQXCjT5j4DEroVaZHln2sgY=)
                          2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: +AtdRLEB/P9HshnhOgx+kjXTJOR7s6jZoSYlw9NrFVY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:ff:78:08:64:ab:6a:3f:6d:eb:fe:c3:4e:fe:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
        Validity
            Not Before: Jun 15 22:02:03 2024 GMT
            Not After : Jun 16 22:02:03 2024 GMT
        Subject: CN=403c9a20ff4955db088a3450f41e1986278d5469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:db:ad:2c:29:04:cb:44:7c:f8:be:d9:d0:
                    b0:4e:b5:6b:d2:99:d2:f0:05:06:0a:ef:11:12:ab:
                    27:ec:26:0c:5e:e9:82:51:ac:00:90:17:8b:db:ad:
                    cc:94:76:da:3d:cc:1b:02:35:1a:be:87:ae:e4:a4:
                    83:49:10:d8:1f:2c:47:15:f0:1d:40:6a:5c:88:5d:
                    93:1f:81:0d:78:f5:dc:80:31:01:7b:bc:68:c1:a8:
                    41:51:28:18:9a:07:89:bb:a2:00:03:cd:6f:07:37:
                    c5:5b:74:88:71:c9:2e:d1:84:f6:26:55:13:e4:bc:
                    ea:59:3e:c8:c2:fd:c7:28:12:fa:84:44:16:4e:03:
                    f8:86:5f:09:43:24:c7:68:f7:a8:89:1d:d2:4e:9c:
                    10:7b:43:02:6d:7b:db:31:9b:ee:dd:e8:20:ac:13:
                    bd:6b:8d:4b:24:41:53:2b:b6:c0:5f:fa:de:a2:98:
                    06:68:5f:72:69:18:fd:73:58:65:b5:5b:34:bb:95:
                    14:07:25:ce:ba:49:46:6a:2d:23:4d:1c:df:f9:68:
                    45:2c:f7:66:30:c0:70:03:7c:ca:92:b0:33:dc:b6:
                    4a:0b:c2:40:96:00:fa:01:af:75:aa:33:fd:64:d3:
                    fa:c4:0a:97:6c:3e:74:b7:d6:c0:0c:ed:09:1c:08:
                    02:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3C:9A:20:FF:49:55:DB:08:8A:34:50:F4:1E:19:86:27:8D:54:69
            X509v3 Authority Key Identifier:
                keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3c:2e:41:e3:d1:e8:f1:fc:6f:47:78:88:a4:e4:d5:51:c8:
         1b:4c:5a:95:d9:d5:96:75:9f:bb:21:c8:ac:28:2d:4f:fb:7d:
         bb:e0:f5:7f:aa:56:57:70:8a:01:e1:71:59:e5:c5:80:19:47:
         aa:b3:4f:07:6f:79:81:ff:70:73:b2:7d:f6:fd:1d:28:09:f2:
         2b:26:33:f7:d5:91:71:17:51:46:a2:ec:ce:3b:5a:5e:1b:ce:
         d9:df:1d:65:2e:80:ea:8b:36:35:a0:f7:ae:bb:68:0b:60:ac:
         35:7c:07:d0:08:95:ae:35:79:e4:9a:a1:e7:e2:85:b3:bb:de:
         bf:41:62:b3:b4:7a:93:1b:1c:ed:3d:dc:6c:32:42:f5:aa:4b:
         54:d1:7a:4d:7f:1d:5e:df:cc:f2:59:be:2f:f3:7e:b2:d1:b1:
         18:c6:40:af:5f:7b:35:2a:37:08:9e:f1:5e:21:2f:d9:41:f4:
         8b:f5:92:95:1c:c5:e4:4e:23:0a:79:67:74:c7:66:bb:01:60:
         6f:cd:fd:67:f3:88:32:94:7a:40:e4:a5:5d:53:7a:34:1b:cb:
         e6:0b:55:8d:c3:eb:b4:21:c2:86:96:83:87:79:8a:b4:20:95:
         b7:9b:42:16:40:79:0c:c6:ff:b2:ee:f3:7b:5c:2d:f4:d9:e6:
         f8:e8:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:46:02 2024 by rpki-client on console-ams.rpki-client.org