Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File:                     hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier:          OkYx07j6+WXNy3KTwd6KdWYET04/WW+PHKwXpg1o8Qs=
Subject key identifier:   95:08:39:69:64:F9:56:D8:3A:36:B9:E1:EE:0D:FE:F6:C1:22:5D:01
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer:       /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial:       0190448CA8C66D53D14C69CE5851F9B52B78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number:          032D
Signing time:             Sun 23 Jun 2024 10:03:07 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:07 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:07 +0000
Files and hashes:         1: Yi73awUfNeeD2qULm-KB47t1eWs.roa (hash: ylHyQvumKVd2KGOFcPgDrQXCjT5j4DEroVaZHln2sgY=)
                          2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: g8KJEJhnVZ8kNzqbbJT0by0p1/xH5Q0pAT+EGXaE6wI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:a8:c6:6d:53:d1:4c:69:ce:58:51:f9:b5:2b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
        Validity
            Not Before: Jun 23 10:03:07 2024 GMT
            Not After : Jun 24 10:03:07 2024 GMT
        Subject: CN=9508396964f956d83a36b9e1ee0dfef6c1225d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:b0:5e:b3:0e:c5:0a:40:d4:30:27:46:82:
                    32:35:e8:02:01:fc:70:5b:c2:49:84:98:d9:76:56:
                    5b:bc:48:d6:92:8e:ca:97:ec:16:00:d6:02:33:c8:
                    4f:7e:bf:6e:77:52:5c:64:a7:44:c6:19:cc:e0:8c:
                    30:7f:2d:0f:f6:b6:27:e9:37:13:7f:16:76:cf:59:
                    c1:a7:1f:36:46:46:b8:9d:05:bb:70:e8:28:f9:29:
                    df:6a:32:93:a3:5d:3b:76:c8:8b:d3:51:22:c5:4b:
                    db:07:96:a8:db:c2:5c:1e:ad:f2:2a:f3:45:33:c1:
                    32:f9:a9:bc:d8:a8:a9:9a:70:80:d0:bc:10:78:d2:
                    97:f7:6d:cc:25:86:86:f2:5a:b8:a9:a7:15:c1:09:
                    5f:5c:c2:18:6f:9c:ea:dc:29:e5:d4:5d:28:85:21:
                    69:a2:0b:5a:4a:e9:1f:5d:a6:2a:b5:ac:8b:a9:50:
                    ee:b3:9f:85:96:21:82:b5:bb:87:31:6b:a0:14:1b:
                    01:7f:f9:b6:ae:a9:44:18:6a:ff:3a:4c:7f:3a:ab:
                    a2:7f:f0:19:ce:6a:76:dc:88:ff:06:a2:f4:b0:d4:
                    8f:7a:a9:4e:a8:d8:8a:97:bf:34:30:96:59:33:ef:
                    b4:bf:cb:8f:20:8d:94:be:ac:4f:3b:e5:8d:d5:66:
                    75:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:08:39:69:64:F9:56:D8:3A:36:B9:E1:EE:0D:FE:F6:C1:22:5D:01
            X509v3 Authority Key Identifier:
                keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:39:f5:fb:6a:83:27:c9:eb:f6:17:fe:b0:47:21:54:2a:f2:
         f0:99:6f:6d:be:cd:b1:e5:d1:41:d5:a8:43:71:92:2f:41:7a:
         64:94:b4:13:ee:c3:65:11:20:64:0b:3c:84:37:74:9c:b8:55:
         5c:30:f8:e6:20:10:4d:ea:9a:5a:fd:3e:b8:6e:e9:7f:7b:99:
         c4:d3:e7:d3:a3:85:07:67:69:32:d7:02:1d:63:65:91:bd:df:
         5d:09:b2:c9:d2:6a:56:ee:7a:30:d9:c0:c4:96:1e:a7:9d:90:
         41:8b:cf:c4:16:51:94:83:fc:50:89:e4:3d:86:99:56:74:f4:
         66:c4:98:ca:06:08:f2:98:2a:e1:1e:dc:7e:d5:a9:db:10:69:
         21:2f:4d:e9:71:75:b5:74:35:56:70:2c:82:53:88:ee:95:9e:
         7c:9c:ba:c9:e2:80:fb:06:93:ba:ba:bb:0b:1f:ab:a8:d4:c9:
         36:5a:43:cf:7d:fa:2b:8a:4c:7e:2d:cf:68:cf:da:66:0a:9f:
         af:99:07:b9:ab:57:2c:ac:a8:eb:79:d8:df:93:76:c3:74:00:
         22:82:ce:ae:03:b0:8c:a3:5a:4b:42:64:ee:ad:7f:60:5e:c3:
         5b:55:17:50:71:b1:43:1a:0e:81:97:14:c4:cc:67:88:99:ad:
         70:ea:23:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:55:23 2024 by rpki-client on console-fra.rpki-client.org