Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
File:                     f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json)
Hash identifier:          GrhhUQx7hysfyHeloFd/st5KZnjV7fdifbX6OZ4ic+s=
Subject key identifier:   25:53:C8:4E:AA:36:15:23:50:21:3D:16:66:04:BB:CD:D6:2C:BD:CA
Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D
Certificate issuer:       /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
Certificate serial:       01901E8F81F9C98347E1171A468B679CC259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 01:00:39 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:39 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:39 +0000
Files and hashes:         1: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: WA0VOWoFUHOzu+hn1XCDjp8SdIbgQ0FMhwFg3WqMos0=)
                          2: gabteveofeU_XQ1bf06jRA9fsog.roa (hash: EZFkoV6FmK0+tHNXLof/Xn/A4Ny+nefMZB4qXLc9MSA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:81:f9:c9:83:47:e1:17:1a:46:8b:67:9c:c2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d
        Validity
            Not Before: Jun 16 01:00:39 2024 GMT
            Not After : Jun 17 01:00:39 2024 GMT
        Subject: CN=2553c84eaa36152350213d166604bbcdd62cbdca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:19:d6:2e:5f:9d:14:e7:0c:53:da:b7:f6:d8:
                    9f:92:94:62:2d:78:36:97:7e:de:56:12:10:e6:c5:
                    01:3f:ac:31:33:28:f7:99:00:be:3f:2e:73:28:f5:
                    d4:82:f7:36:a1:6e:c4:ca:2f:6d:af:f9:3b:e3:13:
                    33:8c:53:c7:77:17:db:40:77:b6:75:0f:5d:84:80:
                    41:b5:7d:a0:fd:76:46:f7:fa:b3:17:5c:95:a3:94:
                    86:0d:6d:95:72:8b:74:97:be:c5:ea:b0:91:65:08:
                    ea:7f:63:12:39:03:21:92:f5:90:e1:42:b1:9d:81:
                    a5:ab:f5:cb:ba:c2:b5:25:a5:f3:f7:b4:2d:24:01:
                    c5:8a:84:06:2e:10:98:47:a0:b4:d6:cd:e3:a3:2b:
                    c4:00:fa:fc:ef:f3:3e:c4:96:be:0b:b6:71:01:18:
                    36:0c:08:b4:25:03:01:98:70:98:6a:16:e9:f0:82:
                    13:70:bd:75:f0:c6:51:fa:a9:a8:f0:f1:f2:d2:b3:
                    71:52:83:3e:1d:1a:30:6e:9d:dd:5d:74:18:f0:be:
                    db:64:aa:40:e4:30:2d:82:55:19:ef:92:dc:20:8b:
                    da:07:de:46:9e:8e:3f:5a:57:12:60:1c:05:97:22:
                    b7:d8:8e:46:07:20:ae:17:98:83:a4:ee:de:55:6b:
                    0b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:53:C8:4E:AA:36:15:23:50:21:3D:16:66:04:BB:CD:D6:2C:BD:CA
            X509v3 Authority Key Identifier:
                keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:96:ec:20:37:78:53:28:7a:73:f1:6e:d8:14:97:53:cd:
         0b:c7:93:75:66:82:19:2c:1a:97:eb:9c:8a:3c:ad:0c:b2:e7:
         e3:21:67:f5:15:fb:45:8e:de:ca:70:48:7b:8a:0c:44:6c:08:
         9e:8f:45:54:c5:0b:20:4f:b1:29:a7:85:05:55:09:ab:81:ce:
         0d:41:48:21:8c:85:07:48:69:2f:9d:8b:43:1a:4c:bf:49:ba:
         41:7f:88:f4:fc:09:9d:a1:f8:b4:3e:6a:99:29:fc:e7:ea:56:
         f7:72:b9:47:46:97:47:45:2c:6f:6e:66:aa:38:ac:ce:87:24:
         b0:fc:84:26:02:a0:fe:ff:07:1c:6b:06:25:38:eb:c7:f2:3d:
         52:5e:2c:0a:36:03:02:d8:d1:8b:24:e7:b5:d9:7a:0d:e0:86:
         63:b1:77:cb:29:d3:5c:f3:b9:8a:2b:b4:8d:d5:f0:09:0e:c0:
         18:cc:01:45:d3:97:ad:13:9b:0b:4e:05:df:a5:49:9b:f0:56:
         13:30:24:e5:f0:0f:19:7c:73:6f:cd:81:9d:bc:95:af:58:ce:
         38:cc:7a:88:4a:20:84:05:cf:d5:fc:76:12:a8:31:c4:4f:86:
         99:ff:06:6e:44:da:11:e0:87:1b:9c:df:4b:95:6d:2c:48:a1:
         c2:b4:af:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:40:12 2024 by rpki-client on console-fra.rpki-client.org