Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File:                     mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier:          JHBldBE8+ZCIrj77WGBmVjRWwNdH3cSB3QTnykFaEtE=
Subject key identifier:   6D:78:DC:B1:CC:E6:8D:E4:BC:71:53:FC:90:FA:2B:54:96:39:A9:C1
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer:       /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial:       01901DEBC560C4A54EB38606E0A273FAE19C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number:          0947
Signing time:             Sat 15 Jun 2024 22:01:48 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:48 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:48 +0000
Files and hashes:         1: TjtIVY_2f0OxDdpEU-uRxzeGj_g.roa (hash: MG+iVq7CzkKP4h4sV32vZCfz7WiVMzCyXByIkROiN2Q=)
                          2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: iTVlmMUjPVy/gSavLtyV3wSEa1zQY1DcD/JSBqL5wuY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:c5:60:c4:a5:4e:b3:86:06:e0:a2:73:fa:e1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
        Validity
            Not Before: Jun 15 22:01:48 2024 GMT
            Not After : Jun 16 22:01:48 2024 GMT
        Subject: CN=6d78dcb1cce68de4bc7153fc90fa2b549639a9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:62:a6:02:83:7a:a5:8a:44:48:17:bb:81:
                    83:22:f2:5a:b5:e7:19:7c:c7:d8:45:1f:75:4f:57:
                    c6:1c:40:6b:3e:16:b3:b7:33:2b:00:60:d0:a8:9f:
                    76:0e:a0:80:6b:cf:fb:26:5c:9f:75:a2:85:a9:d2:
                    f0:53:ba:df:bc:52:c5:17:1f:ac:f1:95:93:ce:f0:
                    4f:26:46:6b:2c:dc:ff:c0:5a:26:fe:ce:13:2b:16:
                    de:61:3f:3b:94:5b:af:b5:05:55:c5:51:f0:1e:b5:
                    bb:c2:6d:d3:f2:a6:a7:d3:28:01:68:99:8e:e7:78:
                    e9:6e:30:0d:9e:cd:84:e6:99:fb:2b:9d:f5:f3:5c:
                    b5:e8:fe:3a:7c:21:47:8c:ab:ed:96:52:31:a7:1e:
                    46:74:85:c9:4a:87:98:44:66:11:41:14:58:a9:c3:
                    2a:77:27:44:78:9e:12:59:bf:d6:8f:f5:02:a4:38:
                    49:1f:ab:1b:02:ad:11:ae:9c:4e:6f:cb:bc:da:c0:
                    1e:a5:ba:03:93:55:4d:24:28:f6:4d:14:f5:0a:23:
                    3a:a8:d3:0d:0c:e6:86:0a:af:b7:d3:54:99:51:20:
                    13:12:cd:b7:8a:c4:d0:28:4c:84:f8:ea:40:ca:e6:
                    a0:e8:8e:16:e7:96:42:06:42:db:e2:85:a2:c7:2f:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:78:DC:B1:CC:E6:8D:E4:BC:71:53:FC:90:FA:2B:54:96:39:A9:C1
            X509v3 Authority Key Identifier:
                keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3e:b7:0a:8c:d7:8f:19:4a:c6:13:aa:3f:1d:ce:62:ed:d0:
         ed:e1:5e:ce:8e:bb:1e:d6:93:cc:05:93:79:38:32:b2:a2:f4:
         ae:3f:53:20:63:4f:53:b4:ec:44:87:4a:14:66:8d:0c:c9:07:
         04:3b:53:e1:71:2c:6d:71:db:50:e4:b5:85:78:ec:a5:69:70:
         c0:11:d0:59:45:ae:a1:a3:41:48:c8:02:6f:b4:d9:3c:01:0d:
         c9:5b:5c:14:36:07:b3:1f:93:10:91:d9:0b:86:ad:16:67:2e:
         6c:9b:3f:06:7e:23:85:4f:21:b6:ac:c2:53:3b:c0:84:4c:65:
         73:68:a0:5e:80:ae:43:3b:d8:1f:c3:c5:e8:01:a5:de:92:58:
         8b:dd:80:41:23:ed:e3:c4:98:bf:0e:a1:97:f8:3f:42:19:da:
         9f:a1:58:1c:ec:65:4d:d9:a7:ba:45:1a:0b:63:81:7d:4c:49:
         e8:6a:24:89:de:b1:f4:bc:b6:24:cd:a8:f3:ea:4a:10:ef:37:
         1d:0e:a1:73:90:6e:36:57:d5:b4:b3:cd:e7:d8:db:da:ac:7d:
         e1:bd:68:51:e7:a5:23:4a:8f:d3:cd:24:a2:b7:13:45:7c:ac:
         fe:7f:80:c8:d1:e3:34:be:dd:59:1b:0a:8b:16:73:12:d8:e7:
         95:82:ee:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:46:57 2024 by rpki-client on console-ams.rpki-client.org