Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
File:                     u303nAT4F1s172c9dsaORMcOgz8.mft (raw, json)
Hash identifier:          It8qKizVjezD/82G2dJnsMDZGSYwsuUQRlcTVPrQjes=
Subject key identifier:   8C:9B:0E:96:A6:26:00:C7:53:52:DD:FD:C0:8C:82:B2:68:2D:31:F7
Authority key identifier: BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F
Certificate issuer:       /CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
Certificate serial:       01901E58C0C91AB5CA7BE29907A1317D238D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
Manifest number:          11C5
Signing time:             Sun 16 Jun 2024 00:00:51 +0000
Manifest this update:     Sun 16 Jun 2024 00:00:51 +0000
Manifest next update:     Mon 17 Jun 2024 00:00:51 +0000
Files and hashes:         1: bX64W_nw3K7UOxSGi1PH7E2A9Do.roa (hash: TbYYcmiTvHbWnJltsj7xN2uxBGGy53ILLrI80ioCBg4=)
                          2: u303nAT4F1s172c9dsaORMcOgz8.crl (hash: BHK6fPwQiVuwoLfszCirS3y3bcOipi81Ok+UacQH9kM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:c0:c9:1a:b5:ca:7b:e2:99:07:a1:31:7d:23:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb7d379c04f8175b35ef673d76c68e44c70e833f
        Validity
            Not Before: Jun 16 00:00:51 2024 GMT
            Not After : Jun 17 00:00:51 2024 GMT
        Subject: CN=8c9b0e96a62600c75352ddfdc08c82b2682d31f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:c2:e8:e8:b8:55:cb:2d:a9:a7:b2:81:5f:
                    5c:d4:21:63:6d:75:c2:66:95:5c:cf:b6:eb:97:ba:
                    c3:0c:13:12:92:13:31:69:36:63:30:4c:24:ca:56:
                    41:43:27:31:94:03:91:8c:b0:00:99:ad:ef:86:0c:
                    e3:72:77:80:ae:99:f2:d8:f4:a0:a2:73:7c:7b:04:
                    be:99:26:21:36:35:c5:54:8d:f7:b2:00:5d:93:4c:
                    c8:80:42:4d:9a:40:cd:2b:05:a8:36:48:74:aa:df:
                    e0:4e:cb:01:df:a6:b9:a7:2b:87:70:5c:32:e2:a0:
                    3c:fd:ac:ab:29:08:d2:86:32:ef:85:14:d5:8f:c7:
                    65:49:8c:43:e1:ed:52:08:94:19:82:8c:9d:c0:0e:
                    d7:6e:63:8c:85:9f:08:ff:24:a2:93:a4:e1:c4:70:
                    25:17:f3:a4:a2:1a:86:60:a0:54:bd:c2:fc:7f:ed:
                    1e:2a:e0:ab:dc:30:f6:39:87:c1:c8:81:b3:a0:86:
                    d9:75:ec:60:08:d2:46:ab:0a:33:d7:08:0a:97:ef:
                    2c:27:4f:07:73:1c:c2:5a:72:1f:16:a8:f7:f6:59:
                    76:60:22:97:7c:5b:84:fe:39:3b:0c:c8:9f:b3:86:
                    4f:9b:1f:4f:f2:61:85:e9:5b:54:7c:45:4e:dd:7a:
                    a3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9B:0E:96:A6:26:00:C7:53:52:DD:FD:C0:8C:82:B2:68:2D:31:F7
            X509v3 Authority Key Identifier:
                keyid:BB:7D:37:9C:04:F8:17:5B:35:EF:67:3D:76:C6:8E:44:C7:0E:83:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u303nAT4F1s172c9dsaORMcOgz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/9e0f5e-8141-43c9-8f44-33ebab24bbb3/1/u303nAT4F1s172c9dsaORMcOgz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a4:e0:36:cb:f6:6b:31:ec:b7:19:de:55:e3:21:ee:d9:e5:
         33:67:ac:21:33:28:26:6f:31:9b:21:c7:05:d2:3a:a3:cb:f6:
         08:b5:4e:d7:bf:1f:49:f9:73:2c:a7:ce:c5:ac:f6:50:f3:65:
         7e:20:24:f9:39:04:e6:6d:75:d9:ca:ab:ba:43:58:a5:42:e3:
         8b:e5:70:81:de:f4:66:74:b0:65:af:45:a2:8f:7c:cd:6d:be:
         f8:55:6e:fd:2c:6b:65:e6:35:a3:d6:39:6d:bc:96:35:e8:49:
         62:b7:c7:49:6a:dc:17:a0:38:66:33:65:5e:ed:57:b2:3c:4b:
         2f:d7:6c:f4:b2:13:fd:9e:d1:a6:05:79:2d:f8:94:f8:57:0c:
         0a:be:aa:50:ae:33:8d:36:f2:7c:14:83:9d:b4:7d:a8:1b:a5:
         6b:9f:17:e1:a8:5c:f9:47:45:83:f4:95:c5:9c:d8:5c:b0:76:
         8f:98:e0:fe:ee:ee:25:7e:d9:de:fb:14:d4:bf:f9:bb:94:56:
         19:8c:ce:a4:20:b8:44:8f:55:07:38:0b:43:df:ee:30:56:fd:
         db:f9:e2:1a:a4:54:6e:bd:5c:0f:21:76:74:1f:bd:65:bf:ee:
         10:e8:7d:39:f5:ab:d4:6f:93:b2:8e:0b:5f:dc:e3:54:ae:50:
         d1:50:1b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:53:07 2024 by rpki-client on console-ams.rpki-client.org