Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
File:                     9q9DOXTfNztwq9drE-HHDHdfVUs.mft (raw, json)
Hash identifier:          uCfhoNjsl5GCXQ/spTAhB8HhzOGaJawMKL59fqZM0hc=
Subject key identifier:   C9:B1:0B:55:88:BC:31:6A:04:D8:C0:78:FD:94:61:2C:EC:AC:48:36
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Certificate issuer:       /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial:       01901BFF1F042101AF60C9A46836C0D0D99E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
Manifest number:          0A6B
Signing time:             Sat 15 Jun 2024 13:03:42 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:42 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:42 +0000
Files and hashes:         1: 25HLN9vKJbOORa344qm-LI0nEQA.roa (hash: TQyp0sF1bl/gzF7J2QBW5i0BGuTI+enCR5Mfur9x5VU=)
                          2: 9q9DOXTfNztwq9drE-HHDHdfVUs.crl (hash: T7+wA/HSL0MIMS0MYW0mi0/rh3Zl7BdvMxAG9p1SoMs=)
                          3: BMRqTwX3F-7Eyu9sUWJRxbbnObs.roa (hash: iwSQ0rUmNhGV89dfOp4pcxcUZZLRA+Kc94ZUHHnJkbg=)
                          4: FZEkFuMqSBRntbImyjyZghDyuWQ.roa (hash: /3J6RLL5TaJlsI7MAiHuaRBYdlP3F/vAuXmxyqitWLo=)
                          5: UNsqRay7ofQ5WiHpZ5Acof4lnDo.roa (hash: rDqdWWHGAzsTyp6IAkG0n0gUgv7cg4bdgRcTdFsdL3w=)
                          6: gaGkVG3MEdInn4-8PG0KqYF30JI.roa (hash: SfwNO2whAPyH8lm16SnfgUUI860QDXfZxOSECjYDQzw=)
                          7: llFGH8urj5iar5Vx967WXVcJGzM.roa (hash: 9hm1Mb0do8HIozKCabIcq+968yFpgw9XQkqO8g/4ZfQ=)
                          8: tdzcrJI0HiEWH5z8HfzwsYWC0uk.roa (hash: 8wLUjDrBvwm7INqPCoh2ojckGN4rKi1PEDyt7pjWMcU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:1f:04:21:01:af:60:c9:a4:68:36:c0:d0:d9:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
        Validity
            Not Before: Jun 15 13:03:42 2024 GMT
            Not After : Jun 16 13:03:42 2024 GMT
        Subject: CN=c9b10b5588bc316a04d8c078fd94612cecac4836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:26:be:b2:35:c5:66:70:09:08:11:71:5a:
                    4e:39:74:02:07:df:b2:49:7a:e8:08:e2:18:25:c0:
                    c5:7e:52:e6:20:05:85:34:53:ee:5a:b2:71:a8:db:
                    b0:d2:8b:f0:01:2a:c6:c6:58:c1:aa:4d:e9:11:c2:
                    ae:b3:27:ea:6e:0b:27:5f:a8:a1:80:88:c4:f2:65:
                    9a:7b:58:e2:f1:be:37:77:b4:b1:95:41:6c:a2:6f:
                    36:06:05:b4:6e:ef:fa:8b:18:28:60:b4:33:7b:3d:
                    3a:d3:2f:3b:21:1e:9f:85:24:45:dd:75:47:7d:ac:
                    c4:cf:4e:d7:95:f6:13:45:a6:e7:12:1b:0b:9f:a7:
                    a1:15:91:f2:b0:3a:5c:fd:f2:00:74:a3:23:8f:3d:
                    19:36:d4:25:4a:30:ef:f9:9f:8a:d5:fd:84:1d:42:
                    a0:53:6d:59:b3:cb:d8:08:51:3c:b9:31:f8:76:36:
                    80:1d:5e:fa:e6:6b:34:8e:85:54:95:c2:6d:cf:1e:
                    d5:73:33:b2:c7:c4:ca:56:59:a7:c0:bf:ed:6d:a5:
                    cc:5d:15:26:80:27:b8:6b:98:9b:76:7d:90:2f:b1:
                    69:10:65:da:69:76:6c:e3:da:ce:ed:94:b4:2e:27:
                    88:c1:53:f6:83:13:47:5f:37:c1:be:06:d8:c5:d2:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B1:0B:55:88:BC:31:6A:04:D8:C0:78:FD:94:61:2C:EC:AC:48:36
            X509v3 Authority Key Identifier:
                keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7d:d8:4a:7e:8a:9e:84:14:26:c0:06:38:3c:31:31:67:a9:
         6e:0d:c8:c1:54:4d:b6:d6:c8:28:b9:9e:9a:45:2d:60:7e:8c:
         2b:06:54:21:c7:de:85:51:a8:58:80:9e:d1:91:3a:ae:22:08:
         14:79:ea:47:2c:45:7c:0c:93:9b:fa:8a:d1:44:28:84:9f:cd:
         5e:f9:ba:81:74:27:41:53:1c:48:2a:ff:72:1b:af:bf:50:56:
         6a:22:2a:fd:d6:ea:23:61:92:b6:ca:8d:b2:c3:ed:79:af:70:
         74:7c:a6:08:31:78:72:fa:17:62:f1:4e:93:af:ef:48:3e:f7:
         fb:80:e6:fc:8f:74:eb:59:0b:0d:bb:40:72:41:34:52:e0:8a:
         93:e5:37:00:47:82:12:4a:fb:28:de:9d:a7:af:ae:00:14:25:
         9c:f1:c2:a7:4b:cd:02:3d:7c:14:a6:10:36:9f:1e:88:01:25:
         e7:ff:d9:d1:1c:d7:7e:43:1a:5d:ab:ce:c6:48:ec:b3:ae:d3:
         8f:d4:ad:e4:ae:86:48:bb:d1:93:2f:a9:7a:7a:fd:08:10:4e:
         74:4b:1d:04:54:c7:ab:30:d8:95:1a:99:75:d3:14:32:5a:44:
         54:95:7a:74:40:54:bc:8f:28:82:17:02:37:2c:f7:72:a3:d6:
         b5:a2:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:38:07 2024 by rpki-client on console-fra.rpki-client.org