Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File:                     bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier:          qNqO57phNodHyAGlpy6HkPBdqb+H9sn4eYlu3PCyWbE=
Subject key identifier:   B0:27:AD:6B:7B:64:4B:55:74:91:12:B2:37:C5:3D:72:1C:46:65:BB
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer:       /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial:       019040B0598EB47BBCAEA073F4A080902634
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number:          098C
Signing time:             Sat 22 Jun 2024 16:03:37 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:37 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:37 +0000
Files and hashes:         1: NKKBMvK4Wn5gaSQ9C08cpfQLAlo.roa (hash: GXH6ufLNbQ4eeSNsRXWhLgNtDN8+kmUWvaH/j44SaEQ=)
                          2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: jwXIQ+nsbz1r1Fo4KEuhqH0kxYGd97Fo6LvF6MabotA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:59:8e:b4:7b:bc:ae:a0:73:f4:a0:80:90:26:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
        Validity
            Not Before: Jun 22 16:03:37 2024 GMT
            Not After : Jun 23 16:03:37 2024 GMT
        Subject: CN=b027ad6b7b644b55749112b237c53d721c4665bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:22:4b:c6:8b:33:94:92:2a:0e:74:3d:37:
                    49:a3:82:6b:e9:37:46:41:37:fd:54:55:d6:bb:81:
                    b4:af:7d:f6:4d:a8:ec:98:0e:a9:44:12:f5:f1:88:
                    5a:f1:fa:5b:30:c7:7d:ca:cb:13:8e:a9:77:60:fd:
                    09:17:1d:05:91:0b:86:11:c4:87:69:73:76:3e:ac:
                    3d:91:79:03:b4:48:dd:b8:74:84:c6:4d:3a:f1:66:
                    29:c7:df:d5:97:9f:10:26:ec:45:cf:6e:3d:d2:31:
                    9a:98:77:33:ce:76:02:c8:a2:6e:0e:d7:ba:d0:5e:
                    15:2d:c4:33:56:de:65:c0:f2:db:be:c7:40:ad:ff:
                    d8:9b:6c:7a:24:9d:b5:87:48:2a:56:b2:9b:b5:7f:
                    48:84:03:7f:fb:ce:06:a3:c3:ea:d4:55:70:c9:63:
                    4e:c5:41:72:13:ee:d1:b9:c6:42:4e:28:4d:2f:7c:
                    bc:96:ae:54:32:69:70:ec:fc:ab:fc:fa:06:bd:22:
                    bd:e9:a4:7b:f5:95:82:e7:ba:a6:80:3a:29:69:c4:
                    e6:7f:2f:40:97:c0:7a:1e:ed:31:9a:ee:5e:90:7a:
                    c6:ca:28:0e:e8:4b:be:86:ae:09:47:ad:3e:d0:a7:
                    48:c8:69:4f:c8:b1:b8:cf:bd:b0:46:b4:f4:53:f2:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:27:AD:6B:7B:64:4B:55:74:91:12:B2:37:C5:3D:72:1C:46:65:BB
            X509v3 Authority Key Identifier:
                keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:08:75:8a:c3:bc:81:10:11:87:ee:9a:0b:0c:fa:f3:d9:75:
         60:f1:c3:17:01:2f:fd:61:8b:a9:99:48:b7:92:42:5b:2d:71:
         5b:49:c9:27:b8:90:56:af:b8:52:24:de:4e:ba:a9:ba:24:af:
         bd:05:cb:72:9b:24:c7:08:0d:7d:30:2d:df:65:98:14:fc:30:
         c4:6a:14:db:4c:2a:64:4a:c9:57:c6:af:ea:02:0f:3d:80:36:
         fb:49:65:0d:43:37:20:28:79:09:8f:1d:73:c3:c5:7b:41:d3:
         f8:c7:a0:47:b0:4d:42:43:f5:05:c4:11:f7:5e:85:89:2a:de:
         c9:e5:e2:8b:0a:da:9b:6e:fb:be:8e:ef:5b:98:9e:90:48:a6:
         e0:e2:c0:4b:50:8a:7f:60:35:2d:d5:a2:34:8d:65:7f:b9:5a:
         76:21:e9:a3:f3:0a:39:06:db:7c:ff:a3:6b:b4:7b:f6:32:95:
         25:eb:04:31:a1:07:a3:c7:00:a9:bc:fc:e6:c3:bb:43:17:4b:
         c7:f9:8c:f2:69:f7:ea:b1:c0:c5:88:20:8c:ad:3e:41:2f:f6:
         f9:d8:d0:b6:09:5d:be:d2:9e:75:33:5c:12:cb:b7:da:da:4c:
         ed:b6:e5:ab:04:9c:57:81:b4:e1:d6:ab:9d:bb:f4:7b:58:c5:
         f8:e3:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:28:16 2024 by rpki-client on console-ams.rpki-client.org