Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File:                     bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier:          wUO57YlOxL4XPcCTVnMRuvIkSXkrzj4lWYUSfiHTGtM=
Subject key identifier:   E4:4A:AB:2A:7F:AD:57:EC:0E:30:21:28:00:84:30:C7:9C:F8:40:74
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer:       /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial:       01901DEB3D6BBB372A7CFD4702AA473B1045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number:          097A
Signing time:             Sat 15 Jun 2024 22:01:14 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:14 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:14 +0000
Files and hashes:         1: NKKBMvK4Wn5gaSQ9C08cpfQLAlo.roa (hash: GXH6ufLNbQ4eeSNsRXWhLgNtDN8+kmUWvaH/j44SaEQ=)
                          2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: 48cnNNjW+9DrOuDcVKPBXTajbHC4FKjYSZDT4ZAVCgE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:3d:6b:bb:37:2a:7c:fd:47:02:aa:47:3b:10:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
        Validity
            Not Before: Jun 15 22:01:14 2024 GMT
            Not After : Jun 16 22:01:14 2024 GMT
        Subject: CN=e44aab2a7fad57ec0e302128008430c79cf84074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:60:86:ec:23:a9:6c:53:6c:8a:99:bc:f4:18:
                    72:cc:36:dc:34:59:7b:93:d2:8b:47:91:e3:7e:95:
                    e3:3d:b1:94:94:f9:99:56:47:c9:cf:12:cc:1b:9e:
                    98:ce:00:c9:7e:e8:73:7a:83:16:9a:c5:d8:57:a6:
                    45:48:04:55:25:ca:73:2f:49:9f:58:6c:5a:67:d8:
                    59:5b:75:2a:62:20:fc:40:46:b1:9a:af:fd:e7:b0:
                    33:1b:6a:49:0e:36:f2:2e:62:b0:a7:49:01:26:27:
                    40:32:e5:40:ad:91:29:50:2b:ae:67:d4:0c:b7:77:
                    9f:c6:97:ce:6f:65:c7:b5:ea:f4:0b:1c:76:36:f9:
                    45:6e:f3:43:32:f2:8f:dc:cc:5e:92:03:4a:6d:f5:
                    3b:ed:37:58:93:5f:0d:a5:c3:e7:9c:89:c2:c4:09:
                    ce:a7:9b:10:61:d5:08:9d:28:c9:0b:65:46:eb:04:
                    4d:9b:87:f8:1d:06:79:6b:52:2d:bf:9b:a3:10:3f:
                    8c:88:29:ea:ad:01:a8:43:fc:8d:ca:01:49:ab:15:
                    e2:70:b4:e8:5a:9c:1d:2d:26:d1:26:5a:3d:21:bb:
                    df:04:bd:6b:8c:cc:4c:c3:ca:a9:eb:84:d4:54:de:
                    a3:4c:bc:1b:10:24:f3:66:fa:a1:78:ee:5b:65:78:
                    24:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4A:AB:2A:7F:AD:57:EC:0E:30:21:28:00:84:30:C7:9C:F8:40:74
            X509v3 Authority Key Identifier:
                keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:61:9e:51:2d:18:9f:d6:cb:11:34:d5:41:a6:ac:51:f6:f6:
         09:dd:40:45:2b:91:61:b4:7c:3d:88:ea:68:3c:3f:48:93:47:
         91:3c:35:43:fd:53:8e:8d:a9:56:b7:d5:98:f9:f9:6d:13:f2:
         ad:f1:5e:99:45:25:e3:64:30:c2:de:51:08:24:ad:bf:46:c5:
         c1:73:c9:6c:c1:b8:72:7a:45:9c:8d:86:03:34:94:80:e0:a2:
         54:7e:26:93:b9:74:c9:f8:6a:75:19:b7:19:d6:90:13:08:2a:
         94:e4:30:b9:7c:75:10:36:99:4b:10:37:52:36:f6:a9:3e:85:
         6b:36:1b:dd:35:ca:e3:86:f5:11:0b:d3:5e:97:c0:36:ea:c9:
         c9:22:f0:21:51:c6:16:c4:43:77:d1:f2:83:07:f4:88:65:68:
         33:b7:57:af:a2:28:14:d7:02:29:89:d4:bb:ef:30:70:2b:81:
         49:37:a6:15:78:80:35:d6:cf:cc:b4:11:6b:35:b4:36:36:f7:
         5e:2a:4d:1c:5b:b2:68:63:0e:16:a0:d8:4c:6b:ab:3f:76:81:
         91:14:b2:cd:0e:7f:58:6e:ef:e3:ca:c5:a5:72:a3:dd:41:96:
         86:92:8e:f7:0e:fc:77:51:75:65:2d:94:c3:06:bc:1f:33:22:
         cb:05:d6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:00:12 2024 by rpki-client on console-fra.rpki-client.org