Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
File:                     zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json)
Hash identifier:          6fa0vx7aJjCRiNBxtTrVBbIj2PU5e1OyyZYwzTAvb3s=
Subject key identifier:   89:8C:0A:AB:A9:A9:BF:C1:CA:F7:96:B8:58:9F:16:58:29:0A:D8:CF
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Certificate issuer:       /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial:       0190448C34EFA14359ECDE123B05B0CDBAF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
Manifest number:          050F
Signing time:             Sun 23 Jun 2024 10:02:37 +0000
Manifest this update:     Sun 23 Jun 2024 10:02:37 +0000
Manifest next update:     Mon 24 Jun 2024 10:02:37 +0000
Files and hashes:         1: nk3NI177XmOh67vBK0jO-qE1kDs.roa (hash: mj9wfwmMkcDMGJAWXTsaR5to7VXNi/U1h4Xi6nnCFQ0=)
                          2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: vKRbMmAEwgZqqLHW5jcOm5+i1Vmhb25ziZUkJZPXHw0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:34:ef:a1:43:59:ec:de:12:3b:05:b0:cd:ba:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
        Validity
            Not Before: Jun 23 10:02:37 2024 GMT
            Not After : Jun 24 10:02:37 2024 GMT
        Subject: CN=898c0aaba9a9bfc1caf796b8589f1658290ad8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:29:fd:88:2c:4a:6c:75:13:d8:0b:28:e6:
                    a4:e5:7a:de:0b:ab:22:83:d9:5e:3c:c2:ea:15:01:
                    34:4d:2c:8e:d6:15:26:cb:ea:dd:76:f3:f3:2d:c3:
                    d4:54:fb:02:19:ca:5f:e0:43:98:89:84:95:50:eb:
                    39:04:8b:f2:6b:21:48:f8:41:5f:3b:5c:b2:1c:a7:
                    3d:8b:c6:0d:2f:8d:ee:42:8d:1d:1b:a9:e6:14:76:
                    4e:0a:72:cb:2b:9d:05:13:22:a5:87:e9:2f:e0:5a:
                    78:78:69:79:a6:4f:a1:bb:49:5f:f0:75:d5:1b:03:
                    85:f8:2d:2b:0c:ec:b9:02:61:cb:18:c5:71:16:08:
                    22:ee:44:9c:86:de:f4:24:23:82:45:e8:ce:82:59:
                    d0:dc:1b:dd:13:58:6f:cb:22:94:07:12:84:0d:16:
                    3f:08:73:34:ab:20:5d:93:a9:af:b9:1a:5d:76:87:
                    7b:76:ff:5c:78:47:03:2a:7d:82:0d:f7:fd:11:90:
                    88:c7:ee:f7:14:ee:f2:32:5d:00:23:3f:ef:51:50:
                    ce:63:62:fe:23:4d:7d:4d:d8:38:58:05:46:41:08:
                    71:c3:c1:21:2e:ec:5b:80:c1:b7:84:e9:23:4c:2f:
                    e4:f6:64:9f:40:fe:33:d1:10:81:aa:e6:8e:cf:b1:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8C:0A:AB:A9:A9:BF:C1:CA:F7:96:B8:58:9F:16:58:29:0A:D8:CF
            X509v3 Authority Key Identifier:
                keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e8:26:f0:68:bb:5b:63:24:2a:02:db:6e:30:4a:90:d0:49:
         d3:bb:4e:38:a1:99:8e:db:29:1c:9a:e8:b8:5d:e8:da:41:26:
         ae:08:ed:93:51:67:a3:64:3f:b9:0d:a7:c4:a3:45:3e:82:d3:
         80:88:99:26:46:4c:23:28:10:64:52:08:48:e8:a1:4f:8b:45:
         20:76:27:fa:98:5b:41:8f:dd:5b:3c:8b:4b:60:f7:19:30:b2:
         d2:b1:e1:30:bb:4c:ce:5a:b0:99:71:d0:df:dd:5f:19:f2:4e:
         b3:ee:d2:b4:18:44:0d:b9:56:a7:5c:dd:9a:2a:89:e8:08:3e:
         0c:b2:98:18:79:f6:da:33:e6:30:17:23:21:96:c4:90:52:f5:
         59:5b:8b:de:d3:48:8d:6c:a8:cc:fb:bd:f8:ab:6c:db:e5:9b:
         f7:61:91:1f:f2:09:54:dd:df:b7:6a:5e:30:8a:bb:ee:c1:86:
         82:32:ed:3c:78:e3:89:e9:1a:dc:46:45:9e:d6:9d:7a:ee:00:
         e1:75:7a:e3:75:70:62:2f:39:71:6f:1b:4e:be:e9:96:1c:e8:
         a2:ed:c4:f6:18:14:66:09:ca:05:e9:24:de:0c:12:08:92:da:
         f4:ac:cb:aa:2c:87:b9:48:bf:7f:5b:ef:08:db:5d:46:cc:9b:
         82:a8:97:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:00:04 2024 by rpki-client on console-fra.rpki-client.org