Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
File:                     mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json)
Hash identifier:          V428imuoJ4WLQT7uEbBTMYIZ+PubUcKaUoR3Hv/55FI=
Subject key identifier:   08:E7:12:10:5B:F8:66:24:6B:86:75:15:D0:13:63:3D:F5:8E:AB:54
Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
Certificate issuer:       /CN=99252ff7f4dcf62234d22f86a1135b344923daab
Certificate serial:       01901D0F035E90A9D89ED8A1D89AF5A1D1DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
Manifest number:          047C
Signing time:             Sat 15 Jun 2024 18:00:41 +0000
Manifest this update:     Sat 15 Jun 2024 18:00:41 +0000
Manifest next update:     Sun 16 Jun 2024 18:00:41 +0000
Files and hashes:         1: UuBG0aOb6_GftuhFLQe4PZGjyng.roa (hash: sdSq+5L8tFFEWuJI49wUxFMZoGaEooBPts7hj6uRRyk=)
                          2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: /UNRpy1AKr/QVlxPnN0iJ6mwJ2XgNmfAPidw2pLK7xc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:0f:03:5e:90:a9:d8:9e:d8:a1:d8:9a:f5:a1:d1:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab
        Validity
            Not Before: Jun 15 18:00:41 2024 GMT
            Not After : Jun 16 18:00:41 2024 GMT
        Subject: CN=08e712105bf866246b867515d013633df58eab54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:4a:ca:1a:47:ac:76:93:5b:e2:65:3e:fb:
                    12:fb:34:11:0d:be:ed:38:73:8c:d7:6c:56:cb:d2:
                    ba:0a:50:c1:36:af:7d:0d:4f:9e:0e:48:40:0b:6d:
                    3e:da:42:ef:59:b1:31:33:e8:f3:9b:99:1e:15:d7:
                    40:e8:0e:85:7f:11:5d:db:18:7f:60:a1:ec:c3:15:
                    19:36:9e:6b:cc:46:d9:02:0d:4d:6a:f3:69:8b:f3:
                    0e:11:67:51:87:07:ba:56:3e:c0:2d:23:85:c9:27:
                    36:79:d9:5f:95:fd:81:00:06:00:97:86:53:7b:7c:
                    08:c4:79:8c:f0:7f:19:b3:84:70:1f:64:5b:ae:58:
                    7f:c3:d4:b9:ed:41:aa:79:cb:33:2b:bd:45:77:cc:
                    8a:e0:95:4c:dd:47:ec:99:30:67:82:7b:93:8d:9f:
                    27:ea:92:f8:39:64:be:19:1f:a1:0a:a4:93:6b:61:
                    6a:46:5d:e9:a6:26:60:91:f1:6a:69:e6:d8:e5:5b:
                    4d:b6:5b:db:78:25:6a:e9:f5:b7:b0:52:c2:af:5e:
                    b8:f9:69:4e:49:18:8c:bb:28:2d:2c:1f:e9:3e:80:
                    3e:41:58:2a:fc:eb:c8:af:63:01:61:2d:e5:1e:fb:
                    c6:48:be:a7:01:56:f3:03:df:4d:85:45:13:4b:20:
                    9b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E7:12:10:5B:F8:66:24:6B:86:75:15:D0:13:63:3D:F5:8E:AB:54
            X509v3 Authority Key Identifier:
                keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:87:89:d9:ba:e2:2e:6b:ae:b6:b8:88:41:ce:22:96:59:37:
         85:9e:6a:59:cf:36:40:7a:fb:6a:0c:02:57:03:87:44:99:58:
         0f:bc:42:ac:86:df:9a:72:78:84:17:73:0a:66:28:f7:3f:85:
         6f:d0:23:ea:44:21:42:f7:fb:bd:d2:90:50:89:95:ef:7f:1a:
         cb:c5:5e:66:82:cc:19:5b:41:c7:b4:78:59:ba:73:16:93:63:
         8c:78:61:fa:da:1a:a2:dc:af:32:74:54:91:31:df:35:e8:01:
         0b:cc:f0:72:8e:b6:10:54:b7:9e:de:40:e2:35:a8:1a:17:26:
         25:0e:01:04:47:46:70:b1:48:76:6a:59:55:57:b7:b3:90:ff:
         fd:9c:64:4e:e5:5a:6a:69:f1:67:8f:0b:4f:8a:8c:0a:5e:3c:
         ad:05:ae:a4:81:1b:4a:42:b2:55:63:c3:78:93:88:f4:2a:7a:
         4f:f5:4c:02:bc:97:d7:56:e3:ef:98:72:b1:e9:6f:0f:71:bd:
         c5:fb:da:60:85:fd:14:d6:bf:83:60:5f:49:8b:ae:ac:7a:5f:
         f9:7e:3f:ec:b9:17:57:c3:cf:6f:46:25:e4:d1:8a:86:8b:0d:
         cc:05:fa:2f:1f:bf:0d:74:eb:a1:4c:0b:dd:71:36:8b:4f:42:
         8e:ac:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:07:41 2024 by rpki-client on console-ams.rpki-client.org