Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
File:                     mQYOLer_6n1iLdkVgP-QFfJVdYs.mft (raw, json)
Hash identifier:          lJF+EOxwnFVrJNGuiEhDig62EGu7a4u7CrGaNRj6Hao=
Subject key identifier:   01:23:E5:B8:9B:F6:8E:22:47:E0:41:4E:E8:68:ED:CC:85:AD:67:AA
Authority key identifier: 99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
Certificate issuer:       /CN=99060e2deaffea7d622dd91580ff9015f255758b
Certificate serial:       019040AF690FDB81DB7E5500397F5D4A0991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
Manifest number:          0209
Signing time:             Sat 22 Jun 2024 16:02:35 +0000
Manifest this update:     Sat 22 Jun 2024 16:02:35 +0000
Manifest next update:     Sun 23 Jun 2024 16:02:35 +0000
Files and hashes:         1: 1-utkbSuESXzjipC5RuSg8MwJNIA.roa (hash: SbUzzkQcw/mbAnyREOSU084cYTiUNMSz8NOn/2JQAa0=)
                          2: mQYOLer_6n1iLdkVgP-QFfJVdYs.crl (hash: 6XioBzNzDeFxza4/7Sm0P7IcgxVP24cDu+ZxzPrlQy0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:af:69:0f:db:81:db:7e:55:00:39:7f:5d:4a:09:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99060e2deaffea7d622dd91580ff9015f255758b
        Validity
            Not Before: Jun 22 16:02:35 2024 GMT
            Not After : Jun 23 16:02:35 2024 GMT
        Subject: CN=0123e5b89bf68e2247e0414ee868edcc85ad67aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1e:42:54:af:c0:c2:46:19:b8:92:36:64:cf:
                    8e:22:88:c3:48:52:03:b6:e0:3e:65:10:32:00:32:
                    ae:32:ff:35:51:ba:a6:d7:a9:85:7b:1b:a9:f1:24:
                    73:f4:3d:36:24:7e:8a:f1:eb:a5:1a:da:ac:10:2e:
                    fa:82:1c:83:7c:9a:54:68:3f:19:23:ac:06:ed:4b:
                    6e:7d:60:42:0a:04:02:2b:65:e0:74:8c:c3:2e:05:
                    e7:d4:e9:1a:5a:2f:94:0f:b1:4e:03:0a:8d:c3:3b:
                    3e:70:2e:02:28:ee:e6:94:ce:f8:66:73:f5:70:07:
                    36:87:d0:3f:6f:df:37:eb:8d:15:bd:90:0a:4e:dd:
                    7b:9d:ba:9b:6b:1c:70:a5:96:26:60:46:5e:be:af:
                    26:53:7b:d9:a2:a8:fb:9d:3e:25:b2:f0:17:33:ca:
                    56:af:58:9d:8c:88:e4:84:35:46:9b:e1:3a:dd:51:
                    d1:fc:31:c3:36:30:a6:52:f5:31:48:61:39:e5:f1:
                    eb:9e:52:a5:7b:e2:c4:a8:be:28:4a:79:9c:3d:3f:
                    c8:44:52:21:26:0a:98:ac:ae:7b:95:44:b3:e7:7b:
                    46:37:18:44:5a:35:98:26:74:86:73:e9:1c:99:a0:
                    3b:15:b0:4b:e2:68:f1:ed:91:50:c5:64:3f:b3:5f:
                    c7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:23:E5:B8:9B:F6:8E:22:47:E0:41:4E:E8:68:ED:CC:85:AD:67:AA
            X509v3 Authority Key Identifier:
                keyid:99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c1:f8:a8:72:ba:d2:81:90:39:02:d5:6d:c0:ed:62:89:37:
         54:e6:a4:5b:2b:5a:31:d9:d4:e0:c2:57:ab:b1:bc:44:9a:34:
         cb:e4:ff:f2:12:86:e7:6b:05:45:25:53:85:6b:fb:2c:e8:a6:
         0f:10:23:66:5d:ee:8a:e5:9b:ac:7b:c6:a3:cc:b3:cf:4a:64:
         be:82:e3:75:65:a3:40:0e:fa:84:ed:22:f6:c1:2c:59:d9:d4:
         64:ed:74:aa:b3:44:48:0e:5c:31:b0:7b:18:6f:97:6e:8f:fa:
         ef:6d:17:31:d9:a9:45:78:b7:81:6f:a6:2b:41:5e:fd:96:35:
         3b:62:91:26:2e:6a:30:13:fd:27:ed:cd:a8:7d:3c:34:ac:e8:
         d5:3e:da:81:9c:35:da:fd:57:a1:6f:ec:64:6a:fc:f2:28:cf:
         bb:54:fa:32:be:14:3d:4e:5f:1c:bf:ac:c8:69:ef:e2:b5:f6:
         3e:58:e0:9e:62:23:69:77:16:73:c9:d2:8a:fe:27:a4:91:f9:
         59:70:20:37:67:68:b8:09:17:24:9f:5d:e3:a0:4a:54:3e:9c:
         02:80:6f:98:e7:42:02:75:38:32:4c:fb:60:69:bd:05:43:5e:
         b4:70:8d:6d:44:88:32:33:be:e5:e9:39:a0:d3:50:25:a2:bd:
         41:92:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 18:52:17 2024 by rpki-client on console-fra.rpki-client.org