Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
File:                     r8GT7hHlRxYWn5TI-THq4fyFSSE.mft (raw, json)
Hash identifier:          iZZ1c0DhlHVrej90nP83an0Yy1Eo9BGFlkevILhxT+w=
Subject key identifier:   66:9B:42:A3:D0:78:58:F9:38:F8:0C:7A:81:3C:45:D1:6A:A0:E3:43
Authority key identifier: AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21
Certificate issuer:       /CN=afc193ee11e54716169f94c8f931eae1fc854921
Certificate serial:       01903329F9DC21D94E8E92B437806DA1C98B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
Manifest number:          0723
Signing time:             Thu 20 Jun 2024 01:01:47 +0000
Manifest this update:     Thu 20 Jun 2024 01:01:47 +0000
Manifest next update:     Fri 21 Jun 2024 01:01:47 +0000
Files and hashes:         1: I-ZvfqiyshkBnptS5xCTZ-zJTas.roa (hash: W/nP3t47NaKPonWUnElQYdca0gw7yMVd7sLrYeLIJoU=)
                          2: r8GT7hHlRxYWn5TI-THq4fyFSSE.crl (hash: ad11uNOWGmmEk+5qZ7Pe+2oNIekR2BTCxrWb5yQesJc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 01:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:33:29:f9:dc:21:d9:4e:8e:92:b4:37:80:6d:a1:c9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afc193ee11e54716169f94c8f931eae1fc854921
        Validity
            Not Before: Jun 20 01:01:47 2024 GMT
            Not After : Jun 21 01:01:47 2024 GMT
        Subject: CN=669b42a3d07858f938f80c7a813c45d16aa0e343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:82:6d:85:42:9e:a5:07:c4:b7:48:2f:38:
                    f7:64:a6:d2:70:71:cc:af:57:ac:d3:c0:0f:82:92:
                    c1:fe:d2:8f:9f:00:95:2c:f2:b8:86:1a:2f:37:42:
                    53:ac:5f:07:00:3f:f1:41:9b:72:0b:fd:7f:37:3c:
                    96:8e:6c:0c:c3:9d:49:e2:8b:1d:f6:95:c5:0f:75:
                    5e:2b:4f:d2:0f:ee:05:1f:37:ff:81:98:d1:51:4f:
                    b9:99:d7:ac:b5:5d:07:dc:7f:13:dc:43:b0:c3:6e:
                    99:c1:a9:a6:31:5e:3c:fd:12:bf:ea:b0:15:6b:3c:
                    c1:31:eb:a1:4e:7c:d8:d7:85:73:3a:ca:07:b2:5e:
                    e5:da:d2:10:e1:74:63:0d:0c:ef:27:02:44:6f:18:
                    7b:ca:f6:06:d8:80:4a:be:87:15:e0:1b:c6:74:5e:
                    88:2f:11:78:c6:6a:8b:da:6f:07:43:86:71:f3:9c:
                    98:2b:a7:ed:09:4d:0f:ad:a6:19:19:95:0d:9e:9a:
                    c2:cb:f0:1e:25:34:48:c4:e6:62:a7:d2:5e:99:61:
                    54:e7:15:52:89:13:91:59:b1:4d:18:08:c7:b2:02:
                    12:be:1a:73:93:a3:b8:1b:a4:0a:ee:22:6a:3f:e7:
                    0e:d2:f7:ce:82:79:45:c0:db:94:66:ed:de:55:ee:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9B:42:A3:D0:78:58:F9:38:F8:0C:7A:81:3C:45:D1:6A:A0:E3:43
            X509v3 Authority Key Identifier:
                keyid:AF:C1:93:EE:11:E5:47:16:16:9F:94:C8:F9:31:EA:E1:FC:85:49:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8GT7hHlRxYWn5TI-THq4fyFSSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/0b9cbf-25ae-4327-98aa-a7dd9aea1d7a/1/r8GT7hHlRxYWn5TI-THq4fyFSSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:82:ae:9f:d0:9e:e7:bb:ef:f5:17:4e:8b:61:49:fd:38:16:
         ae:fa:c2:5e:fa:8c:4f:8f:cd:a8:9d:bc:31:1f:de:6a:7a:1e:
         48:f2:04:fe:24:08:9c:90:4e:92:51:5f:7f:95:97:b7:e9:31:
         64:42:48:f0:77:1d:ce:74:70:ee:37:90:56:2a:6e:ad:fa:57:
         b6:09:5b:24:c2:69:e4:0f:4c:c9:3a:da:10:bb:08:11:0f:a1:
         ed:dc:d0:e5:0d:da:eb:32:e5:56:42:6f:e2:fa:97:db:6a:dd:
         82:d1:af:04:17:7a:96:99:8a:4a:ba:f0:34:69:ab:5b:a0:56:
         c4:31:36:07:c5:7d:f1:21:b7:8a:5f:ed:45:da:87:2b:9b:77:
         dd:36:6d:6b:8e:d7:b8:11:94:94:05:35:f1:47:00:66:77:23:
         aa:29:b7:1e:11:1a:fb:59:d6:f6:df:f2:60:b7:f8:bf:e2:2e:
         26:72:f7:74:ef:74:d3:8c:4c:7e:1f:38:b0:cb:0c:94:c9:7a:
         6c:62:5c:4f:5f:79:d3:73:0f:94:27:7b:31:62:3d:76:96:b7:
         69:da:a8:ba:23:b7:b6:d8:f1:89:dc:28:16:36:0c:1b:8f:1a:
         32:1f:ab:45:c6:a5:de:1d:80:cd:bd:e6:87:5c:e0:19:f8:f3:
         1e:c4:b0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 11:49:33 2024 by rpki-client on console-ams.rpki-client.org