Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File:                     paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier:          jFk735ZyWKkzrY9yKLIt+aW1Ltst7Hm/dJ5IZ97baBk=
Subject key identifier:   9A:F3:97:A7:D0:EC:B5:A4:34:1E:24:6D:00:B6:23:AA:04:39:B3:97
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer:       /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial:       01903AE4949B7E70DB112DFED980698ACB4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number:          0E76
Signing time:             Fri 21 Jun 2024 13:02:57 +0000
Manifest this update:     Fri 21 Jun 2024 13:02:57 +0000
Manifest next update:     Sat 22 Jun 2024 13:02:57 +0000
Files and hashes:         1: 5k053VRgaR-B9Fw14yhkd-ZuBqQ.roa (hash: 9OJWbi9XeRmElAXu0fLjcaYC4HqKTGy2ESP+ptLPPCo=)
                          2: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: fNfDgJrcjREQviXfYJMGmcUTc45LRmKKDPeLE3aNlD8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e4:94:9b:7e:70:db:11:2d:fe:d9:80:69:8a:cb:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
        Validity
            Not Before: Jun 21 13:02:57 2024 GMT
            Not After : Jun 22 13:02:57 2024 GMT
        Subject: CN=9af397a7d0ecb5a4341e246d00b623aa0439b397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bc:01:a9:e6:0c:07:28:53:38:64:6f:8e:3f:
                    64:bd:29:1a:16:76:96:20:81:81:c8:74:65:0a:25:
                    cc:24:15:bd:fd:f5:d9:da:aa:9e:6d:3c:41:f5:6f:
                    b3:5d:61:a0:81:4c:bd:33:41:38:e7:74:35:f3:db:
                    e2:eb:19:e1:ca:81:f8:9a:3c:63:aa:b2:d8:60:a2:
                    16:5f:38:12:94:e9:2f:9b:6f:bd:48:5a:d2:8e:af:
                    79:98:59:a2:75:a0:01:58:fa:ed:d9:12:c1:f7:fd:
                    63:5c:95:d4:1d:c4:22:a7:2d:4b:b9:05:29:c5:10:
                    3c:b8:b8:c7:49:4a:eb:1e:01:e1:60:ff:0c:1a:13:
                    78:5e:b2:07:ee:4b:1c:0a:12:a9:2d:62:d7:9f:09:
                    45:f2:c7:31:11:42:77:63:c3:de:f9:90:ee:08:51:
                    fe:4f:3a:5a:cb:bf:25:06:06:36:69:d8:55:3f:eb:
                    ec:62:93:97:62:fc:91:51:61:26:18:16:3b:58:6c:
                    4e:a7:6b:80:3f:e1:4b:98:de:a0:da:83:bd:14:f3:
                    bd:db:7e:0e:97:57:02:b5:90:27:ef:0e:f6:78:0c:
                    05:9e:87:74:be:ab:64:2e:72:4a:d9:e5:ec:b1:6a:
                    0b:3f:d3:fa:fd:86:9d:80:3b:21:42:4b:09:fd:21:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F3:97:A7:D0:EC:B5:A4:34:1E:24:6D:00:B6:23:AA:04:39:B3:97
            X509v3 Authority Key Identifier:
                keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b8:92:62:ff:7e:f5:9a:a0:9c:fa:84:00:2f:32:42:62:de:
         8c:ed:04:4b:39:7d:08:9d:3d:58:27:4d:ac:a4:60:dc:bf:52:
         ff:ad:e7:11:3b:d6:a1:b5:4c:b8:ed:f8:33:eb:3c:86:32:b6:
         8c:ad:a6:c3:9e:69:c1:df:9c:cc:6e:3d:12:5e:47:d8:0f:d8:
         ab:93:ee:fa:31:5e:b2:2e:da:93:ef:3f:2b:50:b3:00:a9:33:
         5c:d6:c5:bb:1e:10:cf:ec:3e:c5:1f:15:53:a1:e9:6d:27:6e:
         27:33:c0:8b:27:8b:2f:15:32:92:52:37:58:16:36:7e:f7:da:
         35:0e:40:8f:9e:62:92:ed:bd:ea:e7:9f:d7:93:46:08:0a:85:
         75:f1:31:26:f3:9f:64:84:90:4e:e2:0e:5b:a5:a4:9d:9b:e5:
         26:c3:cd:26:08:ae:34:58:dd:1d:d2:56:04:2c:2d:0b:0d:c7:
         ef:1b:84:5b:dc:4b:31:4f:1b:8f:ce:e7:e8:bb:a4:da:18:4f:
         4d:0e:32:7f:63:74:fd:f2:bd:a2:ae:7c:06:17:73:00:5b:c9:
         f2:e4:9f:4f:c2:17:a9:d3:9d:07:1a:42:36:03:57:93:d7:a2:
         46:82:2b:36:a0:78:b9:b1:0d:56:ad:3c:b2:d0:b8:5a:45:21:
         dd:a6:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 17:43:47 2024 by rpki-client on console-fra.rpki-client.org