Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
File:                     i90HS96_RRVKJr6_3OVTgpFTSwo.mft (raw, json)
Hash identifier:          Y2YWaq0l/R42Zs3O2UbziTNRKieAZnz7RzxYSGEPbtc=
Subject key identifier:   AE:38:76:65:F3:0D:8B:D0:B3:D6:F1:0F:9C:DB:65:CB:6C:B2:F9:A9
Authority key identifier: 8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A
Certificate issuer:       /CN=8bdd074bdebf45154a26bebfdce5538291534b0a
Certificate serial:       0190448B662730C7D798FF93969C5D948838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
Manifest number:          0600
Signing time:             Sun 23 Jun 2024 10:01:44 +0000
Manifest this update:     Sun 23 Jun 2024 10:01:44 +0000
Manifest next update:     Mon 24 Jun 2024 10:01:44 +0000
Files and hashes:         1: 4bHLmapE_9WBjyiDLhZeGtkgGvo.roa (hash: eLh7Mo/+m8RUNAM3C8Flv3NDGXyKgx9Af49sXfZgorQ=)
                          2: i90HS96_RRVKJr6_3OVTgpFTSwo.crl (hash: UL/Iq2heY2GbI/SMfVE41kZVJbzWpM9AHk361hRvLW8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8b:66:27:30:c7:d7:98:ff:93:96:9c:5d:94:88:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdd074bdebf45154a26bebfdce5538291534b0a
        Validity
            Not Before: Jun 23 10:01:44 2024 GMT
            Not After : Jun 24 10:01:44 2024 GMT
        Subject: CN=ae387665f30d8bd0b3d6f10f9cdb65cb6cb2f9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1f:36:64:92:54:8f:a0:3c:a9:c2:b9:62:21:
                    26:47:8f:c4:53:e5:ba:f4:18:af:f0:24:6e:a7:6b:
                    65:49:c0:c7:77:52:20:49:2a:1b:3e:db:c3:90:a4:
                    39:5c:1e:9e:0a:55:40:77:c6:f2:08:06:bc:81:25:
                    4a:fb:d1:12:ee:8d:13:95:50:60:91:dd:af:1e:26:
                    88:ce:da:75:0d:14:bb:08:a8:3b:cd:a9:10:90:e1:
                    9e:c1:de:8f:8d:98:25:d9:d7:4b:eb:23:84:ab:87:
                    9a:d2:69:79:b1:91:a9:ef:b6:d1:4c:b3:81:9e:07:
                    b6:b7:db:12:02:7a:c2:a9:32:a4:af:19:b6:ef:b2:
                    35:87:4a:a3:c4:7a:63:f9:5f:c5:9c:45:90:8c:82:
                    22:13:80:a4:4e:fc:2a:11:df:1a:3b:0f:07:48:50:
                    77:a9:89:1f:77:b4:c0:f3:a8:1b:8c:9f:01:8e:ab:
                    f9:8a:38:8a:b8:f7:e1:94:3f:e3:73:6b:50:f3:2f:
                    72:bd:df:fa:0e:81:cc:cb:eb:39:7b:9e:56:c5:63:
                    4e:f8:25:36:73:85:02:6f:e9:21:ae:73:e4:bb:eb:
                    4a:4a:80:97:41:c5:54:48:01:f9:54:74:b0:37:bd:
                    cc:20:70:1a:f2:a5:12:c1:35:81:ce:ec:03:60:d6:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:38:76:65:F3:0D:8B:D0:B3:D6:F1:0F:9C:DB:65:CB:6C:B2:F9:A9
            X509v3 Authority Key Identifier:
                keyid:8B:DD:07:4B:DE:BF:45:15:4A:26:BE:BF:DC:E5:53:82:91:53:4B:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i90HS96_RRVKJr6_3OVTgpFTSwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/af71d0-df80-483e-b059-50fbf7e95042/1/i90HS96_RRVKJr6_3OVTgpFTSwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b1:2e:a4:2a:83:f1:4b:82:92:56:18:7f:a0:3e:00:14:23:
         0a:8a:f6:14:dc:a7:48:57:f6:dd:83:22:75:7f:a4:08:56:c0:
         1d:54:50:99:16:29:94:1f:ef:68:ff:a5:77:82:37:9b:02:a4:
         2b:bd:32:1b:43:5e:15:0b:7a:43:59:2a:f1:00:c2:7f:82:cd:
         b5:84:cf:7f:db:93:14:8d:ef:eb:a1:b9:27:71:6c:29:af:03:
         1b:c3:90:82:18:9a:27:f1:64:52:32:03:ac:73:ad:e8:ba:81:
         b6:a0:57:9d:f3:7f:c1:48:20:9b:43:d8:2f:61:77:7f:c3:93:
         33:d1:8b:58:93:db:c5:62:56:48:ac:8b:41:3b:00:e8:3d:9b:
         81:07:94:0f:ee:73:ca:3b:84:c9:b1:fb:c2:d7:96:01:23:eb:
         fa:39:ab:02:3c:84:05:2f:d3:fd:dc:5c:cb:8a:5a:f0:00:ac:
         76:34:3e:fb:03:11:a0:eb:ff:96:d1:4d:19:a3:4f:d3:54:d0:
         86:bd:8e:81:1f:e2:a1:67:c5:7c:67:1d:16:0d:88:89:c7:0f:
         cb:56:b0:3f:d7:92:51:65:89:bc:f8:32:3d:f6:95:64:e5:b7:
         00:50:d2:01:fe:9c:3f:40:1d:4e:c0:2d:da:ce:2d:d8:a6:fe:
         cb:fe:5e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:05:54 2024 by rpki-client on console-ams.rpki-client.org