Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
File:                     m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft (raw, json)
Hash identifier:          DWX7gk/GZFqp85sGqV0uXMxKmpscvNY+8u4rZygsiIE=
Subject key identifier:   B5:28:EB:58:8F:9F:53:C8:5B:01:33:72:A1:5A:1B:55:75:88:F6:89
Authority key identifier: 9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3
Certificate issuer:       /CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
Certificate serial:       01901DEC64EDC9FCAD0899CC7B89E967A514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
Manifest number:          0846
Signing time:             Sat 15 Jun 2024 22:02:29 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:29 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:29 +0000
Files and hashes:         1: 7GHI4QuVrAkRYG1t18ix54B05QU.roa (hash: 5IK+bpb3qI93xt5wRqboWXMk6O+FnqaxD8zFDhl3mOs=)
                          2: m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl (hash: 5NQ8USNECYJ/2RpqsYB6JLZ//+LmQHAcsULUFORQHE0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:64:ed:c9:fc:ad:08:99:cc:7b:89:e9:67:a5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bb350a905df3fdbbc2456d5c81c2f209ae752f3
        Validity
            Not Before: Jun 15 22:02:29 2024 GMT
            Not After : Jun 16 22:02:29 2024 GMT
        Subject: CN=b528eb588f9f53c85b013372a15a1b557588f689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a8:17:4a:ba:a2:d1:32:25:6c:33:76:7e:41:
                    0e:0e:12:02:8d:79:28:39:5e:97:c5:76:f3:5f:3f:
                    74:cb:3e:81:03:c8:77:b1:07:0c:de:4d:bd:b1:da:
                    44:d2:f3:7b:78:a1:b1:7e:a1:75:44:46:0f:ec:42:
                    0c:af:80:d8:a1:68:b7:e8:0b:71:d1:50:79:2f:9b:
                    a2:a1:49:e6:b0:68:92:b1:8c:e4:f2:04:2d:2f:85:
                    09:31:b0:fb:01:67:76:8f:f2:ed:0a:e1:24:c9:fe:
                    5c:58:93:2d:89:39:9d:4b:86:e6:67:ad:6c:1b:8d:
                    78:9f:72:af:ed:8e:e7:86:1c:5d:b4:59:23:36:e4:
                    a3:20:92:e2:54:cc:66:ec:d4:f3:04:dc:6e:6a:80:
                    83:44:e3:98:a1:cc:75:1f:e9:81:2d:e8:c5:d9:c5:
                    06:f7:87:e9:c3:d1:1a:9b:ad:f7:99:34:e5:17:6a:
                    92:69:0b:79:f3:3f:2f:64:bd:ae:ad:7a:de:b6:83:
                    f6:57:a1:46:59:87:64:6d:f1:19:0a:e3:4d:5f:a2:
                    3e:89:1c:6e:b5:36:38:d9:18:50:a1:28:14:23:6d:
                    ba:40:d4:0f:0d:53:59:e0:f6:85:ba:7e:83:88:dd:
                    6c:eb:ca:30:39:81:c5:53:1b:b7:2b:87:04:36:c3:
                    cf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:28:EB:58:8F:9F:53:C8:5B:01:33:72:A1:5A:1B:55:75:88:F6:89
            X509v3 Authority Key Identifier:
                keyid:9B:B3:50:A9:05:DF:3F:DB:BC:24:56:D5:C8:1C:2F:20:9A:E7:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7NQqQXfP9u8JFbVyBwvIJrnUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b14ddd-afda-408c-9c46-9c1f69a242ba/1/m7NQqQXfP9u8JFbVyBwvIJrnUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:38:e3:fb:15:8a:67:e7:93:80:57:31:de:ee:a2:45:27:62:
         85:97:70:e5:e0:e7:d5:90:98:fd:5a:c3:e1:65:4e:b4:4c:56:
         1d:d3:56:a4:8f:74:5f:11:b4:2a:05:7d:71:58:1c:01:e1:8f:
         e6:39:9a:98:83:ef:1f:c5:70:91:e0:9d:17:c9:8c:1c:7c:ab:
         23:b9:e3:8a:54:67:e5:37:eb:d6:5c:fc:44:90:23:63:b2:f6:
         92:ae:38:48:26:2f:32:79:2d:a3:47:c9:1e:72:fe:34:1f:ad:
         bc:61:cc:31:a8:e0:e1:34:b9:ee:2c:19:7f:8b:72:a8:63:8b:
         82:3c:80:18:88:a7:e9:54:b8:71:e4:9f:16:ab:e8:1f:54:52:
         31:d7:7f:40:08:28:10:bf:54:eb:9e:d1:ce:91:bd:c3:4a:ac:
         d4:bd:23:00:b9:54:ca:d2:f7:0b:e8:27:cd:57:c9:9a:b4:f1:
         b8:52:91:c2:41:7f:74:e8:9d:67:2a:04:63:6b:f9:06:34:e4:
         6c:bb:d5:50:ac:10:2d:c5:e0:72:9e:9b:60:b3:2f:f7:71:64:
         36:0e:c8:73:58:17:db:5d:d5:46:8a:8e:de:01:ce:aa:1c:58:
         60:c9:80:e3:59:1c:36:e9:50:23:dc:b4:81:4e:8c:a3:23:02:
         86:fe:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:05:03 2024 by rpki-client on console-ams.rpki-client.org