Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File:                     un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier:          mryiqD270dXv/kWBUNj/QjikRS3J79C6QuxTSE5FSiI=
Subject key identifier:   90:2D:FE:6E:81:0A:97:B4:48:2A:04:CD:20:1E:9F:4C:AD:EE:AD:4C
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer:       /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial:       01901DECE80D982E361FDA6F26367E8E10FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number:          087E
Signing time:             Sat 15 Jun 2024 22:03:03 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:03 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:03 +0000
Files and hashes:         1: qKZAVI9QCBNieJgtBNaqruNjG88.roa (hash: jIU8ABHGgNre6ILPxymbVfelH0Vt1kHjTwvc8ryT44I=)
                          2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: R+xUt+x3dTAo6zi+dCQze66fvaQ02rAC4Sk1TxM+KTs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:e8:0d:98:2e:36:1f:da:6f:26:36:7e:8e:10:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
        Validity
            Not Before: Jun 15 22:03:03 2024 GMT
            Not After : Jun 16 22:03:03 2024 GMT
        Subject: CN=902dfe6e810a97b4482a04cd201e9f4cadeead4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:f9:aa:5d:ba:3d:0d:ff:87:e7:8a:0b:d3:
                    94:19:4b:f8:48:5f:43:ff:32:5a:08:53:ce:f6:2f:
                    cb:e4:8f:c8:00:be:d7:5a:b0:0a:00:5e:5e:83:9d:
                    e3:5e:bb:38:f7:e0:c4:6a:0c:ff:cc:a5:21:9b:ec:
                    6f:d1:f5:dd:b7:a8:0a:01:a3:d8:f2:1b:95:be:ba:
                    56:77:c1:99:aa:a2:bc:93:a2:c9:6f:91:c3:64:cc:
                    d0:19:e5:a0:0e:87:91:4a:7b:d9:d0:28:78:3b:b9:
                    66:94:1c:81:08:19:f1:83:75:29:8b:29:0b:af:2f:
                    65:4a:2f:0f:8a:cb:d7:de:db:11:02:62:25:96:32:
                    ef:a9:fd:a1:03:57:08:c4:8c:14:2c:c1:1c:81:68:
                    4c:bd:be:eb:96:9c:86:e5:c6:0f:b5:63:eb:b4:44:
                    f9:ff:15:37:20:e6:0d:08:10:6e:56:ae:bc:2e:bc:
                    7f:05:73:a6:5c:1c:20:d0:97:db:b8:7c:f0:9d:f4:
                    d5:3c:c4:da:b2:30:f2:ff:69:b3:32:97:e3:7e:a8:
                    53:7f:6d:43:35:a9:7b:19:f5:61:69:48:0c:bd:3f:
                    8e:39:f0:8d:75:79:87:aa:9a:39:cf:bf:4b:5a:f9:
                    0f:67:06:0f:9f:71:54:dd:d1:1a:a0:85:13:a7:3f:
                    1e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2D:FE:6E:81:0A:97:B4:48:2A:04:CD:20:1E:9F:4C:AD:EE:AD:4C
            X509v3 Authority Key Identifier:
                keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ad:95:05:0f:f2:3a:56:62:64:b8:ac:ed:29:ab:40:e9:34:
         f5:b5:79:74:fc:ad:83:96:25:b6:88:f5:61:29:57:39:b0:16:
         9b:6c:c8:b1:01:c8:17:d2:72:7c:a0:26:76:59:5a:6d:5f:d7:
         99:17:5e:05:87:34:7c:dd:2c:08:a0:5f:6b:6b:24:9c:5a:49:
         45:3d:5b:9a:b9:57:03:f0:76:2f:dc:2a:be:13:85:d0:3a:bd:
         bc:bf:f3:de:0e:f6:39:3d:47:38:6a:42:e9:df:9d:68:49:bc:
         ba:a2:f9:fc:a7:54:33:12:13:cf:6d:ff:63:f4:95:4f:87:20:
         f4:68:99:ad:f1:9e:c7:a3:59:59:9d:4f:db:4f:20:6a:0e:3e:
         73:51:a4:5d:e9:03:20:b9:e7:11:db:4f:4f:aa:c4:f9:d9:67:
         bd:60:05:b5:44:d1:d9:8d:c6:fc:03:ac:5e:05:70:27:43:42:
         40:f9:c2:d0:c3:f7:3b:c7:6d:3e:b6:a0:cd:90:3f:00:d5:d0:
         18:9c:25:d6:c2:18:33:90:8c:7b:38:c8:66:7f:1a:1d:0f:90:
         26:b2:e5:f5:a8:45:71:bc:e0:7f:e5:4d:fe:9f:a1:42:0a:24:
         66:36:17:06:7a:01:79:23:fe:e7:be:07:8d:b1:1e:2d:2b:b4:
         6d:77:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:51:47 2024 by rpki-client on console-ams.rpki-client.org