Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
File:                     hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft (raw, json)
Hash identifier:          WpN9rONABaaGIj8SHY4AE0fpGs1c3Sfw4zBXBKdJD5A=
Subject key identifier:   AA:5E:C3:17:61:6D:47:C9:C5:DD:2C:A3:7A:06:EF:65:51:83:D6:4A
Authority key identifier: 84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00
Certificate issuer:       /CN=846d45225cf0d4fa9c65aee88861d2261203ad00
Certificate serial:       01906B2C00302E8B537F6CD6954B995E7E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
Manifest number:          0C88
Signing time:             Sun 30 Jun 2024 22:02:44 +0000
Manifest this update:     Sun 30 Jun 2024 22:02:44 +0000
Manifest next update:     Mon 01 Jul 2024 22:02:44 +0000
Files and hashes:         1: hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl (hash: Dl0rPZNjARCdRYe+3txNOsx4dA2J+p6lkt15VIXxrbI=)
                          2: k7YDV32Pm8NmPMhm4W7KU5PZhEQ.roa (hash: CDCu3RyyElSeUdKdTusVV0q45q5XO7ivv1pJCm5l/rE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 22:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:2c:00:30:2e:8b:53:7f:6c:d6:95:4b:99:5e:7e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=846d45225cf0d4fa9c65aee88861d2261203ad00
        Validity
            Not Before: Jun 30 22:02:44 2024 GMT
            Not After : Jul  1 22:02:44 2024 GMT
        Subject: CN=aa5ec317616d47c9c5dd2ca37a06ef655183d64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:6b:cb:c8:b5:d7:9c:82:59:c0:60:a8:6b:
                    dc:f4:7b:7b:1a:b8:33:4e:ad:c8:ca:be:7e:42:c4:
                    ec:6a:48:8d:75:57:e7:be:1e:17:73:12:3a:5e:64:
                    e9:ca:fa:2e:c8:62:9b:ce:5f:dd:b6:86:01:fb:fc:
                    76:6b:6e:ed:6b:1f:a9:7f:fe:38:6b:46:50:99:b0:
                    5b:62:b5:d1:df:78:c2:d4:95:0e:56:1c:87:ae:cd:
                    45:50:d9:04:ab:fb:e3:1a:d3:ef:b3:49:d0:b0:5d:
                    dd:9c:e5:bc:49:85:5a:32:fa:63:c9:cb:39:9f:56:
                    28:a1:cd:7c:11:87:4f:40:ff:ca:1b:36:c5:1f:a5:
                    04:14:96:e1:12:68:4a:e1:7f:15:56:08:28:8b:33:
                    97:e9:d5:85:28:dd:1e:43:94:45:49:a2:ab:3b:1b:
                    0a:b7:3c:d1:a2:97:e1:4b:1e:03:89:62:f9:1f:0d:
                    03:db:70:b2:4d:74:c2:ac:68:81:10:c0:5d:e3:8c:
                    bc:30:7b:82:e3:48:b8:87:7c:17:5f:b5:59:fc:86:
                    bb:f7:55:9f:89:d3:e5:3d:80:34:50:fd:64:23:c1:
                    b2:da:9f:ae:95:9c:16:a1:78:a8:87:d3:e0:3f:63:
                    ba:87:48:c0:bd:25:0b:0b:84:f5:0e:e3:23:ce:c9:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5E:C3:17:61:6D:47:C9:C5:DD:2C:A3:7A:06:EF:65:51:83:D6:4A
            X509v3 Authority Key Identifier:
                keyid:84:6D:45:22:5C:F0:D4:FA:9C:65:AE:E8:88:61:D2:26:12:03:AD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hG1FIlzw1PqcZa7oiGHSJhIDrQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/163f4b-de59-487a-9110-463531046c7f/1/hG1FIlzw1PqcZa7oiGHSJhIDrQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:20:93:e8:ce:bf:93:54:66:28:18:c4:bc:2b:0c:6c:07:b4:
         9c:c4:32:df:41:28:96:47:8c:4e:e4:cc:91:dc:12:30:2c:6a:
         dd:d7:3b:1a:28:6b:e2:64:01:3c:df:df:b1:30:88:a2:02:38:
         34:68:58:8b:a8:62:92:25:6b:e9:4e:4d:fb:74:9f:50:f7:4c:
         9e:63:86:36:3d:03:1b:5d:3d:5f:07:4f:da:34:d2:40:eb:a5:
         5e:d5:aa:8f:ae:7d:f4:96:23:77:13:9d:11:c9:51:ef:da:4c:
         a1:8f:01:6b:d1:07:98:c1:35:7c:d5:5f:d3:d1:fd:60:df:ea:
         b8:15:ff:4e:96:79:02:ef:3f:cc:0b:cb:a8:21:7f:03:61:5d:
         83:22:d4:4a:6f:f0:1e:d5:1d:d6:e2:7e:bf:58:c9:81:1b:60:
         60:f7:b7:79:29:a9:39:75:a2:6d:cc:c0:88:ce:41:a1:b4:19:
         77:bf:95:90:a4:0f:60:74:ce:61:fd:ec:ea:5d:80:ce:85:43:
         3c:0e:68:93:47:85:01:da:39:9a:1b:c1:a2:49:dc:70:ba:b3:
         f2:8b:52:4a:b5:97:6f:2b:b8:f2:77:f0:e0:ca:03:71:63:cd:
         a0:f1:58:e7:f4:37:ec:ce:0f:7f:af:a4:47:d5:7d:74:52:59:
         bb:68:02:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:22:58 2024 by rpki-client on console-ams.rpki-client.org