Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File:                     HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier:          Wkunxq8K+/4MP7RFNKwMmofD+pTNxPZVgkMMuKYEGJM=
Subject key identifier:   F9:EB:A5:1A:A9:08:C0:17:03:B5:11:4C:E8:48:8E:41:45:75:30:F3
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer:       /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial:       01901D46641577C236FA61421D7D915EE033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number:          06FC
Signing time:             Sat 15 Jun 2024 19:01:10 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:10 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:10 +0000
Files and hashes:         1: F6m1C7ogA8k20avAoWwhsUg4_8E.roa (hash: OqseZ1SEtjaiQ/Ae6m+47fPqxS0nk1pDL4zsw8AHtiA=)
                          2: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: 9na0hmaxz6ZyUXaTrvByJGiokPDMw88K+4xKmty5TCw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:64:15:77:c2:36:fa:61:42:1d:7d:91:5e:e0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
        Validity
            Not Before: Jun 15 19:01:10 2024 GMT
            Not After : Jun 16 19:01:10 2024 GMT
        Subject: CN=f9eba51aa908c01703b5114ce8488e41457530f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f8:f4:3e:5b:22:e3:cb:62:be:e8:19:dd:af:
                    67:44:ef:ec:2f:56:03:66:c5:a4:03:2a:12:33:f3:
                    42:e1:95:68:3b:da:d8:bb:68:c9:75:17:ff:b8:4e:
                    7f:e3:38:0d:18:8c:db:6e:b6:de:d2:ea:82:f1:fc:
                    8f:46:2d:e0:a0:77:18:3b:07:23:0b:ad:7d:fc:b8:
                    48:82:c6:1e:38:10:2a:56:e1:22:60:f9:64:8a:cb:
                    d2:55:fd:c8:2b:f2:08:5c:c0:96:65:26:33:a6:08:
                    ae:73:1a:8f:02:06:6f:e3:18:9e:20:61:63:76:bf:
                    44:85:7d:aa:b3:44:cf:52:b7:45:39:d9:73:38:51:
                    8c:70:19:6b:32:f1:80:ac:d4:d5:b8:4f:0c:8f:89:
                    cd:e6:47:7c:f2:a5:9d:5b:84:52:02:4b:98:e7:24:
                    a3:88:07:17:3a:53:67:5c:04:88:66:db:b8:f9:e2:
                    4e:51:67:03:fd:57:61:b1:4b:2b:95:64:5c:c2:a4:
                    5e:7c:63:82:1d:c0:28:a2:a0:1f:cc:7f:db:10:39:
                    54:45:38:99:7d:50:1a:c9:1f:3b:c3:9c:fc:38:e7:
                    d5:c0:c5:dd:89:5d:6a:c8:b5:b8:8a:99:d8:75:81:
                    4d:8d:f3:f1:2f:e9:b5:35:fe:b3:4b:d4:c8:89:2c:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:EB:A5:1A:A9:08:C0:17:03:B5:11:4C:E8:48:8E:41:45:75:30:F3
            X509v3 Authority Key Identifier:
                keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:9c:53:19:fd:4b:4d:14:d2:b6:97:8e:21:63:43:6d:8e:a4:
         fd:2f:ed:36:72:d2:fb:28:df:ab:3f:f9:4b:dd:af:39:4a:c3:
         04:0f:93:84:0a:8a:2c:f4:99:76:eb:fb:35:0d:9a:29:27:17:
         de:51:08:81:b8:e2:c9:33:6e:17:bc:51:88:4c:1b:56:21:44:
         ae:cc:93:ef:c9:41:52:07:50:04:31:19:a5:58:53:bf:43:a6:
         f2:82:9c:1a:a6:fd:dc:0b:f3:70:17:aa:44:7b:2b:5e:e8:10:
         2c:24:ab:46:b2:a4:bc:3f:f1:c3:12:00:fc:b9:79:e3:14:dc:
         20:91:dc:c7:44:bc:d4:f7:ba:64:ff:38:b0:3a:61:4e:58:39:
         22:7e:aa:f9:2f:ee:a7:b0:5c:0e:ed:8d:29:6a:e1:1d:bd:e0:
         7f:3c:2b:9b:ab:0a:20:17:d3:68:15:d1:c8:a0:fe:18:55:3f:
         03:83:3b:3a:52:04:29:87:03:5b:f2:15:82:d3:91:79:e4:26:
         0e:60:6e:46:45:61:63:fe:38:04:53:e7:d0:08:af:c3:0b:bd:
         c6:39:22:8b:65:a6:74:8d:53:10:ce:f6:f8:15:5e:5d:39:6d:
         33:ab:0c:f4:56:f0:72:de:7e:04:e3:d6:93:5d:bb:d8:22:0c:
         1b:58:f3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:50:55 2024 by rpki-client on console-fra.rpki-client.org