Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File:                     hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier:          MsybvIIWlK1dYm+FKSLCJ1ZiHAucPdirAX1qtjQbscs=
Subject key identifier:   B2:B9:7B:BD:21:CB:F3:85:04:6E:DD:29:E3:EC:3E:88:E6:70:8C:30
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer:       /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial:       01901E90227029A95D950DA828D517CA5750
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number:          11C6
Signing time:             Sun 16 Jun 2024 01:01:20 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:20 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:20 +0000
Files and hashes:         1: 1-MstBHydxbQjvudkLpYTjicVT5Q.roa (hash: B1O/GVVfQl1qzlbj3sUD/8mESOXvYV2Sf4tqWV/Y5Sw=)
                          2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: J6DCVrfEB+ZHftlGgJXH0DzudwgXA9UwCPsH9wAYw2w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:22:70:29:a9:5d:95:0d:a8:28:d5:17:ca:57:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
        Validity
            Not Before: Jun 16 01:01:20 2024 GMT
            Not After : Jun 17 01:01:20 2024 GMT
        Subject: CN=b2b97bbd21cbf385046edd29e3ec3e88e6708c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:94:25:13:c7:d0:44:bf:ec:37:67:7a:f4:c4:
                    a3:50:6a:22:7d:a8:ee:15:fd:bc:8c:52:7d:b5:63:
                    c3:aa:6e:1d:36:eb:e5:c1:59:96:70:2b:65:96:df:
                    25:c4:50:26:0d:d8:b7:39:7d:42:33:68:98:f5:59:
                    92:ec:d8:96:3d:47:2a:93:67:13:69:a3:1d:2b:50:
                    81:56:6e:0e:fc:3e:33:92:7b:d0:b2:8c:82:70:8d:
                    45:ee:67:d8:35:da:2a:7c:83:65:f3:88:6f:3f:94:
                    87:2f:ee:7c:94:da:ce:b7:f3:95:c4:1c:05:29:32:
                    2a:cb:93:b9:82:07:04:9f:44:f3:c8:a0:88:4f:7f:
                    33:92:88:f2:0a:77:c4:e2:53:0f:34:8c:cd:d9:3f:
                    f0:21:28:2e:a4:c3:f4:cf:3b:fe:68:5c:4a:ee:26:
                    a7:48:1d:a6:80:aa:e7:be:0e:f2:05:42:5c:92:e6:
                    4b:7e:e1:b6:c3:d0:35:90:25:47:79:da:70:81:de:
                    69:60:71:e0:ea:64:57:58:bb:92:7d:4d:b4:de:9e:
                    3e:e8:d1:05:9e:23:79:a5:d9:e6:21:ae:68:9a:87:
                    d8:ee:92:68:33:57:da:89:21:96:bf:28:44:db:19:
                    23:2f:79:30:a5:02:0f:68:88:66:22:a8:0b:58:32:
                    fb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B9:7B:BD:21:CB:F3:85:04:6E:DD:29:E3:EC:3E:88:E6:70:8C:30
            X509v3 Authority Key Identifier:
                keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:63:91:4b:60:bb:56:e9:de:a3:00:58:6f:fa:4e:e4:50:9f:
         d5:be:a8:60:f5:1b:c4:ae:b7:d8:f3:64:38:9d:23:e9:3d:21:
         a2:6e:4a:34:45:6b:52:6c:77:ca:61:36:bc:0c:04:0d:ed:9a:
         ad:50:13:df:a4:3e:79:a5:16:4d:2f:27:2d:27:ea:40:5e:c1:
         bb:5c:e7:e1:6f:ff:63:84:64:fe:9c:71:b2:d4:4a:b8:03:60:
         c2:6e:ba:a7:22:69:5a:a7:88:02:2a:17:8d:c0:00:61:0f:19:
         b2:9d:cf:db:fd:64:cc:23:be:80:68:30:f9:23:a5:7d:3d:2a:
         2e:fc:98:21:50:8a:a5:8a:c7:50:11:d8:de:74:54:20:83:bc:
         cc:0f:c1:09:8d:32:4f:a1:04:cc:18:a0:b2:1f:16:73:f4:76:
         01:99:60:e3:69:33:f4:c0:2e:c1:b5:f8:85:98:d3:01:7b:0b:
         9d:9c:b3:46:6b:07:45:5a:9f:83:68:6a:1d:fe:a8:96:41:84:
         74:dc:72:59:cb:9b:72:81:e8:59:91:06:14:64:f3:1b:37:e3:
         0e:f0:5c:10:4f:5b:19:62:7d:31:cb:78:95:93:99:5f:41:21:
         4f:b1:32:07:91:f8:df:a1:c2:66:5f:0e:fc:c9:f0:11:2d:0f:
         50:d8:aa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 05:12:13 2024 by rpki-client on console-ams.rpki-client.org