Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
File:                     hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft (raw, json)
Hash identifier:          xGJaGL50BtiwE7fw/UHtBf9ukAT2KKCoJu/fXg0R9m0=
Subject key identifier:   01:37:06:86:2A:83:36:B4:44:B0:DD:DC:53:3A:24:E9:46:7D:ED:A1
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Certificate issuer:       /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial:       01904152B383891A972432FEC86251CFA83E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
Manifest number:          11D8
Signing time:             Sat 22 Jun 2024 19:00:57 +0000
Manifest this update:     Sat 22 Jun 2024 19:00:57 +0000
Manifest next update:     Sun 23 Jun 2024 19:00:57 +0000
Files and hashes:         1: 1-MstBHydxbQjvudkLpYTjicVT5Q.roa (hash: B1O/GVVfQl1qzlbj3sUD/8mESOXvYV2Sf4tqWV/Y5Sw=)
                          2: hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl (hash: c3ZYz5V3pB8P3gI/h9uhuP3+Nq/nD/KYOFDHtNE8Wd4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:52:b3:83:89:1a:97:24:32:fe:c8:62:51:cf:a8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
        Validity
            Not Before: Jun 22 19:00:57 2024 GMT
            Not After : Jun 23 19:00:57 2024 GMT
        Subject: CN=013706862a8336b444b0dddc533a24e9467deda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:65:b1:9c:4f:a1:21:82:1b:41:0b:12:70:10:
                    21:46:7d:44:51:f6:18:0a:af:a7:48:40:69:56:69:
                    c1:3f:8b:e6:0e:b6:0b:d6:1b:72:eb:63:32:9f:6c:
                    fb:aa:a1:9d:fa:f2:bc:21:07:7d:ef:ba:2b:8c:8c:
                    89:7b:c0:f8:47:c9:23:77:9a:38:16:b6:2b:98:fd:
                    29:6e:c5:25:4a:f6:57:02:dc:e7:bc:df:fa:6a:ff:
                    46:53:dd:55:fe:ea:22:19:e5:52:9b:9b:b2:01:30:
                    bd:01:49:a8:b0:d8:74:b0:bb:ab:4c:f5:11:4d:e7:
                    65:c7:66:71:47:79:d4:55:8f:fc:f8:8b:5d:3f:a7:
                    f6:76:9e:97:14:2a:34:b9:f0:8d:68:f3:93:4d:1b:
                    84:7f:dc:4a:9d:7f:00:cc:ff:e6:69:ee:dc:2b:38:
                    a8:ff:1e:82:21:58:59:a5:09:4b:6a:a6:a5:0f:25:
                    fa:1a:15:10:cc:4e:b7:37:1f:97:6d:d9:f8:36:d4:
                    88:6d:59:87:c7:eb:57:53:cb:37:29:d3:3e:8e:10:
                    6b:43:5c:c9:fe:a9:8f:8e:10:a8:7d:62:68:9b:f1:
                    05:7e:8c:e5:cf:1b:af:da:c3:34:87:a2:03:62:e7:
                    b6:25:96:8b:c7:b7:d7:bd:5c:f6:a9:d9:21:c3:0d:
                    e1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:37:06:86:2A:83:36:B4:44:B0:DD:DC:53:3A:24:E9:46:7D:ED:A1
            X509v3 Authority Key Identifier:
                keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:21:39:fa:d5:e8:57:6c:ff:03:ca:e4:40:ff:99:35:e9:ec:
         41:7e:0c:ae:34:53:d1:e1:ad:8b:a2:82:83:a8:f1:70:80:ce:
         a9:eb:b2:06:f6:95:67:6a:58:c1:2c:ac:ec:55:b6:a3:86:93:
         b1:3c:00:64:0c:ef:c6:a0:2f:57:25:9d:43:ef:a0:6b:9b:25:
         2c:d9:12:96:5d:89:10:f1:7c:d6:f7:02:76:6e:42:92:e1:ce:
         ad:37:5c:97:bf:da:7d:50:60:42:8f:b3:4a:2e:80:d0:8c:40:
         34:d5:56:ee:97:58:2f:1f:ac:f0:0c:b1:df:9b:35:fd:c4:5a:
         b9:9e:cc:b0:84:6e:c3:0e:cd:b7:c4:1c:1e:dc:0d:21:ea:fc:
         bd:fc:f0:d1:31:8f:4d:28:ec:53:38:5d:02:41:b8:f2:8f:f8:
         8a:ac:6e:ec:37:48:d9:fe:9a:d6:ed:73:61:1d:27:07:c9:7e:
         60:9a:3c:b6:ea:97:6a:31:cf:9c:28:58:c3:3e:d6:c3:45:bf:
         be:34:04:51:ec:66:44:87:ac:12:50:cd:67:3e:bc:69:87:1f:
         78:b3:cb:f8:d7:33:fe:13:aa:c2:8c:6e:c6:f2:62:55:24:eb:
         39:bc:6b:8f:99:e1:7f:d5:30:07:9b:a8:bd:f1:2f:bb:37:9f:
         aa:b1:8b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:43:09 2024 by rpki-client on console-ams.rpki-client.org