Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
File:                     mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json)
Hash identifier:          p8OpxHuN/cz8B12yLP5MgZ6J6dCACBuwtKXai7fY2tg=
Subject key identifier:   B5:4B:4D:77:70:86:14:3C:38:3B:25:82:32:A9:3B:C0:15:39:61:3C
Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1
Certificate issuer:       /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
Certificate serial:       019041C0B6A2C4C72ED18138FB8F2718C730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
Manifest number:          0FFF
Signing time:             Sat 22 Jun 2024 21:01:06 +0000
Manifest this update:     Sat 22 Jun 2024 21:01:06 +0000
Manifest next update:     Sun 23 Jun 2024 21:01:06 +0000
Files and hashes:         1: ee37kDyP0109GUEWOdcBQHrOBdU.roa (hash: +rt0B1PNbC/8wLN0LvlzqgcCbKE+vn3mXw6pzXvbZOg=)
                          2: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: RjNrdMGdV7Re8cupsMuOlt9ckOgTGRy2dQQY09haMoo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:41:c0:b6:a2:c4:c7:2e:d1:81:38:fb:8f:27:18:c7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1
        Validity
            Not Before: Jun 22 21:01:06 2024 GMT
            Not After : Jun 23 21:01:06 2024 GMT
        Subject: CN=b54b4d777086143c383b258232a93bc01539613c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:17:a3:97:40:f4:aa:f7:d5:41:71:f5:f7:
                    f1:f2:ce:c7:8d:31:d0:4e:50:01:09:b6:68:55:66:
                    31:50:ad:77:c9:41:37:d7:5d:a2:80:b8:76:95:c2:
                    3b:e8:4e:02:95:35:f6:51:aa:1b:f8:88:d2:aa:61:
                    7d:79:0f:8e:83:30:9b:6f:3f:98:f2:3a:a3:90:37:
                    29:fa:4b:53:00:e2:be:2a:be:fe:57:c6:01:84:a8:
                    e1:aa:c3:b4:1b:82:23:f5:da:1b:06:dc:3a:39:82:
                    ce:65:13:20:07:79:32:e1:c2:76:69:37:e1:cd:f7:
                    80:c7:72:db:78:03:74:36:ea:0a:c7:7d:15:24:56:
                    f5:e5:80:43:53:72:01:80:6e:c6:57:9f:38:2d:fd:
                    d2:cd:1a:65:33:7c:64:48:81:e0:fc:8c:9b:af:d7:
                    33:f4:5c:5f:a9:c3:cf:5a:92:31:f7:6f:f9:5c:1b:
                    c7:79:84:be:fe:f8:28:66:74:9b:a3:e2:60:54:1f:
                    4c:45:a6:08:f0:eb:ad:ee:31:56:d1:8e:b8:51:46:
                    e7:59:62:30:ca:0e:56:36:ce:48:8c:6b:d0:e9:30:
                    98:30:f2:97:a9:62:ce:3c:73:38:e4:11:b2:ff:02:
                    d2:f2:bf:2a:5a:f1:ad:8d:a3:9d:de:70:9b:fb:97:
                    d8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4B:4D:77:70:86:14:3C:38:3B:25:82:32:A9:3B:C0:15:39:61:3C
            X509v3 Authority Key Identifier:
                keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:01:3e:dc:12:8b:3c:f9:e8:3e:55:47:6a:d9:05:29:42:cd:
         66:db:60:b3:dd:54:ca:25:1b:d5:51:59:a3:18:84:c9:61:34:
         a2:13:6a:f6:b4:5a:3b:02:67:00:45:43:1c:61:1b:ed:fb:5d:
         48:6d:e2:1b:78:5e:c5:ea:39:10:4a:b8:2d:33:71:3f:7a:00:
         03:a7:4e:80:a9:61:b9:d2:8e:f9:09:17:76:27:4b:76:0b:17:
         d8:8d:a8:53:5a:7e:ba:0e:b2:af:86:1f:cb:14:1d:bb:1d:c8:
         2e:4f:fa:53:8d:6e:30:26:b1:f7:b5:a3:8a:88:93:a6:bc:a3:
         46:11:d5:f7:6f:46:d4:cf:37:a4:60:90:b8:27:f6:0c:43:5b:
         db:c8:64:94:7a:ba:26:b8:1e:f3:ef:a3:db:e9:06:85:41:68:
         e5:4f:8b:05:bb:9f:a2:c1:17:a5:95:05:4b:c6:d9:bf:cf:28:
         ba:fa:1a:c8:2d:01:f4:67:71:39:27:d4:10:5f:0a:b5:44:f2:
         3a:cf:be:30:7f:c7:2f:84:ff:be:24:1e:9a:32:de:dd:31:9f:
         ee:f1:5c:68:a7:be:32:58:89:67:e0:47:1f:31:a1:05:06:11:
         6e:fe:a1:4e:7a:be:88:d3:f3:0e:d3:99:ec:55:83:80:d6:e6:
         99:0e:d1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:43:14 2024 by rpki-client on console-ams.rpki-client.org