Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File:                     tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier:          UUEutnn9lXxoI9j6XUUzvmLLeNm865e2Erbf5Ve7qIE=
Subject key identifier:   9A:46:73:64:71:27:8A:FA:BB:61:C1:26:E0:37:60:5D:2C:79:96:67
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer:       /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial:       01901DECCEB4F8B6F19FABF82C013286580A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number:          0941
Signing time:             Sat 15 Jun 2024 22:02:56 +0000
Manifest this update:     Sat 15 Jun 2024 22:02:56 +0000
Manifest next update:     Sun 16 Jun 2024 22:02:56 +0000
Files and hashes:         1: Km1HHfMUlhTyPoCTSMQsxY5XAVc.roa (hash: KJEa6LEv2A9qsyvS2LQB1UUUBjty0tn4JyzXHyPw7NU=)
                          2: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: OfmvpJDUrLaW3b/6YVlfqqsdF3kHFBHhzRSsnj6AOoA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ec:ce:b4:f8:b6:f1:9f:ab:f8:2c:01:32:86:58:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
        Validity
            Not Before: Jun 15 22:02:56 2024 GMT
            Not After : Jun 16 22:02:56 2024 GMT
        Subject: CN=9a46736471278afabb61c126e037605d2c799667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:98:1f:a4:c4:d1:f6:7a:be:4f:e5:82:b3:3f:
                    05:f4:4c:4e:0a:90:68:ee:a7:46:a1:61:f4:9c:8a:
                    02:9b:9d:82:68:5a:4f:72:35:b8:93:f0:ed:8a:b1:
                    ae:07:e6:53:58:c9:4f:e0:10:72:cd:9c:94:0a:b8:
                    b9:ae:f1:be:b9:f8:2b:20:df:d0:bd:7d:63:3e:bc:
                    c4:88:0b:8a:b7:5f:cd:81:6a:fb:11:88:e8:a3:61:
                    1b:ce:f6:e4:ea:25:72:d8:65:af:b5:56:66:a8:28:
                    66:cd:30:9a:4c:c9:66:97:7c:57:49:98:0a:ce:51:
                    de:c0:ed:e2:78:1c:49:63:24:02:7a:77:11:ce:94:
                    04:22:48:83:ea:cc:c2:f0:2b:57:3c:c8:16:8e:0c:
                    4b:d2:d0:c5:21:6e:c0:79:70:c0:87:e6:b7:fb:30:
                    85:a3:e9:7c:81:bd:4c:6a:9d:eb:fb:06:6b:b8:3f:
                    42:dc:36:14:be:bc:10:1d:44:37:06:bb:6f:3d:69:
                    bb:50:ec:21:06:ef:44:0c:fc:63:e3:07:6c:3f:2d:
                    1c:0a:dd:8b:dc:13:63:6d:76:ef:c6:c6:60:07:82:
                    0b:d3:29:1a:5b:e8:38:31:f5:68:20:63:5c:0b:7e:
                    fe:82:52:e0:05:36:33:0e:d0:17:1e:a7:67:d9:64:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:46:73:64:71:27:8A:FA:BB:61:C1:26:E0:37:60:5D:2C:79:96:67
            X509v3 Authority Key Identifier:
                keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:0a:4a:fb:6d:31:be:e7:cf:f4:21:c8:0e:60:c0:d4:69:
         80:9f:72:f3:48:ae:97:3b:ed:5f:b9:45:a6:82:66:09:62:4e:
         06:0b:57:2f:9e:62:e4:d7:fc:e7:5f:a5:3c:22:66:e2:cf:f0:
         74:e3:93:73:c0:9b:26:3b:8e:b7:db:53:1f:62:f0:22:e6:a5:
         b9:9d:df:d9:56:32:53:f8:9a:c8:d1:a0:50:ef:6d:1f:7d:15:
         96:56:a2:75:5d:79:ee:fc:f6:c0:d5:f2:e0:72:d7:55:8d:76:
         65:12:a0:e9:27:86:ac:64:cb:4a:45:cb:3e:60:95:9c:fb:97:
         93:ec:5b:48:cf:b3:ee:2a:87:05:51:75:3a:87:3a:3b:fe:29:
         2d:bb:33:be:6d:ca:b9:e6:a3:0f:8c:98:09:5d:7d:4f:00:9f:
         62:4f:cf:98:33:12:b6:60:a7:19:ae:bf:20:19:6b:6c:cf:9d:
         81:fc:b6:04:6f:7b:db:81:b4:30:b9:3b:ce:61:01:6c:b8:c2:
         ae:ab:d9:60:52:0a:c3:e9:a9:a2:21:4d:1b:a2:67:14:59:6b:
         49:e5:5e:df:a4:22:d5:c3:fb:1b:f7:bf:ab:50:a2:35:f3:ff:
         8c:bc:3a:a6:57:bb:15:fd:89:dc:35:82:ac:81:06:45:af:85:
         8e:5c:e1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:53:40 2024 by rpki-client on console-ams.rpki-client.org