Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
File:                     9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json)
Hash identifier:          3F6/dFKFNWRRlS3Eb3U1ngB713jNbXJoeu0TG0UTa78=
Subject key identifier:   04:8B:2F:A1:26:D4:0D:6A:4F:5E:06:B2:23:B9:12:60:64:B1:4B:D1
Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA
Certificate issuer:       /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
Certificate serial:       019052106C57D77555ADCFBCA8254F485373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
Manifest number:          0AC8
Signing time:             Wed 26 Jun 2024 01:02:06 +0000
Manifest this update:     Wed 26 Jun 2024 01:02:06 +0000
Manifest next update:     Thu 27 Jun 2024 01:02:06 +0000
Files and hashes:         1: 9OI_v4PtgT0UORbrHugAqjg3JxE.roa (hash: lbdNiBUqi1yTmbOtdKMK/9vA8VUd2Sy7PUG4FYeUJhw=)
                          2: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: D01ApLAY0BBxLApkZmI8GeTg7kYb+wqHbTpaz6tHZlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:10:6c:57:d7:75:55:ad:cf:bc:a8:25:4f:48:53:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa
        Validity
            Not Before: Jun 26 01:02:06 2024 GMT
            Not After : Jun 27 01:02:06 2024 GMT
        Subject: CN=048b2fa126d40d6a4f5e06b223b9126064b14bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:b5:8e:15:b2:46:ee:e6:10:d5:85:8a:45:
                    fc:ba:da:ae:c4:70:f8:42:f9:53:a8:c0:b9:c9:be:
                    93:c3:96:a6:86:6a:ba:73:22:e4:87:be:59:3a:d1:
                    87:76:7c:1c:dc:b1:0b:e6:d5:2b:44:1b:12:b6:53:
                    d3:a5:b0:b1:29:de:99:e4:72:4e:68:d2:ac:0a:ff:
                    27:2b:fe:8f:27:6e:42:6b:2d:2f:8d:a7:ff:6a:c7:
                    cc:23:4c:c1:a4:37:ab:88:4e:a9:f9:da:b2:0e:cd:
                    96:8a:61:da:f7:2b:14:48:9e:c6:cc:bf:c5:5f:e5:
                    7c:c2:7c:10:b5:14:7c:99:39:d0:dd:a4:f4:7d:fd:
                    9d:69:e0:9d:71:2c:0c:c7:e9:bf:f4:87:41:f3:06:
                    a6:f0:46:b5:0a:c6:be:ca:30:c9:9b:bb:04:9a:4a:
                    e0:ba:91:d5:f9:07:d6:da:21:5a:88:48:c6:da:83:
                    a6:fa:2a:00:cb:14:58:56:1d:da:e8:07:f3:e1:5b:
                    fb:16:38:18:e6:d2:04:64:8d:5f:14:07:48:06:ff:
                    7a:2d:87:9c:7d:25:87:ff:2f:db:65:d8:82:c4:04:
                    d5:85:94:7c:b7:70:12:96:53:1f:3d:f7:81:b4:d4:
                    81:3f:35:0e:c0:c7:9c:0d:4c:19:b8:08:12:76:29:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8B:2F:A1:26:D4:0D:6A:4F:5E:06:B2:23:B9:12:60:64:B1:4B:D1
            X509v3 Authority Key Identifier:
                keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:68:e4:aa:ff:7e:c8:fa:d6:00:26:6c:62:a2:63:80:d2:7b:
         71:14:3e:a7:c2:8e:d3:e0:2e:59:7e:dc:23:8a:b3:be:30:da:
         72:0e:da:0f:12:0b:89:ac:d6:58:9a:51:a3:f6:5d:32:7e:45:
         9f:75:20:2a:8c:92:a5:64:a5:2b:43:4c:e2:d9:6c:9e:1f:4d:
         d0:eb:80:27:76:7b:74:22:ef:58:77:0b:33:89:0f:c6:25:3d:
         bd:ca:c2:c8:34:87:b5:0c:96:ee:d1:1f:df:19:b9:a6:83:6a:
         38:80:a3:c1:cc:02:4d:e4:c7:cc:5a:8c:5e:d8:a0:d8:91:50:
         03:a2:23:86:d8:e4:53:23:08:36:29:7b:a5:96:0a:55:fd:c9:
         06:f6:15:79:4d:6a:85:75:68:cd:8a:8d:50:4d:5e:d2:fa:fc:
         48:46:41:fd:5f:a3:76:2c:da:5c:74:12:c5:c2:62:df:6c:76:
         cc:e0:26:ea:64:b2:74:6d:45:4d:54:42:e5:66:80:29:ec:3a:
         8a:f6:05:a5:cc:54:f7:a3:0a:84:a8:cc:54:3f:53:42:1c:1c:
         12:5b:cb:5f:2c:0c:78:ad:5f:bd:89:e9:19:20:21:9a:0e:33:
         70:cc:42:ef:a4:9a:f1:1a:08:6b:87:13:c5:23:05:9a:77:ee:
         e4:88:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:35:50 2024 by rpki-client on console-ams.rpki-client.org