Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
File:                     s90R00a2O7HrIqB8JswSkaKgaJU.mft (raw, json)
Hash identifier:          ywxaJsax74x5h5UYzf6m2193Rxk+bmHABb5CcvlTwrU=
Subject key identifier:   9A:6F:67:30:53:41:E0:E3:69:11:06:35:3E:69:C3:BD:93:05:28:34
Authority key identifier: B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95
Certificate issuer:       /CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
Certificate serial:       019074D25B0876F8D85FFDF9E4AB28F95EE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
Manifest number:          09FE
Signing time:             Tue 02 Jul 2024 19:01:01 +0000
Manifest this update:     Tue 02 Jul 2024 19:01:01 +0000
Manifest next update:     Wed 03 Jul 2024 19:01:01 +0000
Files and hashes:         1: RnBVy_fSsybjM_pFGNZ0hKnFP4w.roa (hash: wzwPphHqW6bXs8J7Kd8P40OMWEyhyiH2Pn1dzUacn0I=)
                          2: s90R00a2O7HrIqB8JswSkaKgaJU.crl (hash: 03F9wftOkw1dKvf3vvqLw5sLiJEt6BcPUuAMSHcU3PU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:74:d2:5b:08:76:f8:d8:5f:fd:f9:e4:ab:28:f9:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3dd11d346b63bb1eb22a07c26cc1291a2a06895
        Validity
            Not Before: Jul  2 19:01:01 2024 GMT
            Not After : Jul  3 19:01:01 2024 GMT
        Subject: CN=9a6f67305341e0e3691106353e69c3bd93052834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:53:49:08:d4:9a:07:40:4b:59:4f:d4:e6:20:
                    c4:60:01:2a:ec:fd:01:e5:f4:33:2c:ea:b7:cf:08:
                    70:89:c1:78:ae:e1:e3:f0:85:34:4b:50:38:c3:35:
                    9a:13:4c:ee:9a:bc:af:b3:4e:3b:75:27:c0:2f:51:
                    24:8d:be:57:a9:3e:36:fb:8f:ed:82:85:1f:b2:d6:
                    15:9d:6d:77:eb:01:11:14:12:26:89:f6:70:8e:1a:
                    6d:5f:33:e2:24:b7:aa:9e:58:f8:74:19:da:e4:e6:
                    02:27:e9:da:db:2f:1e:85:c9:b2:c8:d6:2a:d5:4e:
                    7a:ca:77:01:c8:f2:28:a4:2a:02:37:da:05:52:ac:
                    ca:56:0b:fc:e6:5b:15:59:b2:f5:c2:f0:07:16:75:
                    66:e4:d3:16:d5:53:00:ca:60:89:91:e5:86:27:d1:
                    29:37:67:40:58:27:c3:9a:b5:7b:d7:ea:c7:6d:64:
                    52:2f:c0:3a:fe:86:5b:08:dd:a6:2a:85:6e:27:a7:
                    9a:5e:8e:7e:c5:c3:47:b9:d8:c7:f2:91:15:c5:11:
                    51:9f:3a:21:6b:4c:ea:ff:d2:5f:30:ea:54:7f:ad:
                    54:f4:81:c2:3d:f0:de:df:b5:fb:e5:b3:42:64:2b:
                    e6:33:34:df:f0:2e:91:b8:65:47:78:0a:d8:1a:07:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6F:67:30:53:41:E0:E3:69:11:06:35:3E:69:C3:BD:93:05:28:34
            X509v3 Authority Key Identifier:
                keyid:B3:DD:11:D3:46:B6:3B:B1:EB:22:A0:7C:26:CC:12:91:A2:A0:68:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s90R00a2O7HrIqB8JswSkaKgaJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a41898-da08-469d-be1a-8bbc226e6c45/1/s90R00a2O7HrIqB8JswSkaKgaJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:e4:ab:5e:6d:8b:d0:ed:df:e7:15:c3:4a:5f:ff:67:4e:fb:
         da:a0:75:b6:6b:99:42:f7:ca:b7:30:32:c7:f0:91:f4:c9:23:
         d5:86:69:ff:ff:c6:e3:35:ef:db:ee:a4:81:31:ad:cd:9f:06:
         d2:21:d3:7c:26:d0:92:56:12:b8:31:e8:a4:5c:41:8b:bf:1c:
         bf:d7:31:21:0c:e0:17:bf:4a:3b:c9:ed:5c:3c:22:a6:f6:89:
         54:bc:d2:52:74:04:17:71:28:ef:2d:b4:7a:29:6f:c4:b7:fc:
         69:55:aa:af:00:fa:8e:1f:90:e2:b0:cb:75:70:fc:f0:55:52:
         0d:43:3e:ad:13:69:23:44:6f:96:da:3a:a3:9e:1e:33:21:c8:
         70:87:e5:f4:52:24:76:a6:2a:cc:cb:7f:ee:d4:30:04:1a:72:
         59:ba:99:d7:84:7b:c5:b3:49:27:1e:3e:a3:8b:ed:8e:20:2a:
         5f:13:48:24:8b:07:ff:29:9f:4e:ee:30:82:11:89:53:93:d3:
         66:a5:46:91:69:27:5c:80:43:81:c5:67:24:1d:a6:41:f9:e6:
         b0:11:ed:53:46:fd:47:a3:47:22:af:30:95:d3:d0:c1:2a:65:
         92:98:5f:cd:fb:0a:19:c4:b6:15:fa:5f:b3:2a:81:33:43:37:
         7d:a3:f6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 21:28:22 2024 by rpki-client on console-ams.rpki-client.org