Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
File:                     m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json)
Hash identifier:          JzrvP+sc/DjLB/2n4RdbbQ4N/Dozp5fxTx6Z1nDiDUs=
Subject key identifier:   6A:27:BB:02:BD:AD:AB:72:3F:FF:3C:01:4A:48:57:D7:6E:C7:23:3E
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Certificate issuer:       /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial:       0190516A8AF11E14FDB80B3C0E7E58795073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
Manifest number:          0DC1
Signing time:             Tue 25 Jun 2024 22:00:55 +0000
Manifest this update:     Tue 25 Jun 2024 22:00:55 +0000
Manifest next update:     Wed 26 Jun 2024 22:00:55 +0000
Files and hashes:         1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: LctOrILOLkFf8UFSoxlhLyAKj7U5pTG9XNAOpUlJR3M=)
                          2: mV5tvFAqPKExnbNhZ-nhMKVniJk.roa (hash: zNyxtCzuCBfH35+bXvopWuHaXnghrlFZbTihf2zZjBs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 22:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:51:6a:8a:f1:1e:14:fd:b8:0b:3c:0e:7e:58:79:50:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
        Validity
            Not Before: Jun 25 22:00:55 2024 GMT
            Not After : Jun 26 22:00:55 2024 GMT
        Subject: CN=6a27bb02bdadab723fff3c014a4857d76ec7233e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:85:f3:83:e8:d5:c4:9e:45:ff:01:33:b6:
                    e7:7c:1e:3a:83:db:90:6a:43:38:d2:68:fe:5a:b9:
                    2c:dc:d6:4f:14:db:06:f6:b9:e6:5a:03:e1:6d:6e:
                    40:11:b4:24:87:d0:96:1f:35:21:24:57:95:e3:72:
                    1d:14:cc:1f:29:f5:00:11:7e:60:48:6c:b9:bc:16:
                    45:a9:d9:c2:6d:a1:7b:55:41:00:f0:95:89:3b:fd:
                    a1:db:fb:7a:ee:d7:46:f7:cf:8a:c1:25:21:53:94:
                    db:54:00:be:52:58:c2:fa:08:1f:f6:67:46:9e:0e:
                    d3:7b:c6:f9:04:e5:fc:25:07:15:67:27:ad:0f:fb:
                    26:da:2b:22:34:75:f6:8c:b2:93:35:e0:7c:e2:56:
                    49:34:f8:7d:47:e3:2b:3b:84:07:67:4e:cf:b3:ee:
                    87:75:4d:cd:35:b9:36:6f:de:60:e8:31:12:8c:63:
                    22:9e:18:e6:15:4e:5d:c7:43:b8:49:be:ad:31:08:
                    39:15:d1:ea:d1:70:b0:48:78:13:d6:57:a5:65:9e:
                    40:ca:26:a4:38:6a:d5:0e:4a:14:5e:63:14:f4:09:
                    3f:ad:2d:75:b3:1a:41:47:7f:8c:18:f8:97:b6:20:
                    e7:a4:5f:7b:de:b9:c3:35:59:b1:bd:3a:34:f0:c3:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:27:BB:02:BD:AD:AB:72:3F:FF:3C:01:4A:48:57:D7:6E:C7:23:3E
            X509v3 Authority Key Identifier:
                keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:39:da:69:49:fc:a7:75:46:3c:c7:f6:19:ce:16:de:7d:99:
         65:4f:c3:d5:5c:a2:24:64:5f:fd:e6:bb:e7:fb:7e:1d:30:92:
         98:95:43:6b:11:1c:72:52:59:3e:41:d0:b6:49:c5:fb:3e:c5:
         88:70:c2:ff:93:5d:b6:32:f4:7b:0a:fa:f0:99:05:61:c7:9f:
         c8:25:15:ea:f9:28:65:b0:15:e5:a8:13:bb:4d:a7:c9:05:68:
         76:5f:de:b9:c6:14:1e:d8:29:1f:0f:77:25:dc:24:9b:23:01:
         b3:d4:92:95:d1:df:eb:7d:1d:5f:bc:0a:d4:17:5a:27:0a:cc:
         2b:bd:ff:21:de:d6:de:f9:e8:76:04:d2:bc:92:bd:2a:1b:ed:
         b7:fb:c3:2e:61:f6:fa:45:06:a1:c0:14:6f:b4:47:86:0e:9f:
         d9:9a:08:9e:dd:3c:9a:c6:39:47:8c:96:0c:e6:6d:64:7c:13:
         dc:25:a2:58:fd:e8:19:f2:74:f7:59:8b:fc:2f:ac:8d:48:6b:
         07:b6:a8:82:51:ad:f7:44:77:44:81:9b:df:e5:82:eb:c4:33:
         f0:bc:d4:83:55:dc:a9:c1:6b:97:6e:9d:ed:73:35:66:6d:4d:
         57:15:67:00:31:92:ea:6e:3a:88:47:37:06:8a:15:32:8b:ba:
         95:9e:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:06:48 2024 by rpki-client on console-ams.rpki-client.org