Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
File:                     1-YoC0gxrfeNXEl84sXNcobkfh7M.mft (raw, json)
Hash identifier:          Oy/W1lEVrQa7+L0UpyxmzYnjPmWG7wROb+w7Knu+xDI=
Subject key identifier:   9B:A6:FB:D4:8D:AB:A2:FA:B3:85:40:A4:8A:12:E7:FD:4A:5F:01:10
Authority key identifier: F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3
Certificate issuer:       /CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
Certificate serial:       019024C8AE974AE0AF14AB57F45099CD0D26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
Manifest number:          0FA6
Signing time:             Mon 17 Jun 2024 06:00:49 +0000
Manifest this update:     Mon 17 Jun 2024 06:00:49 +0000
Manifest next update:     Tue 18 Jun 2024 06:00:49 +0000
Files and hashes:         1: 1-YoC0gxrfeNXEl84sXNcobkfh7M.crl (hash: Dejg+Jzam9aIo4EUaW9I+k98/RM4YZYgP7C6pMW6Mx4=)
                          2: 1WVfMEDgLC3QF6ICaUlvdIrg3C4.roa (hash: qQcxga4NVbSGx6KvRpCAQp2Noe+0RXt5QNTJCYAswY8=)
                          3: Dv6TT6fRCEtjqw_UsdWsDuQwMUc.roa (hash: 2i25g5MN3L5J0wumA9SIX+eJJSGUmUO5Dr9UVaz831U=)
                          4: VlKpw1uHHpi35cS1sbJvjp3ldFg.roa (hash: 9M5kjYavFhVrRI85RDZ2MH5o/jzd+dB1d0G3JCS/gYQ=)
                          5: aTFTqCliaOCE6H5BzxBuotVVudA.roa (hash: 7eQHXoW6FWTyfkFBHBKyy4q9U7ervVzftEDYlYriHAg=)
                          6: aprDNRhAxtPNAL3DJAsOJ_GWWjA.roa (hash: 9Mcfyt1H3R6LQc5cUxYYmAduzGkS0L97b1fmaHA4ybU=)
                          7: pNWR7iaU3EKbNN_i2wnFzLClQBI.roa (hash: /4U5hkDOHDCDwnmQjQ53g1D2qPUc0/tQ7a2vcc6DUn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:24:c8:ae:97:4a:e0:af:14:ab:57:f4:50:99:cd:0d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98a02d20c6b7de357125f38b1735ca1b91f87b3
        Validity
            Not Before: Jun 17 06:00:49 2024 GMT
            Not After : Jun 18 06:00:49 2024 GMT
        Subject: CN=9ba6fbd48daba2fab38540a48a12e7fd4a5f0110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:80:d4:a3:d4:83:c0:37:ea:85:86:ca:2d:
                    3e:ec:e0:cf:8f:de:37:17:ea:6f:f8:9b:a0:7e:ea:
                    96:2c:f6:5c:29:91:8e:a9:3c:3d:97:bc:52:45:57:
                    f7:ad:4d:6a:70:7f:ff:d7:d3:32:21:78:d6:4a:ec:
                    40:02:d0:34:74:61:8c:bb:be:f6:31:69:9d:60:aa:
                    90:79:c9:dc:3a:c5:73:23:a5:95:6a:23:f2:b6:f6:
                    14:96:75:bd:2d:85:71:4b:45:94:cb:32:b4:28:33:
                    60:de:2d:1e:62:02:c0:ab:b8:b4:4d:1b:72:82:64:
                    e2:da:25:56:e9:27:87:0f:26:b4:83:b3:0a:a5:d7:
                    8c:03:f7:df:03:4b:a4:fc:13:29:aa:1d:6a:a0:7e:
                    3c:e4:d6:ee:a0:b7:ba:f7:f9:39:8d:0b:fd:53:a6:
                    71:fd:b9:fc:7f:fd:fb:f8:56:0a:dd:46:89:f4:46:
                    f9:48:15:1e:96:35:d7:e8:ac:cb:13:0e:00:64:23:
                    6b:31:55:db:f3:66:e2:e7:4e:87:3c:fd:eb:e3:7c:
                    a4:88:4a:a5:b9:88:2e:9d:1a:4e:48:0d:b5:72:ad:
                    4c:82:d4:94:81:3e:ce:a2:0f:ec:b3:54:fa:e1:ca:
                    5f:a6:ab:d9:3b:c0:29:eb:f4:2d:fd:cc:cd:b5:46:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A6:FB:D4:8D:AB:A2:FA:B3:85:40:A4:8A:12:E7:FD:4A:5F:01:10
            X509v3 Authority Key Identifier:
                keyid:F9:8A:02:D2:0C:6B:7D:E3:57:12:5F:38:B1:73:5C:A1:B9:1F:87:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YoC0gxrfeNXEl84sXNcobkfh7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a9206e-c1e1-4c15-9533-ace3d675d3cd/1/1-YoC0gxrfeNXEl84sXNcobkfh7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a7:6b:e5:fe:23:3b:11:b9:39:7c:50:67:c6:db:97:cc:18:
         87:27:18:8c:5b:2d:60:92:14:a3:ff:08:0d:f5:bc:9f:52:12:
         01:b6:0a:90:66:e6:bf:20:c5:ff:7a:47:f3:d6:d3:13:15:8a:
         38:b1:f9:64:2f:3d:9b:8a:4f:f3:55:00:8d:cc:35:0b:35:a1:
         68:70:01:10:1d:85:80:ae:a9:fd:7a:c7:da:79:8a:fb:cf:35:
         e1:99:8d:d2:55:e2:3a:b0:6e:14:0a:d4:e6:f6:71:7e:f7:ae:
         5f:4d:2c:70:4f:da:4c:e9:3e:dd:12:89:99:58:c2:49:a7:de:
         3b:31:b8:91:ed:77:f5:01:ac:99:94:7b:d3:0f:18:ac:83:1c:
         6e:c5:a0:97:81:d0:f7:57:ec:dd:51:68:bc:44:88:cc:a9:bd:
         30:6c:ac:17:6e:25:ff:54:88:bf:ed:9d:36:73:d2:5e:98:76:
         c5:06:93:f9:8b:2a:f2:2e:91:49:68:bf:22:6c:c3:bb:64:6b:
         d6:23:58:8f:80:b5:6a:d1:3f:49:31:8f:ec:5b:66:22:0f:c2:
         e3:00:df:ae:71:57:8e:d4:eb:37:2f:44:f2:54:9e:1c:94:8b:
         65:9d:79:31:32:23:22:89:b3:22:38:cd:9e:c5:7b:c8:7d:22:
         34:dd:2b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 09:26:00 2024 by rpki-client on console-ams.rpki-client.org