Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File:                     mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier:          wUUgoKNao/teXMhaVwdN/MFCbKfSZl3sK5zb042nIPs=
Subject key identifier:   F6:89:5A:F3:29:20:94:ED:FF:E2:E6:06:48:CC:C9:DC:47:09:98:3F
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer:       /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial:       019029830EB6FAFE69F1676588DD29B426B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number:          094D
Signing time:             Tue 18 Jun 2024 04:02:53 +0000
Manifest this update:     Tue 18 Jun 2024 04:02:53 +0000
Manifest next update:     Wed 19 Jun 2024 04:02:53 +0000
Files and hashes:         1: TjtIVY_2f0OxDdpEU-uRxzeGj_g.roa (hash: MG+iVq7CzkKP4h4sV32vZCfz7WiVMzCyXByIkROiN2Q=)
                          2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: qMzjm1DHPgEi/+HEjpDf6Ffll3hTOUYO7TRN0+O4rnY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 04:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:83:0e:b6:fa:fe:69:f1:67:65:88:dd:29:b4:26:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
        Validity
            Not Before: Jun 18 04:02:53 2024 GMT
            Not After : Jun 19 04:02:53 2024 GMT
        Subject: CN=f6895af3292094edffe2e60648ccc9dc4709983f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:7a:d9:0e:1d:8b:a5:20:d3:95:68:9e:81:
                    b8:d9:8c:f8:a6:1e:00:c6:44:0f:ed:68:b1:1a:40:
                    73:c4:31:9f:ba:23:97:8c:fb:e6:96:bd:5c:95:1b:
                    07:bd:3f:68:d2:08:cc:de:21:77:41:a7:9a:fd:1f:
                    30:61:5d:b9:bd:d4:8b:ec:b5:00:82:c8:e7:9f:b9:
                    f5:45:2f:6e:0f:07:bd:9f:36:62:a1:c2:b5:09:15:
                    76:7a:63:3a:11:ec:67:04:3c:5f:af:68:67:97:6a:
                    4d:7e:51:36:44:fc:89:35:22:16:5d:d1:77:9a:07:
                    e7:5c:ba:3e:d4:94:16:57:ea:81:95:52:77:03:72:
                    43:ab:53:e4:81:16:48:00:2c:b8:8f:74:0b:61:ee:
                    47:4b:4b:fd:6e:60:f1:0b:9a:27:6c:a3:a7:37:a6:
                    a9:fe:ba:4d:e4:b5:fd:e4:a7:20:51:66:23:c1:33:
                    4b:2b:9e:be:59:c1:6a:53:3a:02:1d:78:9f:e1:81:
                    39:5e:9e:26:d6:cc:75:35:22:54:54:37:af:0d:c2:
                    19:94:32:3c:b4:ff:13:62:73:6b:50:f5:2f:43:9e:
                    57:80:c3:4f:7c:9d:e4:a3:48:e9:85:46:3c:43:3f:
                    2d:a0:db:57:03:57:11:e9:e3:57:0e:fc:63:17:c9:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:89:5A:F3:29:20:94:ED:FF:E2:E6:06:48:CC:C9:DC:47:09:98:3F
            X509v3 Authority Key Identifier:
                keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:54:2e:e9:f0:bc:66:88:bc:05:ad:48:4b:8e:8c:df:48:5f:
         74:fd:74:6e:c9:23:f1:3d:c5:c8:34:93:ad:bf:c1:01:f5:19:
         00:99:e6:82:d6:2f:79:4e:6f:c5:7a:5f:00:fa:1b:4c:fa:70:
         1d:bc:62:8d:ed:4e:84:50:b3:f3:f5:c1:70:15:94:ac:06:6b:
         cf:21:06:e4:da:1e:31:c8:7d:58:18:24:56:a4:38:d8:c9:18:
         94:b9:2b:02:83:29:66:9e:3c:51:9a:b9:d8:fb:cc:a8:83:55:
         d6:eb:45:8b:bf:8f:7e:49:4c:53:71:7a:db:3c:d0:ed:39:2e:
         aa:57:99:5f:71:86:b4:f4:4c:ef:cd:6c:4e:ac:03:30:6a:fe:
         92:39:db:23:e2:ef:fe:a7:04:d4:76:2e:5e:fb:84:e7:af:12:
         27:3a:59:0e:29:1c:57:70:4f:e6:ee:d2:ea:8a:d1:98:05:7c:
         f5:20:2a:bd:a5:75:a3:9c:01:a1:26:24:5a:0e:88:34:d2:62:
         8c:aa:dd:37:b8:5e:52:0b:d2:69:b8:b2:75:c8:28:6b:27:a2:
         a7:ee:a9:ac:a0:03:87:57:4e:f8:6b:51:b7:5b:4c:4d:77:19:
         01:2b:81:67:57:7f:d1:a4:1a:5d:5e:7f:c3:41:b6:84:ec:03:
         23:7f:3a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:46:07 2024 by rpki-client on console-fra.rpki-client.org