Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
File:                     pkHn9ngj7vUqGf4dyODmp_QclDM.mft (raw, json)
Hash identifier:          5PJwMotGHWkJzKzfNBLggXH28sIjrUFLiHh2TGpC5kE=
Subject key identifier:   0B:C1:C9:B1:E6:58:E4:1B:B2:00:08:17:60:7A:39:D1:44:47:BE:6E
Authority key identifier: A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33
Certificate issuer:       /CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
Certificate serial:       01906B2C64247C588B7EEB14BEA212369BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
Manifest number:          058A
Signing time:             Sun 30 Jun 2024 22:03:09 +0000
Manifest this update:     Sun 30 Jun 2024 22:03:09 +0000
Manifest next update:     Mon 01 Jul 2024 22:03:09 +0000
Files and hashes:         1: Ckv9KG2nf9K_EO-UzkYshDbT_Lk.roa (hash: SbVSz3drx1Bfl5NS5uyz56wfvS5jbkQj2bpd6kpHHp4=)
                          2: pkHn9ngj7vUqGf4dyODmp_QclDM.crl (hash: Ri0AN4JcSfCkOihIP73SvH9nsXXuE8OZaRtXdkFanZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 22:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6b:2c:64:24:7c:58:8b:7e:eb:14:be:a2:12:36:9b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a641e7f67823eef52a19fe1dc8e0e6a7f41c9433
        Validity
            Not Before: Jun 30 22:03:09 2024 GMT
            Not After : Jul  1 22:03:09 2024 GMT
        Subject: CN=0bc1c9b1e658e41bb2000817607a39d14447be6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:9c:10:ae:66:8d:4a:73:ce:b6:75:8f:4d:
                    50:3d:44:27:ae:94:b9:a7:7e:12:5b:bf:7c:ee:25:
                    a9:79:39:90:9b:98:72:05:55:2b:42:83:5c:45:12:
                    36:a6:c2:09:5b:d3:2d:af:d9:50:93:22:b5:39:84:
                    74:df:45:57:73:57:54:e8:6a:b4:b2:07:45:44:ae:
                    d0:e6:dd:de:0d:69:0d:dc:20:9e:3e:a5:e1:d4:68:
                    13:b0:5b:73:b1:60:4d:07:fc:a9:41:a4:05:94:2e:
                    9b:e4:4b:72:fa:98:79:7a:c8:63:11:1a:4f:66:79:
                    2b:0b:e1:00:18:bd:ce:f3:b1:22:94:1a:70:ae:fd:
                    59:9b:19:33:e0:41:fb:09:10:95:b5:c4:91:ab:38:
                    c5:aa:44:47:66:f8:ba:fc:1d:4c:14:0d:28:07:42:
                    09:3c:79:12:ee:8f:26:9b:a3:9e:1b:f3:78:b0:5c:
                    78:f7:6c:e6:89:62:5f:ef:53:f3:68:34:84:02:3c:
                    93:e5:2d:5d:e7:7b:48:6c:1b:08:62:6b:7d:97:d5:
                    0d:30:c3:42:3d:9e:f8:5e:00:7e:57:3d:ed:1d:94:
                    18:b0:c0:7a:f2:ea:43:e1:91:55:ad:c2:1f:48:32:
                    b7:72:ae:29:06:b3:3f:23:48:14:07:d0:48:e5:93:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C1:C9:B1:E6:58:E4:1B:B2:00:08:17:60:7A:39:D1:44:47:BE:6E
            X509v3 Authority Key Identifier:
                keyid:A6:41:E7:F6:78:23:EE:F5:2A:19:FE:1D:C8:E0:E6:A7:F4:1C:94:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkHn9ngj7vUqGf4dyODmp_QclDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0ac21c-c72b-4719-a085-0788f7921852/1/pkHn9ngj7vUqGf4dyODmp_QclDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:31:28:d5:80:a7:4a:af:4c:33:ab:e1:13:1d:23:b5:23:ab:
         d6:f9:b9:b9:cb:8e:64:91:f2:92:d2:a4:71:2c:28:7d:05:e6:
         7b:79:bc:f9:28:89:26:76:5a:c4:aa:6c:14:01:b3:b5:de:c6:
         23:51:03:6e:43:50:8e:73:26:df:24:73:7e:80:9a:54:e6:70:
         af:e1:4d:42:10:b0:19:ce:f6:49:49:58:97:d9:fa:97:3d:1a:
         6e:8e:b9:5f:6f:b6:eb:8c:84:b2:57:3b:d0:7c:06:3f:af:9f:
         75:9a:70:3f:30:34:e1:a7:0d:c3:9e:98:fa:4b:13:e9:6d:2e:
         f3:91:df:26:e7:a5:f3:7a:ce:23:f7:f0:86:5b:4b:d5:3e:91:
         83:b3:fa:37:18:37:6d:55:1d:08:be:19:c6:a6:a7:b0:66:6b:
         62:42:52:6d:fd:e5:c8:89:14:c4:f5:18:b5:e6:cb:83:f3:0f:
         1b:b4:68:b2:62:20:3a:93:02:a0:17:fd:c8:92:31:da:44:b2:
         96:af:53:e7:8d:2c:d8:88:5e:d9:5a:3c:52:68:10:85:1d:41:
         32:a2:3f:d0:f1:0d:f8:28:60:11:81:08:b3:e2:1a:40:05:73:
         32:41:3c:cb:4d:52:d3:a3:84:b0:17:84:a4:99:cb:2f:56:71:
         11:42:0a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:21:26 2024 by rpki-client on console-ams.rpki-client.org