Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File:                     Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier:          h8xuJEyN+ASL3B27VH46QMl7m+r+DPoNGfSRSW8++tk=
Subject key identifier:   1D:8C:72:83:37:01:20:12:B9:79:BE:21:72:08:0E:EF:84:33:FB:57
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer:       /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial:       01901D464953B5359D4C081E142581AF528A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number:          9B
Signing time:             Sat 15 Jun 2024 19:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:03 +0000
Files and hashes:         1: GSIjiG7l2t5b3b0MV9Kwkma-VuE.roa (hash: b2pOuTkgtoPwL9LXOehykxlaCvBsuZXo5khQvHaA7V0=)
                          2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: QMC6DuGlSDjvrr038HSFtLqCPYdCFDbYVVR82nsUVM4=)
                          3: wfqKJcJOvtFqZvd-UQvA_tb2CGM.roa (hash: iHvaI6mG1bCGXneLjFdMXYFcegjsQBFSBIWd4cOApSw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:49:53:b5:35:9d:4c:08:1e:14:25:81:af:52:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
        Validity
            Not Before: Jun 15 19:01:03 2024 GMT
            Not After : Jun 16 19:01:03 2024 GMT
        Subject: CN=1d8c728337012012b979be2172080eef8433fb57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:41:34:84:c6:34:34:d2:41:ac:d7:da:c2:
                    85:96:6b:c4:4c:68:69:54:87:5f:e7:fd:c7:ad:78:
                    6d:60:8e:58:99:17:f5:33:21:e1:52:04:ed:92:4f:
                    c9:f1:05:b8:a9:d2:de:9d:8e:45:4f:54:e4:e8:c8:
                    28:38:78:f9:00:d0:84:25:00:a7:1a:70:a6:37:59:
                    81:d8:56:e7:60:71:f7:19:ed:fb:ae:10:aa:b8:80:
                    04:a5:e8:b6:41:21:2a:5b:0d:ac:81:5c:ab:f9:14:
                    34:b7:62:e3:c8:23:21:74:c1:8c:e3:ea:19:b2:95:
                    85:68:35:70:55:c1:88:78:b0:4c:3c:7e:d6:66:c2:
                    d3:e4:58:4a:30:44:d8:64:32:e3:4b:4c:e1:6b:13:
                    7b:c1:cc:17:95:79:80:bb:41:a8:83:66:e2:a5:eb:
                    c7:9c:f1:3e:72:70:a2:9a:15:46:65:f2:4f:9b:c4:
                    d6:e9:a4:12:06:bd:db:35:7e:4c:69:2c:c3:7f:94:
                    46:dd:64:36:7f:bc:89:81:ad:91:c3:0e:e0:af:ab:
                    07:41:41:e2:da:ea:cc:4a:d1:30:e3:58:66:a1:7b:
                    2b:42:9c:f8:90:30:59:16:7a:1c:26:0c:16:25:47:
                    4a:df:8b:ee:14:af:24:2e:f9:d8:86:76:e9:ba:ce:
                    4c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8C:72:83:37:01:20:12:B9:79:BE:21:72:08:0E:EF:84:33:FB:57
            X509v3 Authority Key Identifier:
                keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:40:25:68:43:d7:a6:66:a6:ab:f6:8d:37:c3:94:23:f8:06:
         03:f0:05:bf:9d:2d:ff:64:47:8a:b8:53:62:df:ca:82:b7:7a:
         65:3b:56:f6:d3:3a:24:0c:73:6a:6c:43:09:5a:6b:94:ae:cf:
         35:96:b6:ef:64:3b:9e:d4:3a:0f:e0:92:06:07:99:28:b9:bb:
         8f:74:c4:90:36:82:82:40:8b:cf:0e:36:7d:51:f3:54:30:50:
         e3:54:14:ec:83:ae:77:0c:7a:33:4d:6e:51:06:38:b0:15:c2:
         eb:5d:98:8a:1d:55:d7:64:40:52:f2:a3:b7:0c:e6:52:85:ba:
         0d:cc:a5:2f:12:a0:db:29:bd:5b:b8:54:24:25:03:0c:6d:48:
         11:f8:8e:73:d1:a5:8d:ee:40:40:c6:9e:e2:ff:f0:76:e3:17:
         7c:12:84:0f:e2:1c:de:fa:d7:6e:2e:71:bc:08:a2:91:09:2c:
         c1:b2:fb:39:c5:04:3e:91:c7:e1:e1:cb:52:56:82:e0:63:04:
         79:22:92:6a:f5:fb:86:19:94:97:46:48:c8:e2:a2:ea:1e:69:
         f1:15:b9:7f:c2:0c:96:33:be:23:ff:08:8e:53:d9:fa:e9:1f:
         4d:54:86:4c:e0:fd:79:3e:6d:91:72:92:6e:4c:46:93:d0:b4:
         d5:25:0b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 19:38:39 2024 by rpki-client on console-fra.rpki-client.org