Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
File:                     i3P4NzXIqxCgqNROFwEo8COEbnk.mft (raw, json)
Hash identifier:          iKAneM5yHusykHL9tXrvUOD77Sr3SvdmtRUEXYYgPZg=
Subject key identifier:   92:64:09:2B:81:59:DC:00:37:9A:A3:B9:D9:9A:98:32:0B:EE:EF:EE
Authority key identifier: 8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79
Certificate issuer:       /CN=8b73f83735c8ab10a0a8d44e170128f023846e79
Certificate serial:       01907BB032680B288877D1FC9EAF6F22477E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
Manifest number:          B9
Signing time:             Thu 04 Jul 2024 03:01:03 +0000
Manifest this update:     Thu 04 Jul 2024 03:01:03 +0000
Manifest next update:     Fri 05 Jul 2024 03:01:03 +0000
Files and hashes:         1: 64-pPPPaCJ3ERtV477ASgjKCG8o.roa (hash: AuPYQ7Fw9nby1Ut5PgpWoeF4TPSPjjw6U+cFh8yrIt8=)
                          2: i3P4NzXIqxCgqNROFwEo8COEbnk.crl (hash: LzyM2CZ/P4/ZRii+y8TxUL8prw/jiVwQRZvUCItEai0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jul 2024 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:7b:b0:32:68:0b:28:88:77:d1:fc:9e:af:6f:22:47:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b73f83735c8ab10a0a8d44e170128f023846e79
        Validity
            Not Before: Jul  4 03:01:03 2024 GMT
            Not After : Jul  5 03:01:03 2024 GMT
        Subject: CN=9264092b8159dc00379aa3b9d99a98320beeefee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d8:a3:67:e4:7c:c3:03:89:11:43:f0:e5:4c:
                    96:44:60:3c:39:f9:2f:96:9a:3b:bc:94:aa:30:d9:
                    98:1d:fc:0f:f1:8e:96:32:e7:91:66:7a:b7:35:e1:
                    07:72:6f:4b:a8:c4:fa:1b:11:ce:e3:41:20:c5:b0:
                    9d:cd:6a:2f:80:15:0b:bd:aa:e1:17:f9:d2:bc:48:
                    85:f0:7d:19:ba:1d:e0:ae:bc:a0:c1:85:0c:82:02:
                    0c:37:3f:bb:bd:06:3f:04:50:56:c7:a7:67:05:fc:
                    2c:57:68:f2:5d:b6:d3:09:57:fa:3f:cf:a9:15:1c:
                    d8:08:8a:e0:6a:2f:24:0c:eb:2f:56:02:e2:3b:d2:
                    d2:08:f0:7f:65:bb:5b:16:52:46:d3:c6:94:a0:5f:
                    bb:ad:0b:2e:f6:40:5d:58:24:12:db:da:df:48:22:
                    8d:bf:fd:b5:b2:a8:85:c0:18:44:47:6b:6c:c4:20:
                    7b:5b:09:ec:70:c4:d7:38:b2:73:90:f0:24:08:ad:
                    1b:de:96:48:40:70:66:9f:01:1b:01:26:b2:14:ea:
                    45:fb:11:a3:aa:ec:f0:6d:f0:a5:14:cf:a7:ed:b4:
                    5c:fa:9b:c5:71:b7:fe:da:57:fe:2d:34:dc:55:b3:
                    f0:fa:fa:d2:90:ed:51:76:3f:74:d2:10:98:1b:6c:
                    42:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:64:09:2B:81:59:DC:00:37:9A:A3:B9:D9:9A:98:32:0B:EE:EF:EE
            X509v3 Authority Key Identifier:
                keyid:8B:73:F8:37:35:C8:AB:10:A0:A8:D4:4E:17:01:28:F0:23:84:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i3P4NzXIqxCgqNROFwEo8COEbnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e76a95-f7ae-44b9-9d8d-65dd7f52e46c/1/i3P4NzXIqxCgqNROFwEo8COEbnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:65:a5:cc:b9:35:f1:35:74:c4:4e:80:2b:e9:6a:36:ba:b2:
         79:38:2d:89:46:91:f7:07:b3:eb:15:56:db:03:87:82:ad:d0:
         03:92:04:76:ce:ed:a6:1e:60:9c:f3:0b:f8:4c:83:63:c7:da:
         54:3f:cd:f5:e5:7d:fe:0c:11:78:30:d0:68:38:c8:47:02:4e:
         47:97:8a:35:01:b4:45:7b:32:80:95:5e:b8:35:94:20:6f:05:
         c7:2b:5b:83:db:0d:1e:37:fd:20:86:18:33:00:72:28:a2:49:
         2b:86:0c:b3:80:7b:32:92:cc:40:da:b3:23:c4:17:9e:a0:5c:
         5c:e6:92:b6:6c:7f:bc:bd:a4:b7:b2:e7:c5:18:74:e5:27:aa:
         70:74:ce:02:3c:73:8a:ed:7d:0f:5d:26:b3:cd:97:af:3a:46:
         52:9f:17:73:01:64:08:8d:64:11:a7:af:f5:bf:b6:0e:b6:93:
         ee:ff:93:83:75:bc:91:e4:b2:80:b2:4e:db:a4:9e:80:69:7d:
         44:97:24:12:7e:a7:f3:45:09:74:38:80:8a:46:16:f6:df:16:
         fa:37:c4:19:22:a4:9d:29:19:8b:6b:62:25:62:7a:fa:a3:64:
         8f:80:f1:c2:02:93:08:4a:ea:62:6e:9e:be:d7:be:d5:07:3c:
         21:3a:86:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 04:11:59 2024 by rpki-client on console-fra.rpki-client.org