Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
File:                     m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json)
Hash identifier:          dOi06u+QrGDDNO1LgB1SxqXx6VrBz4k4gEWkWNMxG9M=
Subject key identifier:   FF:F9:43:83:76:0B:15:DA:68:3E:D9:D8:74:2F:BC:63:F2:1D:FF:1D
Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85
Certificate issuer:       /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
Certificate serial:       019048D53FFA9072B8B6E41B321EA31E6B01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
Manifest number:          0FB6
Signing time:             Mon 24 Jun 2024 06:00:53 +0000
Manifest this update:     Mon 24 Jun 2024 06:00:53 +0000
Manifest next update:     Tue 25 Jun 2024 06:00:53 +0000
Files and hashes:         1: U3qrbabnQnaai7hsrMvEaSHGs4U.roa (hash: S2PXezMWPZ8wCcagWDjRsomHhk/ittgnci9avBABYgY=)
                          2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: GdsLJunxuVw07IPVfXLIf78LsXJ8jWPV4eDVe0KeHag=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:d5:3f:fa:90:72:b8:b6:e4:1b:32:1e:a3:1e:6b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985
        Validity
            Not Before: Jun 24 06:00:53 2024 GMT
            Not After : Jun 25 06:00:53 2024 GMT
        Subject: CN=fff94383760b15da683ed9d8742fbc63f21dff1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:b0:14:e7:48:89:10:83:4a:05:ed:2b:b1:
                    b0:48:e5:04:73:44:02:0d:6e:a6:fb:6e:f7:9c:14:
                    8d:3a:e3:be:6b:7e:e4:13:9b:5d:46:45:f6:e2:89:
                    18:f9:20:7e:20:f7:b5:6a:33:46:c0:f4:ba:83:4b:
                    da:53:b5:5a:07:de:dd:0f:d1:96:59:9a:84:e2:cd:
                    61:c1:05:33:2f:46:37:44:a8:64:f0:bc:22:e4:5d:
                    a1:89:7e:cf:c4:59:d3:79:a4:f4:98:c6:9a:a4:45:
                    46:eb:4f:2c:f6:4d:92:b0:6d:1e:08:b2:a3:fb:ce:
                    8e:55:d4:75:02:50:42:09:92:ec:de:4e:8f:1b:2f:
                    0c:a1:28:90:05:56:08:99:d9:33:77:30:1b:88:93:
                    e9:f0:4b:52:42:ba:e1:0b:34:58:97:e5:b1:81:67:
                    3f:96:36:c9:db:e3:38:39:55:37:45:22:89:12:29:
                    1c:4e:a4:f4:4c:bd:ce:54:72:39:5b:94:c0:a4:33:
                    ee:2d:dc:6e:c3:2c:f6:3e:db:35:55:07:25:41:32:
                    62:3e:f2:7f:c6:8e:88:fb:db:84:0e:04:f4:c5:8b:
                    a8:cf:81:34:ff:92:13:03:60:8b:03:73:e7:f1:c0:
                    fa:05:e6:c2:e2:15:30:29:a5:79:df:cc:f6:b1:f5:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F9:43:83:76:0B:15:DA:68:3E:D9:D8:74:2F:BC:63:F2:1D:FF:1D
            X509v3 Authority Key Identifier:
                keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:09:92:06:93:07:f8:aa:b8:37:61:b5:c9:5d:b8:31:e3:07:
         cb:a6:1c:1b:b4:9a:7a:a2:a4:ee:1a:89:c1:ca:0c:2d:96:f5:
         0b:19:aa:ec:53:f7:c1:3c:35:61:d3:ed:56:54:48:b2:e4:6f:
         22:90:30:0e:35:fb:e7:0f:cc:4b:dd:ed:c3:fc:f4:b6:8d:af:
         58:a5:bf:ea:6e:0e:ac:5d:3d:25:6c:9e:1a:2b:e4:5a:90:a1:
         8b:26:7c:5e:9b:b1:c7:08:30:6a:d5:9c:b6:76:25:3e:7c:22:
         59:0e:a7:ec:dc:96:e8:85:4f:76:b3:07:84:0a:00:b2:fc:86:
         5d:c1:b2:fb:67:1b:0f:8f:2c:c4:8a:58:3e:bc:d4:51:46:72:
         cf:e5:d9:02:4b:9a:93:30:3b:3b:50:24:55:af:6e:cf:41:cd:
         5a:27:6a:57:1d:6b:51:68:25:93:9c:26:dd:7f:b7:58:45:a8:
         91:2a:08:37:ae:f4:10:8d:8f:47:fc:91:71:ef:8a:86:5c:46:
         7c:74:32:bc:e8:4a:90:be:5b:d3:45:5e:70:81:03:23:ff:35:
         b6:de:b7:d9:8d:98:e3:3a:5a:af:51:9a:11:7f:3b:da:77:92:
         87:1a:46:80:f3:55:b3:f4:81:8b:d3:5e:d4:3a:12:cd:75:87:
         2c:fd:43:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:44:17 2024 by rpki-client on console-fra.rpki-client.org