Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
File:                     9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json)
Hash identifier:          USC/TCTn6IWxqZDFiQcXInMJxBFY0l+XItAwOYsd2rM=
Subject key identifier:   59:BB:2F:EF:A4:CD:B1:9D:69:29:F4:F4:93:77:D4:AE:EF:17:B8:0D
Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54
Certificate issuer:       /CN=f709528b8828b4d826355e2c52237d642071cd54
Certificate serial:       01901F34CBE2169349B2F7AB185A05C3AB48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
Manifest number:          01A9
Signing time:             Sun 16 Jun 2024 04:01:12 +0000
Manifest this update:     Sun 16 Jun 2024 04:01:12 +0000
Manifest next update:     Mon 17 Jun 2024 04:01:12 +0000
Files and hashes:         1: 1lObMefZGalYdj71yFwq5dFC0KI.roa (hash: HUQuejTdefWML19kpZkxFKCQ742FIGjjhxy1XBfPgAY=)
                          2: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: ykxTlJMh6oQiMnm6itejWOXfX3JyvNbuyk+/hznnIyE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:34:cb:e2:16:93:49:b2:f7:ab:18:5a:05:c3:ab:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54
        Validity
            Not Before: Jun 16 04:01:12 2024 GMT
            Not After : Jun 17 04:01:12 2024 GMT
        Subject: CN=59bb2fefa4cdb19d6929f4f49377d4aeef17b80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:3b:09:08:64:e5:60:4c:63:02:35:90:6e:
                    80:fb:db:b1:88:d4:c3:f6:e4:77:1b:57:42:4c:c1:
                    94:2a:69:99:75:5b:eb:8d:c3:1c:d5:3f:46:a8:30:
                    55:16:5b:a4:3f:2b:86:64:bd:97:2f:d3:c8:a6:a9:
                    69:4a:0d:d8:31:2a:57:42:b6:08:46:be:91:09:c4:
                    68:56:0d:06:ef:a4:e9:fc:da:80:39:7d:06:48:ff:
                    79:bd:ca:2c:8c:b8:01:2b:84:96:d1:49:53:c7:40:
                    93:4b:93:75:8e:a4:76:c3:0e:b4:e4:6f:79:d8:84:
                    d8:40:87:1c:d7:84:95:32:7b:2f:eb:77:1f:a4:49:
                    d2:80:9f:40:ec:d7:fd:85:c9:b6:a9:7b:2e:eb:80:
                    ed:57:b2:03:15:86:8b:11:d2:37:76:e1:69:72:76:
                    9c:d0:99:96:29:a0:2d:92:42:43:ff:80:b6:4e:78:
                    e3:aa:56:7c:56:64:0b:10:d3:99:e0:f7:aa:ce:f6:
                    f8:95:24:25:9d:a2:85:42:c6:5d:1c:81:6e:e4:31:
                    a1:d1:20:be:88:9e:4f:57:dc:93:a1:dd:1e:b6:df:
                    10:6f:1f:57:f5:f7:89:58:a9:85:e4:37:82:ae:e7:
                    a5:82:a3:7e:f7:c0:b8:81:98:9b:78:2c:a9:22:c5:
                    f0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BB:2F:EF:A4:CD:B1:9D:69:29:F4:F4:93:77:D4:AE:EF:17:B8:0D
            X509v3 Authority Key Identifier:
                keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f2:af:a8:4f:75:7c:23:16:5f:85:73:06:86:ba:3a:6f:b1:
         94:fd:c0:fe:75:ec:17:28:29:65:a6:23:be:67:4e:18:db:9b:
         30:66:53:ae:20:12:81:fb:7f:02:a8:44:28:1b:fd:03:32:71:
         f3:59:56:d7:67:ba:db:25:ed:c8:3f:77:44:7d:f1:4c:09:5b:
         7d:5f:2a:37:72:54:f1:10:c9:1d:bb:32:2e:e9:09:ec:4c:48:
         68:31:20:07:13:5f:2c:89:c4:01:b0:82:7b:a6:54:7f:5e:2f:
         23:8f:3b:df:5b:e3:9a:c2:52:88:4f:63:90:fb:28:4c:21:8b:
         35:61:80:2f:22:05:a6:b3:99:f8:f3:d2:13:f2:e5:d9:91:6d:
         87:5f:65:b3:21:1a:1c:ca:fe:49:25:08:55:88:25:bc:b0:a9:
         3d:a9:56:b9:83:e3:9f:cf:44:21:58:22:c9:61:81:52:e9:36:
         84:b2:e4:6d:e5:c7:3a:eb:f6:a6:9f:bc:14:3a:92:ba:e5:52:
         9a:8b:61:18:ba:27:09:0f:b7:da:4f:73:d1:e3:16:91:e2:86:
         57:d8:e2:e8:c3:3b:62:7a:8f:5a:b6:bf:86:45:71:bb:87:ba:
         80:82:62:3b:33:57:14:2c:a1:4d:64:46:63:02:f9:78:0f:3d:
         45:08:02:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:46:20 2024 by rpki-client on console-fra.rpki-client.org