Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File:                     d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier:          DtnZgQ3zg8vO54P1sfvfj2HbHA0K3e5QMlJMfmcjKlc=
Subject key identifier:   E9:65:6D:CA:95:87:A1:5F:23:B6:0C:60:05:ED:E2:C6:8E:46:6C:E9
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer:       /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial:       018F5EBCB744A2E62FAA33CD9B01FD9D12B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number:          0935
Signing time:             Thu 09 May 2024 19:02:57 +0000
Manifest this update:     Thu 09 May 2024 19:02:57 +0000
Manifest next update:     Fri 10 May 2024 19:02:57 +0000
Files and hashes:         1: Dn1Isf9bKIqcJ4BR11CuWo4XTuI.roa (hash: zkX/ZAGg2huHG5AgOPH2Jab+ATSxqIgMYggxrTLIdP0=)
                          2: HJl1Z9-jqvMogLU3dkNYXqqOT3o.roa (hash: bE24Ia5K9TJzTNNPOvxfl5o2YddmuPxaBwE/CxiX/O0=)
                          3: JUs8ADU10PF2qPtBzd3JaQkpyck.roa (hash: p0r0gdgY+93/NRccjEU9onc2SjmgWFh7IwtBEc5xb3M=)
                          4: WNEgePGEKQltlXUVRL8AdpkS13w.roa (hash: 5OVG1C1yay7VNc0Fqs5oSuogTMkMmg1Z/qxSd89ui8k=)
                          5: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: ofQeHGFYnb1hWTj3AD0mKUFsQDKvQLF1E5HbLsp+6Yw=)
                          6: j6I-BK3Htoikj0ebv48PaWmA8lw.roa (hash: re+n2wqm/qbUL9FCx/hhLQCr7SsMB+r38xZwBxHf/V8=)
                          7: mMAg12jPtr74TOsk3VC3gPjsZVo.roa (hash: o2G7nuGIq/7Be8J0MaBTzFHd8+XyBzC6NUzaY0EiFOk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:5e:bc:b7:44:a2:e6:2f:aa:33:cd:9b:01:fd:9d:12:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
        Validity
            Not Before: May  9 19:02:57 2024 GMT
            Not After : May 10 19:02:57 2024 GMT
        Subject: CN=e9656dca9587a15f23b60c6005ede2c68e466ce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:b0:6e:4e:03:c0:e1:69:dd:6f:43:a1:c0:
                    38:be:2e:4a:56:0b:fc:3c:49:e3:be:ba:10:05:e7:
                    2e:29:ff:d0:01:17:88:66:68:5d:41:40:21:40:5a:
                    4d:56:b9:d2:aa:86:24:f2:32:ed:0c:0f:27:50:4e:
                    c5:27:05:59:30:64:fd:c6:5d:ef:9f:6d:7c:ec:3d:
                    53:3d:3f:fc:4d:00:4a:84:ec:6f:07:58:12:9d:15:
                    37:e6:e6:36:bd:a4:2b:6d:36:e6:c3:4b:5a:89:cd:
                    f7:4b:0f:65:cb:4c:8b:7e:1c:72:8c:c3:7d:3d:8d:
                    be:89:83:32:55:0e:7c:e0:e0:e0:81:40:fc:c4:29:
                    b6:f8:e8:ba:24:29:2c:a7:1b:df:ed:c9:fb:88:c1:
                    1a:fe:12:ce:ae:c7:65:c4:5a:bd:86:b4:15:20:4a:
                    26:ba:ff:46:19:91:f0:c7:c6:e9:3e:e3:6e:f0:77:
                    a1:1d:74:c1:c4:75:5b:b4:0f:0d:97:33:c7:95:3e:
                    82:57:6f:35:53:34:fb:2b:90:b1:da:c1:b7:b9:5b:
                    bd:26:79:ea:29:51:71:e7:62:0b:0b:1d:de:0b:5d:
                    7c:78:46:86:56:52:0f:24:08:e2:fd:ee:73:ce:a0:
                    77:76:6f:ed:77:cf:21:52:e1:1e:8e:75:e3:9a:8a:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:65:6D:CA:95:87:A1:5F:23:B6:0C:60:05:ED:E2:C6:8E:46:6C:E9
            X509v3 Authority Key Identifier:
                keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ac:96:5e:56:5e:02:a2:2d:3f:9e:d7:e3:68:19:2e:19:6f:
         4e:98:0f:f1:f4:05:51:44:8d:c5:00:58:11:b1:b2:c6:f4:cf:
         02:7d:f3:40:9f:b1:61:8a:a9:9d:9c:45:64:41:f7:58:74:9f:
         d6:b9:11:75:1f:77:a4:d1:8d:0c:84:2a:94:97:f3:0f:2b:42:
         d0:95:7d:54:ea:bf:92:d8:f3:95:b6:0c:ec:96:5c:a3:a4:a1:
         d2:3d:3d:2b:35:12:98:ec:32:b0:4f:14:e5:7f:30:d4:ee:91:
         3e:0e:34:69:4e:76:55:bb:77:c7:e2:79:c0:14:47:d6:d8:59:
         93:9a:26:f8:59:95:ce:2a:cb:3c:fa:09:7c:c1:1f:22:88:da:
         70:80:0e:c3:89:eb:ac:60:ea:66:63:00:f8:04:bd:a7:32:59:
         69:92:92:a0:f1:2f:b8:db:97:1c:6e:0c:0d:07:e0:06:1e:62:
         ce:45:2f:da:21:4f:9a:97:8b:ba:2c:22:26:66:3b:89:2b:dc:
         00:27:3e:d0:e8:30:e1:70:45:04:4f:48:45:86:7d:d6:3c:09:
         a1:f3:00:82:1c:fe:bf:4a:2f:1a:d8:18:a5:63:fa:9b:1e:46:
         b9:02:ec:19:0e:7b:ce:cd:27:37:79:75:62:38:54:46:d2:96:
         08:55:53:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:40:36 2024 by rpki-client on console-ams.rpki-client.org