Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
File:                     Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft (raw, json)
Hash identifier:          TgXs5sKtqPaBwiF/mzlO5DMlCQkAnpz7O2f7o5rJiCg=
Subject key identifier:   47:73:BB:D0:51:87:A0:D9:01:21:0F:DA:52:22:7B:DB:60:81:7E:32
Authority key identifier: 66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B
Certificate issuer:       /CN=662f55d377127f28ce26b78fd83becf41becad4b
Certificate serial:       018F87ED1B59594400C90830E7FA31063765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
Manifest number:          0EB9
Signing time:             Fri 17 May 2024 19:00:14 +0000
Manifest this update:     Fri 17 May 2024 19:00:14 +0000
Manifest next update:     Sat 18 May 2024 19:00:14 +0000
Files and hashes:         1: Nd5lQA3WrMonE0kfxhm4SJGwS64.roa (hash: 5HYJkZQCEswBAIjnfrh1B5F2cBrpYSuuZeP4bcEjvTA=)
                          2: PgJWXwBQaCHbRRP-IotpZ92QIBQ.roa (hash: xYQsy3pMjN7C/C6gSmAGmRi3MkJ/N6wrKk6aQury8e0=)
                          3: Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl (hash: PaBQAhf1HHd3XNiSlBk3M3eauFXSa4FXOKy/ZBbqZnw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:1b:59:59:44:00:c9:08:30:e7:fa:31:06:37:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=662f55d377127f28ce26b78fd83becf41becad4b
        Validity
            Not Before: May 17 19:00:14 2024 GMT
            Not After : May 18 19:00:14 2024 GMT
        Subject: CN=4773bbd05187a0d901210fda52227bdb60817e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:88:bb:78:cd:77:4b:de:be:dc:a9:d3:da:
                    d2:fb:4d:c5:f4:85:03:94:2a:0a:72:e6:85:6d:42:
                    23:96:63:61:4e:38:f9:ec:bc:48:d1:0b:6f:ad:a5:
                    70:e1:b7:ba:af:7b:c0:2e:21:9a:b1:e4:84:5e:50:
                    b5:9c:12:78:2d:d6:8b:84:37:99:60:bb:d4:10:c2:
                    96:fe:e0:6a:2c:ce:af:65:ed:10:d7:f6:0c:4b:94:
                    21:cd:0a:c4:68:e4:de:85:0f:f0:46:c5:65:da:6f:
                    3e:5c:cb:d9:a0:2c:bc:bc:46:b4:af:e5:6d:dd:65:
                    d7:ea:44:dd:f7:ba:3b:0c:ce:75:34:6e:76:9f:1c:
                    1f:42:ad:b7:2a:ac:1b:35:71:bb:82:ec:9f:a7:c9:
                    61:a5:45:d3:67:78:75:15:b5:c9:fa:7e:bf:31:a1:
                    af:13:77:bf:e8:68:d0:82:66:e0:47:c6:7d:ba:16:
                    53:c7:c3:ba:ca:34:13:38:a1:b6:4a:97:34:d9:61:
                    a5:39:78:d2:db:e3:cd:e0:1a:9c:08:1f:39:03:32:
                    4b:4b:62:7d:3c:de:0f:6d:18:98:b2:70:86:be:fe:
                    2a:af:26:4b:84:f6:97:2b:7a:05:2d:79:12:8e:af:
                    fa:82:d2:87:3e:8a:ca:7e:6b:f9:3a:8a:5a:cb:7d:
                    8d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:73:BB:D0:51:87:A0:D9:01:21:0F:DA:52:22:7B:DB:60:81:7E:32
            X509v3 Authority Key Identifier:
                keyid:66:2F:55:D3:77:12:7F:28:CE:26:B7:8F:D8:3B:EC:F4:1B:EC:AD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi9V03cSfyjOJreP2Dvs9BvsrUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/388c70-e4c7-420d-8188-8be146253356/1/Zi9V03cSfyjOJreP2Dvs9BvsrUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:87:34:e1:7d:87:b1:0c:3e:a1:5c:b2:9d:db:99:a9:c5:24:
         6f:78:7e:c4:9f:d5:cd:0f:23:c2:49:b1:f1:ab:99:01:2f:ae:
         57:eb:db:3d:c1:50:3e:af:e9:05:37:0e:0b:64:29:94:0e:fc:
         45:31:da:c6:8a:7f:49:84:66:b8:38:ba:ee:dd:9a:b2:72:ea:
         b9:dc:cb:0b:55:a4:1b:0b:9c:df:59:72:eb:22:cc:1e:ef:cb:
         52:f5:65:d1:27:53:aa:4f:22:1b:cb:37:24:97:c0:bc:c5:a8:
         29:6d:9d:40:a7:32:b6:55:25:a9:ec:34:46:24:e2:1b:72:05:
         fa:9b:5d:ec:d0:56:97:f5:c6:04:1e:4c:07:03:b1:46:11:99:
         aa:e4:6b:36:09:7f:1d:f2:a9:ac:2c:52:1f:bd:a2:9f:a6:0b:
         06:36:da:f1:d6:b6:0e:cc:8c:43:74:cd:38:57:6f:a4:33:07:
         30:fb:4f:e7:1d:5e:8a:44:ee:f2:a9:df:e1:ab:99:1d:38:f9:
         e2:0f:2c:e9:a1:3c:c0:46:65:1d:4a:42:89:91:2a:aa:64:af:
         59:63:77:7c:8b:b5:4e:3b:b2:bf:29:7e:c8:7a:e0:c6:c9:38:
         43:6b:d1:43:0e:c8:c2:bb:5b:f8:1c:9c:68:72:8c:5b:11:d1:
         30:35:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:26:25 2024 by rpki-client on console-ams.rpki-client.org