Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File:                     bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier:          sg9rNpVV4v7blNzQln2FwgzIMPwhPTwLQ9HS8HXaoTY=
Subject key identifier:   FB:07:98:94:BD:4C:F1:00:26:B4:5F:2A:CE:D2:22:AC:D1:0A:D2:9D
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer:       /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial:       018F8F028A5AEC62B771225E1982D2CD8BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number:          09E4
Signing time:             Sun 19 May 2024 04:00:59 +0000
Manifest this update:     Sun 19 May 2024 04:00:59 +0000
Manifest next update:     Mon 20 May 2024 04:00:59 +0000
Files and hashes:         1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: hyhpq3OX1GQ6EdFcBArAjtNpm34EvhpEarYfQe5yLMc=)
                          2: cRUdYR3fsRjadNws_lMl5mkQjpQ.roa (hash: cEXJYiHzaxHdwHsV9GRwNekIcQAW38OnLQobuh+ane0=)
                          3: zxl138YEv4f2kWDKwH83Gt8Vw3A.roa (hash: gvL75f7HBL3LSeT6M3rYso4thc8biAi+dOBrYsSZpko=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8f:02:8a:5a:ec:62:b7:71:22:5e:19:82:d2:cd:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
        Validity
            Not Before: May 19 04:00:59 2024 GMT
            Not After : May 20 04:00:59 2024 GMT
        Subject: CN=fb079894bd4cf10026b45f2aced222acd10ad29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:be:ba:0e:56:f4:78:f0:e0:c5:3c:c2:57:d9:
                    d8:5c:c5:69:8e:ad:69:1d:76:22:75:dc:72:8c:21:
                    ca:ec:d7:da:0e:e6:87:d8:c1:56:41:17:eb:b4:33:
                    a8:9e:1e:52:b2:07:17:bc:f4:b2:c3:e9:c6:60:38:
                    a4:4c:8d:af:90:ae:89:9b:50:4e:2a:da:b3:17:03:
                    b0:24:c4:03:5c:97:61:fa:f0:c0:1b:ec:8f:89:60:
                    f4:ec:18:32:ef:48:d5:7d:d9:3e:14:3d:28:03:89:
                    a0:73:06:d0:0b:e4:ce:e2:4a:a3:e4:e1:41:9c:f1:
                    54:a8:85:8f:a1:9e:ab:4c:5a:3c:74:50:9a:36:02:
                    60:b7:d8:ac:6a:f2:14:9c:c6:21:d9:8a:8b:3e:0e:
                    db:cc:bf:8d:7f:1e:ea:88:0f:a0:09:60:9f:4e:3c:
                    05:78:71:c7:fe:02:c1:03:85:d1:54:1a:46:ab:5c:
                    e4:ac:a5:d0:38:82:84:19:1a:ba:f1:f8:c3:a6:bf:
                    e3:c4:06:ff:dd:c2:08:cd:41:10:05:b8:0c:ca:e5:
                    61:41:4e:67:6b:6c:50:4b:4a:9b:89:a4:32:23:84:
                    16:49:4b:24:cf:32:3f:4b:d6:6c:d5:c5:88:0d:98:
                    42:d1:6c:67:7b:94:e6:93:28:62:4d:60:81:70:e3:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:07:98:94:BD:4C:F1:00:26:B4:5F:2A:CE:D2:22:AC:D1:0A:D2:9D
            X509v3 Authority Key Identifier:
                keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3d:9e:fe:82:ac:09:9c:8f:68:2e:0b:db:f1:03:3b:8b:e0:
         85:28:65:65:fe:3c:35:8e:62:08:67:51:77:44:c2:db:98:e7:
         13:20:03:a7:3d:9c:ec:da:c4:ee:26:be:23:85:91:9d:0a:6c:
         34:e0:8a:2d:a0:fc:de:04:67:37:d2:60:cc:0d:c0:59:1b:f0:
         60:88:ad:db:cc:84:f4:9e:b1:25:8d:9b:28:4d:7f:7a:f7:e3:
         fd:8f:e1:f5:ba:60:12:b6:ee:ab:dd:e7:0d:50:59:93:bf:8e:
         5b:f4:0f:e5:b2:6e:a9:b0:c2:47:3b:68:23:e8:af:ab:14:24:
         62:84:8c:75:6a:1b:30:51:6a:11:1f:5d:eb:45:66:16:ee:cd:
         99:46:30:68:7f:03:ec:c1:ac:c2:17:3b:e8:f2:a1:2c:c3:56:
         a3:70:85:af:18:ad:be:74:cc:09:f3:cd:13:a4:d2:f3:0b:f1:
         78:55:80:7a:d0:3e:af:b3:a9:dd:85:48:b4:ec:f3:00:48:39:
         6f:80:2d:dc:76:3c:67:5c:40:b1:8f:fa:26:c8:2b:65:a2:83:
         ad:74:46:33:f3:81:fe:74:b4:0c:ef:46:e6:e0:c0:63:d5:81:
         75:dd:0e:e8:a0:dc:b7:37:5a:14:8b:b9:0a:38:79:07:2d:ef:
         f5:04:5e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:19:19 2024 by rpki-client on console-fra.rpki-client.org