Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File:                     snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier:          fc3VTcfj5v57oxnIYkHRFamKa1KEtGiUb+5jFjTsFH4=
Subject key identifier:   BF:3E:60:B5:3D:A4:EA:99:B4:8E:2B:52:3D:01:F7:3A:68:96:A4:40
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer:       /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial:       01901CD868D88A0BBD8C11B633B096D685C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number:          09F8
Signing time:             Sat 15 Jun 2024 17:01:02 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:02 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:02 +0000
Files and hashes:         1: Xhn2w9vFSDcYfW0E6h97MFOSlOs.roa (hash: zNLL2MARZ388bl8vlZwPSkBlOzEe3inJCQPHhMe6d10=)
                          2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: xxVkPeeUaPEKlC6XfghaegAZj/FdjYdaHS++BDZJ28c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:68:d8:8a:0b:bd:8c:11:b6:33:b0:96:d6:85:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
        Validity
            Not Before: Jun 15 17:01:02 2024 GMT
            Not After : Jun 16 17:01:02 2024 GMT
        Subject: CN=bf3e60b53da4ea99b48e2b523d01f73a6896a440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:1f:26:a1:15:e6:eb:f2:cf:02:ba:45:cf:
                    79:84:e5:5f:e0:0d:5b:b6:33:71:75:f3:4a:fd:e2:
                    d7:42:af:f9:95:be:d5:fc:8b:b8:71:71:35:9c:21:
                    c9:7d:ca:64:4e:1b:f0:b5:ae:d8:79:21:9f:a7:76:
                    82:12:76:dc:ef:8d:97:3b:87:22:e3:9e:fb:8f:21:
                    4a:81:cb:ae:e9:8f:08:2c:fe:1b:c6:43:1f:ea:06:
                    fd:17:f8:bf:b1:4a:f5:c6:0d:ab:3b:9e:90:17:78:
                    48:98:76:b6:1a:37:f9:b1:92:a8:19:5a:4b:a0:12:
                    4d:1f:b6:c3:26:f9:a5:37:90:6a:51:df:07:7a:1b:
                    24:88:21:73:4a:2f:5d:d0:57:9a:46:49:af:38:ff:
                    52:f4:d2:52:7c:5a:90:8a:b0:ee:a0:16:67:73:e9:
                    89:87:3e:8e:93:de:bc:5e:7a:67:07:e3:0e:8d:b9:
                    d9:db:16:c2:d6:66:eb:4a:2d:29:b2:13:d6:c5:ee:
                    ee:d8:0e:33:ba:df:bb:46:7e:3a:40:c4:35:d8:0b:
                    03:a5:95:6b:bb:85:35:af:ef:90:84:24:40:23:4e:
                    c7:64:8a:c5:53:c2:21:08:a3:ea:b5:5a:ab:a8:e6:
                    7f:47:84:9f:e6:1d:49:52:ae:8f:17:1b:ed:84:d8:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3E:60:B5:3D:A4:EA:99:B4:8E:2B:52:3D:01:F7:3A:68:96:A4:40
            X509v3 Authority Key Identifier:
                keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:63:8c:69:d0:2f:3d:df:f8:9a:9d:b9:bc:03:81:b4:4a:eb:
         aa:39:02:98:78:9b:9d:94:67:15:71:9f:a1:58:06:e9:23:fe:
         df:bc:53:3b:e2:d7:bf:a3:24:3f:b4:3c:9c:d9:ed:b2:77:bc:
         6b:2d:6a:aa:dc:e6:8a:17:b3:3f:05:bc:f2:5b:2f:d9:75:17:
         7e:ac:c1:7c:06:b0:08:9c:69:09:b9:39:4d:44:53:9c:af:fa:
         06:4c:be:4e:27:1a:4a:b7:45:25:ac:97:e2:30:ba:4b:0b:78:
         2d:ce:6b:d3:9b:ad:f6:98:73:ac:e9:de:83:06:7f:d6:68:b6:
         ac:f5:5e:1e:eb:87:a9:98:e1:86:bf:4c:0a:34:c1:5f:1b:be:
         f1:b5:62:fe:b1:6b:7e:f9:53:b4:6d:22:4a:52:fe:bd:1f:e7:
         1f:9a:e6:9e:96:bd:cd:51:45:af:a9:20:09:b9:d8:4c:f9:11:
         3e:ea:fa:68:75:11:77:3c:d5:1f:6e:72:e4:f2:8a:70:06:c7:
         bd:95:bd:a3:0c:ea:5f:8b:06:96:24:c9:f5:aa:1a:bb:a0:74:
         c8:21:64:8e:bd:92:09:c0:00:a7:bb:30:8c:2e:c7:9a:e0:b4:
         51:17:d6:16:cb:01:bf:d0:a4:90:cf:39:6d:9d:f2:d8:7c:78:
         a2:88:f2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:42:04 2024 by rpki-client on console-fra.rpki-client.org