Manifest

$ rpki-client -vvf rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.mft
File:                     9B4F55D25CA44886E84A3C4D982C8D35E56A169C.mft (raw, json)
Hash identifier:          Lw3o7BvCnB+zo5FUBkL/E3HtBaHimhfjzj34ND0uM0M=
Subject key identifier:   43:37:1D:D6:8A:85:87:C8:3D:7E:08:34:B5:7E:31:17:86:77:78:E7
Authority key identifier: 9B:4F:55:D2:5C:A4:48:86:E8:4A:3C:4D:98:2C:8D:35:E5:6A:16:9C
Certificate issuer:       /CN=9b4f55d25ca44886e84a3c4d982c8d35e56a169c
Certificate serial:       792C2815C095D849FBF4ABFBCF375D77B339BE03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m09V0lykSIboSjxNmCyNNeVqFpw.cer
Subject info access:      rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.mft
Manifest number:          020B
Signing time:             Fri 19 Apr 2024 06:59:50 +0000
Manifest this update:     Fri 19 Apr 2024 06:54:50 +0000
Manifest next update:     Sat 20 Apr 2024 09:15:50 +0000
Files and hashes:         1: AS202996.asa (hash: vYSDNFtYNfrFGSN8p+c8KuzRKpOM/H5p/8zwu2M2wxQ=)
                          2: 9B4F55D25CA44886E84A3C4D982C8D35E56A169C.crl (hash: hwF953w65KHWIazK0FBBo+wAPnLngWr7Xe3POEPJ3b0=)

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.crl
                          rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m09V0lykSIboSjxNmCyNNeVqFpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Apr 2024 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2c:28:15:c0:95:d8:49:fb:f4:ab:fb:cf:37:5d:77:b3:39:be:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b4f55d25ca44886e84a3c4d982c8d35e56a169c
        Validity
            Not Before: Apr 19 06:54:50 2024 GMT
            Not After : Apr 20 09:15:50 2024 GMT
        Subject: CN=43371DD68A8587C83D7E0834B57E3117867778E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:93:98:2b:6c:10:2c:d3:a3:d6:d4:6b:92:
                    5d:80:63:59:13:07:d6:7b:28:6c:df:2f:5d:fa:ff:
                    f4:38:81:ea:e5:e4:6a:6c:cc:2f:93:75:a8:e0:d8:
                    c8:61:d0:0a:e9:e5:6c:fa:fc:30:76:bc:0b:2f:24:
                    07:24:55:07:e2:22:95:b7:b3:9c:25:3d:5f:04:40:
                    e5:eb:a8:c5:1c:fa:ea:28:1d:08:58:29:aa:c3:b4:
                    de:5f:14:0f:f9:77:40:6a:80:1d:58:6a:20:cd:5a:
                    c5:14:43:17:d9:9a:4c:24:0d:70:8e:55:f2:2a:1c:
                    db:6b:06:d9:dd:dc:3c:db:f6:31:82:31:a4:22:ac:
                    14:6a:1e:6f:7a:4b:17:82:ec:5a:00:14:8e:fa:22:
                    40:12:c4:24:2e:08:d2:f0:a5:90:21:5b:4c:fd:24:
                    29:14:70:6b:8f:67:1f:9f:28:89:f5:76:95:32:ae:
                    f9:52:e6:31:4f:2d:2d:28:86:84:0d:d4:f1:2f:29:
                    77:cb:0c:74:b4:53:77:dd:43:1f:5a:3c:c0:c3:b7:
                    ee:b7:2a:7b:34:53:bd:6d:4b:c9:3c:5d:0e:d8:4c:
                    71:b8:15:53:ae:12:fc:1b:62:b0:1c:ed:aa:a5:bd:
                    7a:79:f2:55:d0:b9:db:90:4a:b1:af:a4:9e:5c:d7:
                    48:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:37:1D:D6:8A:85:87:C8:3D:7E:08:34:B5:7E:31:17:86:77:78:E7
            X509v3 Authority Key Identifier:
                keyid:9B:4F:55:D2:5C:A4:48:86:E8:4A:3C:4D:98:2C:8D:35:E5:6A:16:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m09V0lykSIboSjxNmCyNNeVqFpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/3/9B4F55D25CA44886E84A3C4D982C8D35E56A169C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:8f:53:93:9d:9b:6f:56:96:5d:44:f2:15:1c:cc:aa:a5:0e:
         f6:2a:7b:b4:4e:6b:57:b3:f6:dc:ed:5c:6b:6c:71:d8:fe:7a:
         f9:06:75:2b:4a:f2:4c:50:30:ee:d6:e6:34:39:a8:d2:22:2b:
         02:0d:46:5c:5d:82:c5:8c:ee:d4:22:dd:b2:aa:02:97:78:f9:
         e4:38:84:64:1e:58:f9:b8:94:15:b4:f3:07:fc:b4:00:7a:52:
         b4:37:f8:b6:4a:19:e6:85:bb:20:85:e1:a7:11:e9:cd:11:9b:
         3a:52:ab:fc:14:fe:72:46:32:ac:47:45:5c:c2:4c:d0:e5:5e:
         de:b2:77:b4:7d:8f:a6:9e:d1:b9:0d:68:93:b9:4f:3a:86:e2:
         55:ac:9e:dc:4a:99:82:cc:af:76:a5:55:a2:68:1f:d3:b4:18:
         35:b6:94:da:08:a4:83:15:05:3c:14:58:9c:cd:ef:83:e3:d8:
         8a:77:ff:bb:21:f2:df:0b:25:0a:0d:8f:d5:45:36:6b:68:8b:
         88:68:77:09:63:f8:1a:2d:4e:13:4a:7a:91:d7:fa:db:74:21:
         86:77:56:ac:a1:44:ea:8e:81:96:5d:64:4f:55:37:c9:b7:a7:
         99:76:35:23:6d:95:08:d8:24:a8:20:b1:17:c8:71:3b:b2:f4:
         c8:69:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 07:44:47 2024 by rpki-client on console-fra.rpki-client.org