Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft
File:                     MQg6vX-XmWMam72oo09EIwH8bm8.mft (raw, json)
Hash identifier:          FGvXI/iFYkwmP2ea5VuUzWTggzlYqHskWwZftcnlREQ=
Subject key identifier:   9B:7C:31:F1:EE:19:02:41:2C:5B:C4:FF:9D:49:A8:16:B5:6E:34:61
Authority key identifier: 31:08:3A:BD:7F:97:99:63:1A:9B:BD:A8:A3:4F:44:23:01:FC:6E:6F
Certificate issuer:       /CN=31083abd7f9799631a9bbda8a34f442301fc6e6f
Certificate serial:       018F86A3E8DCE34B49E556C450C1AEFBE447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft
Manifest number:          096A
Signing time:             Fri 17 May 2024 13:00:39 +0000
Manifest this update:     Fri 17 May 2024 13:00:39 +0000
Manifest next update:     Sat 18 May 2024 13:00:39 +0000
Files and hashes:         1: MQg6vX-XmWMam72oo09EIwH8bm8.crl (hash: S18QFa71zoCT6KMoJRh2bhJIANCqaN5f4eA0aG7+Veo=)
                          2: c8BLxRwyhNHXKOZVC0aQH4d4IYY.roa (hash: jazhxGuZxgPfFQ9flUW0RIJQ5NUtZGOz9mXRaoj/1lw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:e8:dc:e3:4b:49:e5:56:c4:50:c1:ae:fb:e4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31083abd7f9799631a9bbda8a34f442301fc6e6f
        Validity
            Not Before: May 17 13:00:39 2024 GMT
            Not After : May 18 13:00:39 2024 GMT
        Subject: CN=9b7c31f1ee1902412c5bc4ff9d49a816b56e3461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:c9:d8:87:4b:01:d2:c8:63:c9:31:50:69:
                    fa:18:1f:f5:63:b6:92:31:9f:34:37:b8:ac:06:58:
                    9c:5e:07:40:70:ab:b8:e3:f9:75:5a:d3:6d:2d:52:
                    22:08:a5:c6:be:69:31:1f:93:c1:0d:9c:8a:17:0f:
                    ca:fd:b6:bf:db:f4:bb:7d:21:13:ac:7b:b8:a8:e9:
                    22:2e:bd:a1:a5:fd:f1:0b:0d:9e:d6:4f:85:bf:04:
                    07:23:3e:69:1a:6b:69:f4:3c:86:34:15:56:88:d6:
                    ae:77:f8:53:d4:4e:dc:c6:3d:e0:75:05:e8:fc:4a:
                    18:ad:16:99:d4:19:25:d0:24:29:94:26:77:cb:68:
                    90:02:53:72:05:df:62:46:d6:bd:e3:44:cc:cf:fc:
                    07:77:8e:5d:c3:0f:ea:66:4e:ed:e2:2c:3b:e7:e9:
                    32:d5:5a:0a:3d:24:93:ec:47:0e:cf:48:e0:10:88:
                    cc:3f:ba:74:dd:82:5a:75:6c:e1:f7:70:66:59:7a:
                    df:cb:f7:49:4f:a3:e8:6a:f6:38:90:79:ad:8f:19:
                    5c:41:03:e5:e4:4e:d6:6f:f3:b4:36:45:1a:cb:ce:
                    df:5d:2a:de:5e:f4:e5:1a:eb:b2:31:54:cc:ed:37:
                    92:32:3c:53:91:43:84:6f:80:e5:c0:11:48:87:e6:
                    81:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7C:31:F1:EE:19:02:41:2C:5B:C4:FF:9D:49:A8:16:B5:6E:34:61
            X509v3 Authority Key Identifier:
                keyid:31:08:3A:BD:7F:97:99:63:1A:9B:BD:A8:A3:4F:44:23:01:FC:6E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQg6vX-XmWMam72oo09EIwH8bm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/267ead-f26a-4b12-9abb-f1d6597aba7e/1/MQg6vX-XmWMam72oo09EIwH8bm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:0d:b8:98:0a:df:7b:22:16:05:d7:3c:05:70:a1:91:5b:bc:
         1c:bd:e6:48:b5:36:b9:78:79:7e:82:fd:b3:3b:4b:53:59:55:
         28:10:a7:9c:3c:da:48:27:e6:9f:14:bf:4a:f6:c4:4d:10:cc:
         71:e1:5f:98:24:c2:6c:35:49:e6:76:b0:b2:f9:42:5a:e1:2b:
         8c:78:73:a8:97:43:c7:b8:94:71:21:c5:88:44:1f:d1:42:32:
         10:d5:3f:2e:40:be:82:98:98:2b:95:21:c8:39:81:48:a4:fa:
         bc:fc:19:4e:4d:c9:ef:8f:a1:66:39:ea:3e:0d:52:2b:c1:43:
         ce:ea:26:81:08:60:b0:ba:4b:91:98:24:24:8e:96:02:df:eb:
         81:98:ec:f8:96:9a:65:5e:47:07:1a:ab:8e:0b:b7:29:84:79:
         f6:71:56:d6:ed:8a:cc:9a:f5:d7:10:2a:ec:28:da:ea:6d:26:
         1b:0b:a8:2b:f2:46:d3:02:b6:f4:fc:16:55:54:a0:f3:6d:2c:
         e1:40:cc:8c:85:1c:78:f0:a7:14:81:27:fa:28:50:d3:8e:46:
         5f:dd:e9:cf:7c:5c:f5:b7:37:6a:63:c7:76:d3:71:62:b4:31:
         59:f8:04:35:00:d6:81:cc:00:c7:45:53:a6:0b:b3:e3:1b:ff:
         cf:44:c6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:51:56 2024 by rpki-client on console-ams.rpki-client.org