Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File:                     S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier:          lQXwwE8rkJgmPPAxXbWnYOf0y9CEsxyu41O1tGFjEek=
Subject key identifier:   6A:18:FD:04:BC:7B:BB:CC:94:65:B5:EA:05:94:03:42:54:70:B0:21
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer:       /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial:       018F86A37DE45CF39C0A64534EB8B296FA4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number:          02B8
Signing time:             Fri 17 May 2024 13:00:12 +0000
Manifest this update:     Fri 17 May 2024 13:00:12 +0000
Manifest next update:     Sat 18 May 2024 13:00:12 +0000
Files and hashes:         1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: Z3763tnHcU0aLUZYbX75Zz+vqAIIJYDmlPxFuLX+KE4=)
                          2: WZeukVirhnQk-1y4K7ye09bgafQ.roa (hash: LM0/l4oNKmhIu3tMYSLtAUGP8/5HsdyNAUuoRXsMUfY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:7d:e4:5c:f3:9c:0a:64:53:4e:b8:b2:96:fa:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
        Validity
            Not Before: May 17 13:00:12 2024 GMT
            Not After : May 18 13:00:12 2024 GMT
        Subject: CN=6a18fd04bc7bbbcc9465b5ea059403425470b021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b9:92:91:25:2b:fa:d7:b6:f1:ee:13:4f:f1:
                    ba:87:1b:9c:65:c7:81:04:6e:ab:9c:67:34:87:68:
                    f1:b4:15:18:a9:f2:45:a1:44:2d:fe:66:38:b0:fb:
                    00:38:0f:db:07:d8:1d:9a:0e:0b:db:27:f7:ba:b3:
                    2e:7c:9f:e4:2e:ca:4a:f2:e6:dc:3a:1e:dd:dd:d3:
                    69:46:96:8a:37:18:ad:76:cd:eb:b3:f6:aa:ea:54:
                    ae:38:3b:b3:71:17:60:ad:39:65:e8:90:18:1a:cb:
                    a9:56:e9:03:b5:8b:cb:f5:6f:fe:f6:4e:81:31:b8:
                    4e:8c:45:ca:ed:19:11:bc:7f:fe:04:47:38:83:ab:
                    d0:8f:05:e4:9d:b2:92:1e:00:7d:fe:af:19:0f:37:
                    8b:4a:ec:21:fb:83:b8:ae:2d:c1:4d:90:8b:dc:8b:
                    78:57:6a:27:ad:1c:31:a8:22:09:a6:a4:18:b5:99:
                    9e:b6:16:9b:8d:ca:00:88:f1:12:9f:b8:94:8e:23:
                    31:c7:f1:e7:03:40:24:7a:b6:e8:19:0b:33:4f:78:
                    90:7c:b8:2a:f7:67:03:92:e7:4d:4c:93:bc:00:d3:
                    ca:64:81:ed:b0:9d:d1:27:69:dd:77:6e:a7:e4:45:
                    5e:f5:5f:3d:cb:da:45:90:93:f4:61:01:3f:5f:cc:
                    68:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:FD:04:BC:7B:BB:CC:94:65:B5:EA:05:94:03:42:54:70:B0:21
            X509v3 Authority Key Identifier:
                keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:21:10:e2:71:6a:60:fd:1e:22:b2:07:f9:21:fd:99:ac:1c:
         49:78:9d:39:55:75:59:4a:cb:8d:7b:56:17:f9:24:cd:8e:a1:
         12:98:55:b6:de:8c:59:eb:7a:51:2d:f4:4d:84:c7:60:11:89:
         7e:89:39:3b:64:b1:94:52:31:a3:80:54:37:80:72:81:ae:03:
         ff:14:54:aa:1f:ec:02:9b:cd:d9:b5:06:1b:79:c9:50:cd:e2:
         85:44:4d:dc:ea:c6:bc:3d:fe:79:d4:53:8c:75:bf:77:92:d5:
         d1:6e:15:ad:45:64:7c:dc:90:92:a1:9f:27:02:1c:64:35:90:
         59:62:c0:84:d6:52:c3:f4:1c:0d:16:a6:45:78:25:fe:56:7e:
         45:ad:19:a8:be:af:ff:6e:79:0b:58:db:bb:4a:c2:c6:52:3b:
         3d:33:0c:7e:eb:fd:94:d6:c3:68:bb:ab:58:f5:8e:da:51:e1:
         1f:30:36:83:c3:43:2e:34:2c:48:52:c9:e7:9b:69:c4:8c:a0:
         a2:7b:71:8f:d5:d7:05:c5:33:be:44:db:0e:01:d2:e2:e1:3b:
         dd:8c:74:e5:48:a9:9d:44:04:cc:ce:f2:5d:38:dc:26:19:07:
         7e:65:c7:c5:2b:21:fe:e6:ca:b0:c0:06:60:19:c7:33:cf:14:
         55:d6:c2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:53:12 2024 by rpki-client on console-ams.rpki-client.org