Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
File:                     j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft (raw, json)
Hash identifier:          7bjHiM/aatNbe31CRBosBqjouer5F+pE9M5E8bsS5RU=
Subject key identifier:   07:09:A5:61:FB:A4:AC:62:F3:03:7A:A1:51:AA:05:9A:9F:6F:9A:C7
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Certificate issuer:       /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial:       018F84B5D9BAD88B53916F0C349C4D1EDEC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
Manifest number:          09AB
Signing time:             Fri 17 May 2024 04:01:01 +0000
Manifest this update:     Fri 17 May 2024 04:01:01 +0000
Manifest next update:     Sat 18 May 2024 04:01:01 +0000
Files and hashes:         1: SG6rPZUeVIkWWGvkwttUPi3K0CY.roa (hash: NE4/X2+g5cOnV/Y70jSWYwXxDOf5d8sWeQhkyynz/P0=)
                          2: VxDdqyWmg8ZjyyfEooKtMokZvX0.roa (hash: c03kVKUVmYBKT8meQv+B66pbQICh8a+8XMwtfIFbu+s=)
                          3: YZPx_G3bCY0zsiDzh4ous6jycbE.roa (hash: 55qOHypvqZYOGwoP6jWuhAvV2BGJFrBq4aUt72AEAnk=)
                          4: epLdfcsDb4ZbYTko8cUTZirk6nk.roa (hash: AEB5pTRre6+VicvykazoWKezXah/TnPSURi5gxKRduA=)
                          5: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl (hash: 5tjGUfNLOlgDwQNeE4fSIbwHaoengOrs06x0Kz6skOY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:b5:d9:ba:d8:8b:53:91:6f:0c:34:9c:4d:1e:de:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
        Validity
            Not Before: May 17 04:01:01 2024 GMT
            Not After : May 18 04:01:01 2024 GMT
        Subject: CN=0709a561fba4ac62f3037aa151aa059a9f6f9ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fc:7f:2c:46:6c:78:dd:df:0c:24:0e:1a:32:
                    f0:6e:27:fc:03:7c:5e:3d:bc:28:a7:fe:1f:12:9e:
                    e6:33:81:1f:6f:9f:55:68:77:00:39:d9:2a:08:d7:
                    2c:f6:b8:65:8f:1e:71:66:3b:1e:36:4f:33:a9:06:
                    86:85:90:08:84:d5:f9:49:b4:55:ed:7d:7a:41:06:
                    30:5f:0d:08:71:e0:fb:49:cb:3a:5f:95:0b:d7:16:
                    a8:19:a0:fb:a2:cd:28:f6:de:35:65:e1:23:fd:69:
                    1d:e9:ed:1d:2c:3a:ae:ba:b6:c8:24:e6:3e:a2:1d:
                    db:a3:ef:a6:e9:96:de:dd:2b:90:d7:7e:f6:6c:c9:
                    d8:24:d6:67:a6:11:df:05:eb:c8:29:31:62:93:df:
                    24:50:ee:fe:63:56:46:f3:82:5a:e6:09:c6:a0:80:
                    97:d4:5e:42:d0:89:f4:ac:00:07:e4:ad:aa:ac:84:
                    ce:29:81:99:6e:62:47:f4:26:86:2d:4e:bd:7b:25:
                    a2:0e:a4:80:22:4e:1b:d6:b3:9e:2b:34:07:cc:48:
                    31:35:25:0f:61:39:33:db:d1:7e:d4:cd:3c:f8:2b:
                    20:3b:5f:f6:17:b6:d2:2a:55:ee:f9:12:47:8b:0b:
                    a3:2a:9e:ef:b2:6a:79:c6:81:96:6c:64:db:a5:ac:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:09:A5:61:FB:A4:AC:62:F3:03:7A:A1:51:AA:05:9A:9F:6F:9A:C7
            X509v3 Authority Key Identifier:
                keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:27:d4:86:2d:6b:06:64:b2:5b:4a:37:f9:d8:e1:29:34:97:
         50:24:18:24:1f:9e:31:ac:35:cf:57:c4:d7:b9:3b:6d:a7:8a:
         c0:99:f7:3c:04:32:d6:fb:95:1f:d0:9b:44:84:9e:4b:45:8f:
         52:9f:d8:c3:89:9b:a3:ed:c2:47:84:69:70:ac:d7:df:4d:42:
         d9:db:ae:7b:5d:ef:bf:40:e2:c8:6c:bc:c0:93:d3:89:43:6b:
         88:ef:03:29:15:dc:c7:a8:e6:55:3b:5f:ff:3b:49:11:0b:7e:
         9e:40:63:54:b0:e7:dd:85:4a:a4:91:72:d8:d5:fc:ac:58:c0:
         27:b7:5f:b8:7d:1a:27:df:06:f0:a4:46:cb:d8:6c:d8:7d:2d:
         c9:2e:5d:ee:6a:aa:88:be:f5:d6:93:74:b6:f1:e6:a0:73:8a:
         d2:a7:e7:9b:fd:f4:96:bd:0c:f8:bd:71:43:df:9c:f1:6f:87:
         b8:90:ca:5e:22:44:58:f3:2e:32:7f:05:b2:5a:9f:3a:29:53:
         d9:5e:cd:53:53:c9:ca:c5:05:ad:ae:c3:a0:f9:b8:92:1b:db:
         9b:5c:51:c7:a1:5a:80:2f:6b:41:37:0d:1c:8f:bf:75:69:fd:
         6d:56:0b:9a:10:5a:f8:a1:b7:61:e5:3d:ee:ce:56:32:82:f6:
         67:4d:5d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:47:29 2024 by rpki-client on console-ams.rpki-client.org