Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File:                     h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier:          q33C7yGZho/hBsmqqWQK+LzwQ6yfE0YvJrCJGZKbJ9Q=
Subject key identifier:   DB:BE:C1:24:7A:41:13:41:1D:A7:DD:0D:61:AB:E7:4A:8F:88:51:D8
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer:       /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial:       018F86A36E3D77B8AB6FBD73E65B086C30AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number:          0EDF
Signing time:             Fri 17 May 2024 13:00:08 +0000
Manifest this update:     Fri 17 May 2024 13:00:08 +0000
Manifest next update:     Sat 18 May 2024 13:00:08 +0000
Files and hashes:         1: a842pDwNQHbYUA8igJVhhRtE6dY.roa (hash: bbGHXCcpRi+Ggt4Cej8eQNSiA073M3bbtQVupYk0Abw=)
                          2: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: etOu2wleTIOSjEeWqQItv+V1TO/t5FaWFvTa2BaNfRQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:6e:3d:77:b8:ab:6f:bd:73:e6:5b:08:6c:30:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
        Validity
            Not Before: May 17 13:00:08 2024 GMT
            Not After : May 18 13:00:08 2024 GMT
        Subject: CN=dbbec1247a4113411da7dd0d61abe74a8f8851d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:09:e9:52:6c:f2:2d:b9:82:35:a5:ff:44:6a:
                    fd:1d:d3:b5:a6:28:98:d7:ff:25:d5:49:c5:29:0b:
                    82:7c:cd:02:96:97:18:0b:99:57:82:09:03:98:ad:
                    fe:0f:4a:3c:59:a8:f2:79:0c:4a:26:91:22:88:58:
                    6f:db:c8:b9:93:a0:89:c6:ff:10:b9:b7:20:40:53:
                    2e:e2:77:4c:a8:cf:7d:3b:1a:71:97:87:0c:a6:ef:
                    74:7a:60:37:14:47:a1:1f:37:33:1f:6c:bf:47:b1:
                    3e:42:68:62:e8:97:0e:c7:2d:ec:c5:07:ac:48:7d:
                    91:66:50:be:61:62:3c:86:13:74:98:6e:77:ae:6b:
                    c8:73:fe:f5:ad:17:54:7b:74:a6:3d:dc:6d:22:48:
                    b3:65:c3:ee:e3:64:01:ca:67:a7:0d:0f:8d:97:be:
                    04:40:5e:85:66:a3:f5:01:81:13:9d:d7:67:db:0d:
                    a7:25:d9:1d:9c:6e:b9:65:d5:63:fd:9c:9a:23:50:
                    ed:0d:01:0d:d2:66:fe:cc:57:ca:c0:af:94:e7:fa:
                    31:e1:35:a3:c3:22:b3:13:b7:dc:36:d8:58:a3:54:
                    63:ce:9d:2a:fa:56:f5:9c:e3:46:49:32:ae:5c:9b:
                    33:5e:9f:08:73:7f:fe:60:3c:5d:e1:f5:dc:99:e2:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BE:C1:24:7A:41:13:41:1D:A7:DD:0D:61:AB:E7:4A:8F:88:51:D8
            X509v3 Authority Key Identifier:
                keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fa:6b:de:1a:9c:3b:2e:1b:52:6d:0e:2c:2e:d8:94:98:ab:
         33:4b:67:f6:ae:ef:98:df:9b:e3:5a:0d:ae:64:c4:5f:9a:35:
         5e:7a:ac:bb:fe:e3:ba:41:90:e0:02:fc:41:03:8f:d6:a8:25:
         d8:68:52:fa:46:ee:8f:23:47:ac:da:f9:e5:0b:79:a5:35:44:
         3b:37:e2:8e:f3:f5:83:ef:c4:53:9e:87:87:51:69:bb:09:b7:
         78:63:ad:e8:5b:6e:5b:06:61:d3:77:6e:63:e3:f4:6e:36:6c:
         5d:9e:25:c0:5a:02:fe:7e:b7:83:9e:08:32:96:71:d8:e8:f9:
         7f:90:e4:7c:9e:03:c5:3b:91:45:4f:45:40:86:2f:b5:73:74:
         9f:69:bc:27:dd:c8:f5:57:7f:8b:5e:3e:6a:32:35:71:1e:ad:
         c1:e4:26:70:09:94:65:de:2e:f6:d1:62:dc:ef:41:c9:00:cd:
         fc:5f:95:ba:ff:6b:e4:eb:30:f4:b7:9d:8b:2a:4a:fa:b6:a5:
         68:9a:9a:c8:87:a4:10:f4:37:a9:40:c9:1b:33:03:4a:b9:d5:
         e6:d1:83:04:4a:1b:f2:c7:cc:43:6f:5b:55:ab:c1:76:49:1d:
         90:cb:6b:b2:ec:5c:c5:72:38:d9:e2:3f:c3:f5:04:ac:42:f5:
         0e:e1:70:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:54:01 2024 by rpki-client on console-ams.rpki-client.org