Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
File:                     d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft (raw, json)
Hash identifier:          UCvhsllpu+EdWXrm+5QJOi47Rbp0NU1ibCJ0ccv1Myw=
Subject key identifier:   8A:2B:D3:8F:36:74:B9:FF:92:C9:36:EA:F1:F4:EE:AB:2A:08:60:12
Authority key identifier: 77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4
Certificate issuer:       /CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
Certificate serial:       018F87490DB918C8C2FA2BAB1C27915D0699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
Manifest number:          08F4
Signing time:             Fri 17 May 2024 16:01:02 +0000
Manifest this update:     Fri 17 May 2024 16:01:02 +0000
Manifest next update:     Sat 18 May 2024 16:01:02 +0000
Files and hashes:         1: I17BDfo2E1zvoWoKFJiy4xmNx-M.roa (hash: Rzzh28Bcxva2v2yHZstoSjp3pMx4pYBqiHmcrIGTbR0=)
                          2: d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl (hash: mDydm+9RMLmqtGLXi0Q50gxmVakKuO5dU3sJRvrGH4g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:0d:b9:18:c8:c2:fa:2b:ab:1c:27:91:5d:06:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dfcf0982486869b71dbdb7cc613c4b381367c4
        Validity
            Not Before: May 17 16:01:02 2024 GMT
            Not After : May 18 16:01:02 2024 GMT
        Subject: CN=8a2bd38f3674b9ff92c936eaf1f4eeab2a086012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:71:19:67:6c:a1:3b:60:00:3d:23:4e:48:
                    19:7b:0d:50:96:13:86:72:b3:28:85:a5:35:11:e6:
                    59:c7:7d:f9:4a:a2:c0:9a:1f:f8:44:4a:43:b2:83:
                    1f:89:55:17:8c:43:11:83:0b:84:23:89:12:51:f6:
                    f4:90:c8:d5:2b:8e:74:45:da:79:fa:2a:eb:64:7e:
                    9f:61:61:e5:6b:5f:ad:2d:2b:aa:86:27:65:5f:d3:
                    5d:28:dd:93:54:f9:19:2a:f1:04:4e:36:2d:f5:5a:
                    4c:0f:18:e5:0c:49:9d:3b:50:c9:a2:bb:18:8a:90:
                    30:c3:ac:97:2d:b5:8b:57:78:08:dd:10:9f:26:dd:
                    13:a9:c9:81:65:09:33:08:41:d0:9b:c7:31:8d:fb:
                    a7:13:81:ed:2d:e1:2d:1d:4f:d0:61:f4:8e:ba:60:
                    6b:59:24:5d:5a:3c:d9:4f:9a:a3:e0:90:c3:86:13:
                    30:9f:aa:0e:f0:66:bd:be:6e:31:6a:88:e9:6e:ab:
                    ff:63:d5:b3:88:2d:0a:4b:f6:28:56:84:9a:6e:6a:
                    62:30:2f:62:36:a5:b0:87:07:0c:cc:57:b6:0c:7e:
                    44:23:4f:e8:90:3b:5b:bf:ab:16:0c:7d:81:ab:82:
                    75:5c:34:12:de:70:19:bc:e7:e8:7e:bd:eb:2c:8c:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2B:D3:8F:36:74:B9:FF:92:C9:36:EA:F1:F4:EE:AB:2A:08:60:12
            X509v3 Authority Key Identifier:
                keyid:77:DF:CF:09:82:48:68:69:B7:1D:BD:B7:CC:61:3C:4B:38:13:67:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7bab97-48a3-4ae7-a151-151bf34f468b/1/d9_PCYJIaGm3Hb23zGE8SzgTZ8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:69:f2:62:39:3c:bb:c3:90:91:91:19:8f:55:eb:91:21:0b:
         7a:75:61:af:de:87:1d:fb:ae:b9:74:85:a2:41:8c:d6:6f:4b:
         b9:87:58:0f:98:1d:6b:2b:28:31:e8:65:51:ca:ec:7a:4a:5b:
         07:ae:e0:d3:31:e8:2e:03:d4:1a:21:57:f8:76:a5:15:42:07:
         d8:f2:43:7d:64:e8:75:46:1c:02:ee:72:36:22:9e:9d:0e:6e:
         08:d0:70:92:9e:38:6c:6c:fc:6b:97:12:ce:59:bf:d2:78:56:
         55:3c:7d:2d:5a:1d:d5:e9:89:5c:9b:d4:d8:5d:ce:6f:32:42:
         79:d7:bb:8c:29:90:db:37:0d:71:b9:3a:64:1d:dd:f4:b3:7b:
         72:7d:54:17:d3:59:c1:09:82:9f:a2:e6:24:59:80:76:8a:77:
         2c:4c:f3:a3:95:5e:16:26:e2:d0:5c:0f:67:12:fb:2e:91:90:
         bb:ab:65:4a:2b:16:09:8c:f6:44:86:8e:d3:cf:ce:f2:15:55:
         49:60:e5:e3:ff:c3:13:d5:80:85:ea:8e:03:74:2a:ef:f2:f0:
         5b:a2:ca:ed:ae:c9:e9:3b:60:a7:8e:4f:67:7d:37:37:8e:9a:
         11:83:b6:fa:13:aa:be:57:99:a3:0d:30:ea:95:94:ad:0e:88:
         f1:c8:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:13 2024 by rpki-client on console-fra.rpki-client.org