Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File:                     9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier:          34xfeudcO+WxKr2131ILC5/vvc64Uy6EjUhXUpNH8kM=
Subject key identifier:   F7:AC:4A:24:80:E0:F8:CC:CB:47:23:08:2E:3A:88:D0:CC:EB:92:C0
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer:       /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial:       018F8D13AA867AC3E0D254C4ADEC0CC6CAEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number:          02F5
Signing time:             Sat 18 May 2024 19:00:27 +0000
Manifest this update:     Sat 18 May 2024 19:00:27 +0000
Manifest next update:     Sun 19 May 2024 19:00:27 +0000
Files and hashes:         1: 0zUn0YzyUAbtOjsTquUywt3c7dI.roa (hash: KJW4Jt6ElMiIOsmOSGg4eVmwzBXp43enI5scptKz0dY=)
                          2: 1nPQwKLsA6baNw3i9BaHyWcFMiY.roa (hash: bWHRaNEz2yjJBtTl8lQNotYxKhBtU0hoGbU0T9RojWY=)
                          3: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: NgDg/hl7J3AfvG9GuhmUt9duUQu7S+D7RhXGKD65TcM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:8d:13:aa:86:7a:c3:e0:d2:54:c4:ad:ec:0c:c6:ca:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
        Validity
            Not Before: May 18 19:00:27 2024 GMT
            Not After : May 19 19:00:27 2024 GMT
        Subject: CN=f7ac4a2480e0f8cccb4723082e3a88d0cceb92c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4a:6f:78:cf:4b:a3:09:f8:e1:c4:50:21:0f:
                    69:36:3e:1d:2e:17:4f:b6:5a:88:58:d9:cc:d8:b8:
                    b5:88:4a:eb:f9:65:10:9a:d6:79:67:b6:1d:6f:6d:
                    b5:93:a4:ea:82:6e:4d:c7:c2:14:5d:dc:2c:8c:21:
                    f4:14:df:54:f2:41:89:26:4b:f1:0d:00:e0:db:e8:
                    4b:58:7b:b0:3f:5d:de:77:11:01:df:e3:a3:cf:a2:
                    06:03:a1:f9:c2:2a:4b:0d:97:2a:48:df:43:2d:1e:
                    7a:36:20:47:38:4e:1f:e9:cc:7c:66:2f:2e:9c:b8:
                    0d:10:ff:09:b1:82:01:22:c1:46:93:28:60:b2:1a:
                    71:c2:5a:02:bd:0e:e6:5e:c1:00:67:5e:85:ad:b7:
                    56:f9:b0:a7:00:23:18:70:98:7b:b4:1c:1a:f4:31:
                    08:5c:8e:91:0d:49:2a:20:e0:12:c8:da:1f:4a:ed:
                    04:b6:ba:72:62:d7:a5:c0:a2:61:57:35:5e:99:a8:
                    28:78:57:21:ac:1d:01:21:44:cb:a9:1d:b5:c8:20:
                    22:fd:ef:06:6d:2d:84:32:cb:41:ad:13:a5:f0:a7:
                    1c:f3:cc:c5:c3:32:66:db:f5:20:ec:20:57:7b:c6:
                    11:16:c7:9f:6f:99:a8:2f:5a:67:9d:21:78:30:fb:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AC:4A:24:80:E0:F8:CC:CB:47:23:08:2E:3A:88:D0:CC:EB:92:C0
            X509v3 Authority Key Identifier:
                keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:dc:cd:1e:b6:b2:3b:97:cb:3d:f9:14:f5:65:a0:35:37:59:
         37:53:3a:fd:98:67:20:60:80:30:00:49:e0:56:e1:aa:d3:9e:
         24:63:f7:1c:3c:aa:d4:39:90:af:bf:4f:d7:8f:3a:52:8d:2d:
         9b:3a:33:5b:34:c7:c8:f9:9a:d4:a8:e2:f1:33:15:e3:1f:ca:
         88:df:8d:50:3b:9d:08:79:a8:1d:e5:79:aa:e8:19:70:18:aa:
         f6:59:f3:bf:41:93:72:72:c7:a3:62:ab:98:68:41:f8:41:d3:
         bc:04:69:2e:4f:db:09:eb:99:c5:e1:76:34:be:b7:cf:23:0f:
         ac:48:af:17:4a:57:ca:be:48:f7:b7:98:9a:c2:6c:d5:c0:7d:
         e1:d8:43:00:00:5e:c6:c2:b8:9d:3c:e0:a6:db:4c:e9:bc:45:
         7d:ee:8f:b7:eb:56:f9:45:30:0e:35:64:66:fd:8f:5d:9a:37:
         2f:1e:f0:c2:14:8e:d6:07:a3:7d:75:89:cc:54:ab:5d:ae:8d:
         fe:b2:f4:7a:51:98:5b:c1:68:68:e3:68:2f:0f:fa:e1:52:1d:
         fa:c2:db:81:7a:f4:2c:f4:41:89:d8:86:8b:6e:f1:d6:8c:da:
         36:33:4c:e6:b9:db:eb:cf:62:f0:24:f6:58:23:65:42:a2:5e:
         36:d4:3c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:35:06 2024 by rpki-client on console-ams.rpki-client.org