Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File:                     m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier:          zIlRj9ng650cIHdEnapNahAgfK4hOxD2Lv2ubSIZ158=
Subject key identifier:   CF:6B:AE:EA:66:25:BA:12:CE:A7:EB:07:0A:40:CE:D8:5F:CF:5B:E0
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer:       /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial:       018F86A3C591867AA3466DA9954CFB77B7A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number:          0AAA
Signing time:             Fri 17 May 2024 13:00:30 +0000
Manifest this update:     Fri 17 May 2024 13:00:30 +0000
Manifest next update:     Sat 18 May 2024 13:00:30 +0000
Files and hashes:         1: TK_xK6zsW0paUnPsWx43Wdy-j5g.roa (hash: XU57BkhtcA//2ehRT42vSyNpfEyiCvYDrJ53hjDTRts=)
                          2: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: 2Z8rzojC+WI5B/A9F/64dPkXLS8RE4iXWwonhZdNlrI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:c5:91:86:7a:a3:46:6d:a9:95:4c:fb:77:b7:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
        Validity
            Not Before: May 17 13:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=cf6baeea6625ba12cea7eb070a40ced85fcf5be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:63:4c:90:ca:50:8e:d5:82:77:ae:65:85:cd:
                    60:ba:70:c5:73:35:b3:9e:cd:30:69:42:6a:e4:dd:
                    5f:f9:5b:2f:7d:d0:8e:2c:4a:bc:19:6f:99:6a:16:
                    5b:1a:05:b0:39:9d:ed:7a:97:b4:12:5f:3b:e5:f7:
                    3a:31:6c:82:65:2b:20:33:f4:df:2b:cc:97:a8:bd:
                    88:af:28:33:3e:67:fa:35:0e:65:84:43:15:c9:1c:
                    03:f0:09:6f:66:50:ac:fc:73:12:ad:e4:6e:a1:67:
                    72:d5:d4:2b:22:77:b5:32:10:90:91:56:50:d2:18:
                    c9:c9:ec:f3:6f:8d:95:78:2b:de:14:7e:1d:64:02:
                    6d:de:05:ae:7b:1e:d8:6e:ac:d2:0a:7b:8d:47:1f:
                    8d:23:9a:ac:a8:55:f8:0a:bb:2e:8c:80:b4:44:7b:
                    1b:26:87:e2:73:db:65:9c:9f:7c:ee:17:43:72:85:
                    45:90:4e:b7:3a:75:68:0d:b5:21:62:0d:b5:34:e1:
                    1c:63:88:34:e0:3e:56:1d:5d:c0:cd:94:4c:6f:a4:
                    38:34:dd:0e:4c:af:b2:41:fc:d4:2a:72:05:90:cc:
                    e5:c2:62:13:b5:31:f4:f3:86:06:59:c2:c8:d0:14:
                    99:34:fa:c2:56:44:93:d5:db:10:32:4a:0e:e4:fe:
                    76:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6B:AE:EA:66:25:BA:12:CE:A7:EB:07:0A:40:CE:D8:5F:CF:5B:E0
            X509v3 Authority Key Identifier:
                keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ec:d2:10:1e:12:32:75:e3:6c:c2:c0:84:79:4f:ba:9c:53:
         f7:5d:f2:48:b0:84:c8:fb:68:ec:79:40:3c:06:78:07:1e:20:
         06:a9:e1:be:f4:de:ef:4a:4c:42:f4:af:d7:47:9d:1f:2e:dd:
         21:0c:14:4b:35:c8:5e:52:f8:b2:a2:bb:15:0b:e6:88:cf:19:
         08:70:8d:2b:01:be:18:5d:4d:32:89:9b:43:41:5c:58:cc:8e:
         8c:c9:d6:a9:56:35:28:ec:da:c0:9c:31:51:b1:b6:77:4b:8d:
         f9:54:8d:1d:9a:82:39:e4:31:09:ec:0e:8b:a5:ee:75:08:3f:
         04:fb:ff:e2:00:4f:f5:c9:d9:48:bf:08:17:27:7b:c7:ab:30:
         ac:83:c2:ee:f6:2c:fd:bb:03:b1:c2:e5:8a:95:75:2b:ea:4b:
         04:c7:a4:17:ad:5a:c2:72:90:9f:f4:d8:27:88:ed:68:e8:64:
         8f:f4:2f:68:96:33:6f:db:1b:3f:35:f6:28:c5:94:b5:36:9b:
         19:c1:6e:d5:6c:25:20:2b:08:98:52:fc:51:e6:85:7c:71:18:
         e8:17:ee:75:e8:7d:7c:e7:11:a3:c3:3e:36:1d:9c:fd:85:65:
         c5:6c:fd:4e:37:7d:66:31:0b:83:65:b2:39:1a:df:52:bd:3f:
         2a:99:17:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:23:32 2024 by rpki-client on console-fra.rpki-client.org