Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File:                     mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier:          SZM7wzyzltU1vqJupjn+V3pYa0pMc1NfZEeS71lAo9E=
Subject key identifier:   1B:69:EB:EA:F2:1F:43:5E:44:F5:34:EF:4D:CE:71:9F:BA:7E:DE:02
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer:       /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial:       018F866CE111220158B7F607615633B7BD8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number:          9B
Signing time:             Fri 17 May 2024 12:00:33 +0000
Manifest this update:     Fri 17 May 2024 12:00:33 +0000
Manifest next update:     Sat 18 May 2024 12:00:33 +0000
Files and hashes:         1: XeniVCb1jyaCDYp5QsoVDwBQBOw.roa (hash: pCTT+sHw4XUHhcgJRO5sn4V/jDzElMGOeOwwOIBBxEc=)
                          2: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: /0INfOexBXRFGwVmxv0cnUbiRDS0X60LQbHJQ9o13UI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:e1:11:22:01:58:b7:f6:07:61:56:33:b7:bd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
        Validity
            Not Before: May 17 12:00:33 2024 GMT
            Not After : May 18 12:00:33 2024 GMT
        Subject: CN=1b69ebeaf21f435e44f534ef4dce719fba7ede02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:8d:13:66:52:3c:96:c3:b4:49:fa:8c:15:
                    62:0b:98:72:e7:9e:d3:1c:85:6f:be:14:9e:3f:38:
                    b9:19:db:ce:53:81:81:94:14:39:a9:16:0f:3f:95:
                    73:61:29:35:8a:cd:ad:80:f3:70:36:e0:b3:69:46:
                    40:9c:04:1d:8b:e5:51:c7:ca:2b:bc:0d:6e:b1:80:
                    e7:bf:22:e8:a1:1a:de:b6:66:71:e7:af:f5:cb:07:
                    aa:56:73:7b:1f:bc:d4:4e:d1:0a:98:c8:1b:61:e6:
                    d9:99:1b:a8:e7:2f:29:0d:23:fa:a2:13:38:41:aa:
                    64:b9:a4:6b:7c:d9:f2:bb:de:1c:1b:8a:dc:ad:2a:
                    d9:45:58:d2:18:67:cb:0c:de:f3:37:64:48:80:e5:
                    10:37:11:67:2b:44:e7:24:af:8e:68:b5:45:c0:c4:
                    c8:9b:e0:25:2c:d5:5c:78:35:b9:14:d4:a4:e4:db:
                    36:84:be:e3:d2:0a:36:9c:2f:57:cb:a7:1d:30:28:
                    f4:dd:25:4c:b9:e7:de:ae:7b:be:54:74:39:1d:6b:
                    ff:04:db:07:d9:85:e1:07:94:72:08:84:3d:6e:02:
                    32:42:6a:ed:8e:89:2c:3d:76:f6:7b:05:61:c3:c2:
                    4e:b6:35:0a:fb:f8:fe:3d:6d:e9:3f:d2:66:93:6a:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:69:EB:EA:F2:1F:43:5E:44:F5:34:EF:4D:CE:71:9F:BA:7E:DE:02
            X509v3 Authority Key Identifier:
                keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:94:a3:d0:01:3c:0f:d5:c0:da:34:b5:4a:f6:ad:c5:5e:82:
         0f:80:24:9e:8e:12:b5:d2:90:38:a0:47:39:b0:7c:a5:19:bf:
         7e:d9:c1:4a:63:3e:3e:29:c1:82:b8:2e:c3:36:74:6d:7c:99:
         17:17:59:b6:21:2f:da:14:28:50:5f:45:7b:af:5f:8f:c5:81:
         a9:52:f8:7d:87:8f:a0:7b:85:b2:3d:ab:66:9b:92:43:41:19:
         c2:e8:2a:47:5c:6b:f4:a1:0e:e2:d2:ed:e1:c5:2a:60:91:2c:
         fd:75:5f:8e:c0:0c:b4:bd:bc:89:fc:b8:66:24:04:22:ae:ab:
         3f:3f:73:ff:30:31:18:76:11:ae:96:86:e0:43:10:4a:d2:f7:
         90:40:0b:66:eb:06:ca:91:aa:0b:1c:51:9a:20:ff:f0:cb:37:
         df:9c:b2:75:f7:31:b7:3e:ae:80:21:a2:af:75:d4:a8:54:09:
         51:d7:9e:55:85:c6:29:ea:46:ee:df:6b:76:20:64:39:ce:ff:
         e9:c5:12:57:f3:b6:62:15:9a:63:a2:f0:a4:18:2d:a9:92:fe:
         37:e8:33:af:0f:24:52:cd:83:ed:f2:53:3c:5a:b5:35:b4:75:
         18:fa:50:d1:61:32:d8:f5:35:19:97:6b:41:91:36:f6:01:32:
         e2:f1:87:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:26:12 2024 by rpki-client on console-fra.rpki-client.org