Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
File:                     Mm9RyiOYIQP_40-YkNC3To-nga8.mft (raw, json)
Hash identifier:          fxxS1dTMQN7Dp7wC9CGwT8GDRfoShpAJjJCG44Q9BBw=
Subject key identifier:   EA:6C:36:88:2B:22:A8:DD:49:25:3D:40:82:11:8F:D3:07:F9:2F:7F
Authority key identifier: 32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF
Certificate issuer:       /CN=326f51ca23982103ffe34f9890d0b74e8fa781af
Certificate serial:       018F87B69A82C4472DA561D2CA45CF0DF68B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
Manifest number:          01DC
Signing time:             Fri 17 May 2024 18:00:42 +0000
Manifest this update:     Fri 17 May 2024 18:00:42 +0000
Manifest next update:     Sat 18 May 2024 18:00:42 +0000
Files and hashes:         1: Mm9RyiOYIQP_40-YkNC3To-nga8.crl (hash: 6AeQyBRTSqTYEmy7j9XF3fe7jBv1QPfu0+rtkDnbxW8=)
                          2: NhmmbS5mMOyhowg08CHuI0d0u-o.roa (hash: l1BWwK8gX0iLCvKZdunwD5dX1YeycpzS0i126ZqMf+Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:9a:82:c4:47:2d:a5:61:d2:ca:45:cf:0d:f6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=326f51ca23982103ffe34f9890d0b74e8fa781af
        Validity
            Not Before: May 17 18:00:42 2024 GMT
            Not After : May 18 18:00:42 2024 GMT
        Subject: CN=ea6c36882b22a8dd49253d4082118fd307f92f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b8:bc:4c:84:ae:f9:f0:8c:31:36:86:80:72:
                    2b:23:cd:f9:67:45:22:ef:d2:9e:9d:75:52:fa:35:
                    43:d7:9a:a1:ff:b0:2a:78:b1:f8:ce:c9:f6:28:b2:
                    dc:c7:63:90:25:34:af:d1:8e:52:2c:94:a8:af:cc:
                    f9:28:14:e9:44:b1:9d:48:fd:b5:0f:8e:53:2c:fb:
                    df:b0:d0:1c:73:01:5d:87:a4:8a:1b:0f:66:07:f9:
                    10:7e:a1:05:a4:b5:96:b9:66:d5:d4:95:bd:d4:a0:
                    25:b4:ff:c3:68:85:ca:0d:b7:41:ad:6c:e3:f3:cc:
                    1d:fa:c8:a9:ea:fb:d9:89:7e:7f:5d:cf:33:80:6d:
                    e3:5b:08:04:58:26:3c:ca:17:87:49:4d:21:a8:ce:
                    b5:aa:ac:83:f6:71:a6:4c:08:53:52:58:d0:83:71:
                    56:3b:46:dc:b2:5d:fa:63:05:f0:88:73:02:ae:6c:
                    10:25:65:4c:74:49:33:7a:20:a3:97:20:24:d2:13:
                    14:1d:cf:fd:96:2e:2d:71:12:57:0f:69:c8:4c:6f:
                    1f:ce:cc:f7:71:f2:00:e4:82:fa:c8:32:d0:80:35:
                    22:34:ac:37:20:fe:c4:cc:ea:2f:15:d9:12:7b:53:
                    36:33:e9:09:57:d2:cb:4e:5b:0a:e7:56:31:d0:c3:
                    eb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6C:36:88:2B:22:A8:DD:49:25:3D:40:82:11:8F:D3:07:F9:2F:7F
            X509v3 Authority Key Identifier:
                keyid:32:6F:51:CA:23:98:21:03:FF:E3:4F:98:90:D0:B7:4E:8F:A7:81:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mm9RyiOYIQP_40-YkNC3To-nga8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/40a9b5-e899-4a8a-ac4f-966fa96beff2/1/Mm9RyiOYIQP_40-YkNC3To-nga8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:7f:c8:dc:25:52:d0:c8:85:24:15:2c:a6:8e:85:81:96:
         ec:52:53:0f:b4:28:81:26:62:c5:25:25:16:8d:a4:5a:21:25:
         2d:c2:5a:df:45:ae:14:e7:74:09:44:5a:5d:59:a9:a1:7d:90:
         cf:09:dc:87:0a:e1:d7:28:bb:f8:2c:40:e3:3e:0d:4c:8f:e9:
         57:fd:9e:91:02:84:ed:04:4f:af:43:82:d7:ce:7f:5f:32:ed:
         a4:24:b8:22:9c:35:97:a0:68:18:7f:6b:9e:26:07:ad:15:96:
         92:b1:76:74:77:37:a4:1d:a6:51:3c:6f:2b:ea:03:ac:ae:05:
         ae:59:25:31:fd:f3:21:ca:ad:60:6f:29:b2:8c:e6:f0:48:aa:
         28:d6:77:2d:71:5b:42:74:7e:7a:a6:ae:b0:1f:db:2d:99:a7:
         ea:65:76:83:fe:94:e3:96:34:16:46:80:d7:13:9e:0c:75:4d:
         00:eb:1f:a1:ba:ad:a7:75:50:3d:89:98:96:69:20:8b:31:b0:
         42:70:8e:bb:93:6a:de:58:fa:33:33:a7:48:01:63:b0:c9:12:
         91:06:59:ed:d1:e3:f6:9d:22:89:f1:c0:d4:a7:28:9b:0a:74:
         a0:20:6a:0a:49:68:ce:ce:7b:99:90:50:12:83:12:d2:1b:f5:
         4d:76:04:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:10:26 2024 by rpki-client on console-ams.rpki-client.org