Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File:                     9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier:          ICwNjhlYui0Yg5D/dpMrrajBwwNWuXfXphb1AbYnWMM=
Subject key identifier:   BB:87:12:63:2E:05:74:B6:0F:0D:CA:6C:3F:38:32:2C:13:3F:52:F8
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer:       /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial:       018F478F01B94E3B4860D7914E86973B3503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number:          1156
Signing time:             Sun 05 May 2024 07:01:45 +0000
Manifest this update:     Sun 05 May 2024 07:01:45 +0000
Manifest next update:     Mon 06 May 2024 07:01:45 +0000
Files and hashes:         1: 75oj5bBZvDA-miye1NlkVBccMpI.roa (hash: 5LBiXMbyk3Ad7DNNI9KELPNIdmFLKFJZwa0i5yAnetM=)
                          2: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: ytCN5QUitFhODYQgP0twZotRXYV6KsiXtGuHf4QwL8Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 07:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:47:8f:01:b9:4e:3b:48:60:d7:91:4e:86:97:3b:35:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
        Validity
            Not Before: May  5 07:01:45 2024 GMT
            Not After : May  6 07:01:45 2024 GMT
        Subject: CN=bb8712632e0574b60f0dca6c3f38322c133f52f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:26:6b:02:e7:d8:73:73:30:43:fd:fa:33:
                    66:c5:88:52:a2:52:eb:0e:8c:7b:93:5b:26:f8:07:
                    37:47:4a:cc:03:6e:a8:9f:4d:e9:f3:a5:e1:e3:78:
                    c8:46:1d:aa:96:77:5d:53:49:c0:85:f8:a9:03:de:
                    e9:f7:51:19:cf:a5:b3:5b:38:c3:a8:32:ad:d1:df:
                    d5:01:3a:32:b6:80:23:46:8a:e2:98:9e:b2:b3:c3:
                    7d:85:bb:02:47:45:11:de:ba:70:e8:c6:89:80:8c:
                    e4:e9:33:fb:46:ce:c3:49:b8:e8:0c:dd:7c:3b:1e:
                    6b:21:0b:94:df:ea:28:71:50:4d:56:bf:60:01:aa:
                    65:89:5d:a2:7f:f4:4b:5c:67:bf:2d:02:04:d1:63:
                    80:31:84:2d:f1:ce:28:dd:36:4e:32:f0:00:6e:18:
                    15:a7:ae:ec:d0:34:4e:dc:87:2a:c1:10:13:cd:a5:
                    f9:85:a4:2f:12:1f:ee:b3:f4:0a:75:21:e6:a8:17:
                    d0:bf:4b:68:3e:69:31:dd:59:d5:2b:18:ec:5f:da:
                    ee:fe:41:96:bb:59:6b:57:06:2c:99:67:aa:97:95:
                    9a:4d:3e:de:e9:65:3b:ec:db:8a:80:0e:ba:6d:2c:
                    89:ca:01:50:62:9e:ee:e6:44:9b:15:c3:88:7d:ba:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:87:12:63:2E:05:74:B6:0F:0D:CA:6C:3F:38:32:2C:13:3F:52:F8
            X509v3 Authority Key Identifier:
                keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1b:8e:bc:0d:2e:92:c8:71:12:aa:9f:f6:8f:c2:06:46:87:
         07:ea:c7:8f:d2:66:4e:bd:6b:39:bc:4c:65:03:ae:b6:6c:37:
         b4:a1:da:db:e8:bf:d4:7d:f8:93:36:3e:86:6f:d6:9d:9f:fc:
         2f:c2:cc:77:9d:f6:d6:b8:37:8d:c9:57:9d:81:c6:c5:bb:91:
         c0:21:84:e3:64:d8:5f:2f:fe:17:88:a4:51:2c:d8:b5:e4:c1:
         af:0d:30:cf:68:95:30:1d:ed:c1:e5:8f:86:f7:4a:8b:6c:73:
         ba:65:54:f9:e3:ba:b1:68:15:44:c6:94:84:86:81:d7:19:a3:
         cf:7e:56:d5:12:ce:a7:40:1b:a0:16:82:ab:74:7a:c8:d9:43:
         6e:11:f4:dd:a7:dc:dd:89:a0:0f:ad:62:cc:b5:d5:a8:c5:ad:
         28:7a:d3:6a:99:14:8e:dd:95:d9:f6:19:b8:ea:45:e6:81:8c:
         99:bc:30:08:46:d0:31:1c:6a:72:2b:58:36:d2:ba:67:43:cc:
         87:b3:27:ac:52:78:40:e7:dc:f1:90:ca:12:62:0e:de:7c:bd:
         37:5c:85:42:b9:ac:60:2e:06:e4:35:82:c3:13:0f:de:af:97:
         97:78:52:07:b7:a2:45:fc:a4:2e:57:b5:80:bc:36:75:38:0f:
         30:26:05:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 09:49:22 2024 by rpki-client on console-ams.rpki-client.org