Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File:                     p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier:          8cCIaml873p3aCFzbQRILN3dv48HBt21SHMWV/bj+cQ=
Subject key identifier:   C4:65:31:00:E5:99:47:22:93:09:8E:B4:1E:AE:B2:30:59:73:52:B2
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer:       /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial:       018FB26AC8ED010AB9A15FBADF5139F52669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number:          09F6
Signing time:             Sun 26 May 2024 01:01:33 +0000
Manifest this update:     Sun 26 May 2024 01:01:33 +0000
Manifest next update:     Mon 27 May 2024 01:01:33 +0000
Files and hashes:         1: 5SbSfaPqglT_LS49Iu7Sb2bs45I.roa (hash: Cd5aIQnIyMVVvvsSlx9BelifKiolyUz+8pbVp9BLqB4=)
                          2: JCMK9XV7VjU5C3eX8S24iygirws.roa (hash: LYcbzCOcY7NhlvZXFEhIPzqczvNmRh0cHGkj6p90bm0=)
                          3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: tn6ORr/nEQKG29e2RptZMnisXZoLuSffXCZAzNeP11g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 May 2024 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b2:6a:c8:ed:01:0a:b9:a1:5f:ba:df:51:39:f5:26:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
        Validity
            Not Before: May 26 01:01:33 2024 GMT
            Not After : May 27 01:01:33 2024 GMT
        Subject: CN=c4653100e599472293098eb41eaeb230597352b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:a3:19:d1:28:56:13:14:60:42:02:d9:dd:
                    20:8e:64:3a:72:5f:90:80:77:78:a4:eb:01:5e:f5:
                    c3:44:62:a1:ec:33:28:58:03:0e:3a:0f:d7:bc:b4:
                    e4:49:3e:a2:fd:7c:fa:ab:3e:09:ec:68:78:3e:3b:
                    10:b2:13:81:ad:bc:cf:77:c3:6d:a4:a1:c5:7d:f2:
                    48:a2:4a:fb:75:02:0c:eb:55:3d:c1:c4:11:1b:f6:
                    7c:c4:77:4b:0f:aa:45:80:7f:e1:a4:85:bb:43:42:
                    90:ee:bc:cf:22:1f:ff:6f:9e:c1:95:49:c1:61:b5:
                    ce:55:9e:9e:e8:28:95:8d:b5:27:1d:53:35:ff:1f:
                    64:1d:7d:c3:9f:3f:12:87:ac:0f:af:dc:e9:ca:dc:
                    83:b0:36:f2:84:61:b8:71:da:63:b2:5a:c6:2b:8c:
                    3f:b9:e6:e4:a1:60:07:14:7f:04:fa:ac:38:16:82:
                    da:28:08:3d:67:6c:7a:b0:1c:e7:dd:0e:5c:c8:0f:
                    d6:06:a6:8b:86:55:a6:11:2b:8a:77:9a:89:fd:68:
                    9d:17:3a:8f:bd:4f:5c:b2:8d:03:b3:b6:3b:79:8b:
                    e8:76:12:dd:5d:a9:60:19:76:bb:60:09:23:74:19:
                    70:37:70:05:d7:ad:41:28:44:46:1b:dd:e3:e7:36:
                    24:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:65:31:00:E5:99:47:22:93:09:8E:B4:1E:AE:B2:30:59:73:52:B2
            X509v3 Authority Key Identifier:
                keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:b3:14:ab:bd:70:7b:c2:7a:4f:0b:95:85:fd:3a:19:c0:d3:
         70:0e:61:f5:f0:70:82:45:82:67:df:fc:27:a3:48:47:4f:24:
         1f:29:cf:55:80:ad:1c:85:ea:1f:32:89:55:b0:50:2c:ca:f0:
         4a:b7:54:4f:53:7b:ce:bf:d5:f0:7f:46:14:ca:bf:72:c7:a6:
         28:ad:17:26:be:b4:d4:52:98:bb:e5:50:9b:a4:f2:13:45:a6:
         74:a2:7f:dc:9d:c3:ab:75:f3:c1:ef:68:79:ec:f9:44:c6:34:
         49:49:7b:aa:3d:2d:ed:9f:72:0f:cf:05:63:4d:c2:1f:e4:5f:
         fd:32:a6:f3:5d:13:5a:d2:10:c1:71:4a:82:ec:84:75:ef:f9:
         20:e3:c8:f6:35:6a:4e:d3:7f:4e:e9:c9:61:b6:d4:19:e2:c2:
         0a:a0:5c:9a:26:60:55:bf:62:7f:de:af:c8:df:1f:d1:95:18:
         cb:ee:19:45:6e:75:93:3d:a0:e1:37:37:00:b6:ae:46:bd:63:
         82:50:b5:c6:80:09:e8:56:dd:fe:64:26:e4:90:5f:6f:d4:8d:
         2e:93:0a:ea:9d:0f:ac:59:0f:32:80:1d:a4:c3:ad:ed:82:32:
         42:99:de:37:e8:67:d4:93:1b:f1:d6:ee:69:21:c7:0f:48:cb:
         79:b7:f5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 08:35:08 2024 by rpki-client on console-ams.rpki-client.org