Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
File:                     x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft (raw, json)
Hash identifier:          dL2twYfVyHQSzluUBwOgQYF8AJvGXYnLCc2tufsmbWs=
Subject key identifier:   DF:EB:6E:94:47:B0:66:B3:FC:9B:A0:E2:0D:70:9F:E1:F9:A4:0C:25
Authority key identifier: C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA
Certificate issuer:       /CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
Certificate serial:       018F87ED197FF8DA5730EA486A3F1BEA9085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
Manifest number:          0F79
Signing time:             Fri 17 May 2024 19:00:13 +0000
Manifest this update:     Fri 17 May 2024 19:00:13 +0000
Manifest next update:     Sat 18 May 2024 19:00:13 +0000
Files and hashes:         1: fuWDnpWpXSDH0BS1hhM56k87PPw.roa (hash: hff6gAv57H2SzDKqcKuWEat0tiuKKUOa9GeLc8zdS0Q=)
                          2: x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl (hash: STNIBaOXgjQSpbHv2JlNn30n+Ux87tGyEAKgIs9IoMA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:19:7f:f8:da:57:30:ea:48:6a:3f:1b:ea:90:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7d91462c4dc1df6a8a3a97a1aee57a0cc14efba
        Validity
            Not Before: May 17 19:00:13 2024 GMT
            Not After : May 18 19:00:13 2024 GMT
        Subject: CN=dfeb6e9447b066b3fc9ba0e20d709fe1f9a40c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:05:99:55:73:89:51:94:cc:be:b6:d5:47:
                    1d:68:3c:e3:9c:77:d4:b6:4e:96:4b:36:8f:37:93:
                    19:eb:80:06:7d:8c:39:2c:08:35:cd:16:93:35:83:
                    e4:d7:e9:37:a7:2a:89:ca:08:05:e9:be:bc:e9:ba:
                    bc:40:3c:3c:cb:80:e9:c5:96:67:ff:39:70:8f:f8:
                    30:84:2e:c4:66:ef:eb:56:cb:71:6f:78:65:d6:ed:
                    33:15:8d:64:cf:ad:92:9d:bd:eb:0a:0f:d7:39:bf:
                    f5:06:1f:a8:1d:c2:fd:b3:b3:d6:53:e6:fa:df:4e:
                    56:15:5f:3b:b1:8d:01:92:70:83:da:65:e6:1b:7a:
                    92:32:5c:ba:ae:12:d9:0b:09:36:7d:6e:15:ed:2f:
                    36:40:da:23:e9:dc:80:bc:79:7f:e0:c1:83:88:5f:
                    84:44:4b:17:3d:0e:74:dc:7f:3f:fd:39:a1:23:d8:
                    12:3d:cd:45:cc:47:b9:51:95:55:75:c7:4d:21:01:
                    e2:ec:f2:d4:10:00:a3:15:8a:32:e8:65:22:f6:b6:
                    40:3c:93:1e:e3:dd:35:19:24:da:8e:63:af:02:ee:
                    a1:fa:50:5e:0a:1b:9a:fb:7c:25:9e:9c:87:c3:46:
                    f2:86:51:4a:7f:5c:a4:22:b1:2b:45:a5:ee:54:ba:
                    ad:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EB:6E:94:47:B0:66:B3:FC:9B:A0:E2:0D:70:9F:E1:F9:A4:0C:25
            X509v3 Authority Key Identifier:
                keyid:C7:D9:14:62:C4:DC:1D:F6:A8:A3:A9:7A:1A:EE:57:A0:CC:14:EF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9kUYsTcHfaoo6l6Gu5XoMwU77o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/318a23-2876-46a2-af72-3497f7e2de62/1/x9kUYsTcHfaoo6l6Gu5XoMwU77o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0c:dc:20:d2:7a:2a:64:bd:ec:56:80:b5:32:56:62:77:04:
         e5:f7:f3:35:0b:f6:e3:de:3d:8c:10:e2:00:bc:0b:d7:20:3c:
         a6:a0:13:2f:48:55:91:49:58:65:a6:0f:74:56:7d:6c:05:fe:
         b2:de:50:d2:cd:f8:d6:ef:e4:97:91:ea:89:fd:8d:c4:cd:4d:
         cd:c8:c4:6b:00:98:ef:f5:b2:8b:ca:33:d1:d4:48:fc:f8:d5:
         a7:ea:df:a2:ee:93:9b:1b:f1:b0:24:f6:12:62:dc:13:4f:8b:
         f6:68:25:a0:1c:f3:96:cc:53:11:be:e3:35:f5:a3:1d:5c:f2:
         64:46:1c:89:86:5b:7b:56:50:0b:22:77:58:2f:ff:29:aa:b8:
         c5:ee:4e:49:1e:dd:fd:98:25:cb:a3:b9:8c:b8:f3:47:65:f2:
         f1:01:97:ed:b0:88:d4:5e:2b:73:59:7d:f5:bf:f5:07:f1:4b:
         80:a9:cc:1c:8f:9a:a3:0e:dc:ce:9e:fb:25:ce:ca:42:af:58:
         dd:56:91:ee:d8:a8:f9:0b:80:5c:8d:db:4f:97:86:2a:38:e0:
         b8:0e:39:6b:b3:ee:7e:59:8e:31:88:06:ea:5d:93:8a:4c:8b:
         85:9f:e3:d8:35:22:55:70:02:10:cf:f7:12:52:e7:78:75:ac:
         ac:14:0c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:11:27 2024 by rpki-client on console-ams.rpki-client.org