Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
File:                     y9IWsAV0TBjLOE09CdEkBm1V9i0.mft (raw, json)
Hash identifier:          yN8uUYgIwoMEBQ0wHJdhm8ZMi0G7lcYAD8uvlc4ccDw=
Subject key identifier:   9B:F3:5D:6F:22:89:59:51:AB:88:16:C3:DB:FB:CF:42:E5:3D:85:DA
Authority key identifier: CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D
Certificate issuer:       /CN=cbd216b005744c18cb384d3d09d124066d55f62d
Certificate serial:       018F8824545FC2192B2839B37762C5477CC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
Manifest number:          02A6
Signing time:             Fri 17 May 2024 20:00:33 +0000
Manifest this update:     Fri 17 May 2024 20:00:33 +0000
Manifest next update:     Sat 18 May 2024 20:00:33 +0000
Files and hashes:         1: MVo9tijyJNginLL8kZ6zVRAQg_Q.roa (hash: Oqq5E/oO+OxgKY8Xq5V1igUnaKwvmU4IK6dQF5KT48k=)
                          2: y9IWsAV0TBjLOE09CdEkBm1V9i0.crl (hash: LlCvIK1pNVy0/zPKazNpgpHxogORd2o8vh1GEJOSEo4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:54:5f:c2:19:2b:28:39:b3:77:62:c5:47:7c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd216b005744c18cb384d3d09d124066d55f62d
        Validity
            Not Before: May 17 20:00:33 2024 GMT
            Not After : May 18 20:00:33 2024 GMT
        Subject: CN=9bf35d6f22895951ab8816c3dbfbcf42e53d85da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:2b:71:33:02:22:7a:1a:2e:65:40:b3:88:
                    53:da:12:7a:63:f3:e2:2e:8d:39:83:09:61:71:f6:
                    2c:95:31:fe:06:d1:58:b0:c6:6e:0d:a7:a8:ba:c6:
                    81:5a:85:0b:f1:06:d3:5c:ef:6e:80:4e:23:eb:47:
                    e1:8a:8d:db:eb:53:74:83:0f:08:03:88:3c:96:89:
                    25:7a:a1:fd:e1:72:ba:8c:3f:d2:35:9b:86:d8:05:
                    91:4b:1b:36:71:d6:69:a8:07:b0:90:bb:c4:8e:e0:
                    95:a3:17:9e:fc:39:bf:9e:21:01:8a:70:29:53:8e:
                    12:b7:f6:09:9e:07:35:22:2f:0d:b1:e3:c4:87:b2:
                    20:41:08:e1:0d:f9:dd:aa:58:89:54:76:17:aa:7f:
                    57:ff:9a:f5:f1:a1:da:d0:1d:e7:4f:bf:93:ba:85:
                    f7:57:80:d3:67:b0:3a:04:79:62:ee:b7:e4:b4:a4:
                    5b:68:98:1d:b7:19:13:8a:bb:79:3f:ab:07:f8:f6:
                    b0:4d:c1:d9:83:5a:dd:d8:d9:e3:da:02:74:d6:e9:
                    58:0e:c8:6b:ff:e7:b2:87:45:3b:4c:44:30:cd:82:
                    6d:0b:60:52:51:e3:4b:13:54:10:29:e9:7c:87:c3:
                    c5:ff:e8:e9:e3:ae:4c:01:3c:fd:40:55:2e:7e:40:
                    dd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F3:5D:6F:22:89:59:51:AB:88:16:C3:DB:FB:CF:42:E5:3D:85:DA
            X509v3 Authority Key Identifier:
                keyid:CB:D2:16:B0:05:74:4C:18:CB:38:4D:3D:09:D1:24:06:6D:55:F6:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IWsAV0TBjLOE09CdEkBm1V9i0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c5eb99-7289-4e3e-a8cd-05bbe4ef06c0/1/y9IWsAV0TBjLOE09CdEkBm1V9i0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:67:3a:05:98:12:2d:10:e5:34:6d:18:77:13:7f:e8:b1:27:
         2f:0b:c8:83:29:24:8c:cf:b9:a1:2b:b6:07:1b:05:52:23:3c:
         b6:9f:82:68:7e:4a:a0:75:03:1c:01:3d:41:0a:8a:57:d9:81:
         46:de:d5:b4:9b:fa:71:7c:0d:8c:18:dd:2e:17:f1:8f:19:fd:
         4b:b7:8b:55:0f:6d:e0:7d:70:27:67:25:3c:1f:25:b2:dc:fa:
         f9:09:f9:40:84:7d:d5:36:99:51:b8:34:f0:85:68:f0:6c:82:
         11:9d:df:1d:c9:05:55:7e:54:ca:6c:7a:40:f0:7a:41:b6:1d:
         42:4a:e7:91:22:b3:3d:a2:9b:d6:2d:b0:e7:58:7f:e8:2e:c7:
         71:3c:02:68:32:1d:5a:99:de:d5:1b:39:1b:99:af:e2:e4:a2:
         e2:e7:81:5f:c2:98:0e:88:8b:9e:6a:90:09:af:f1:90:30:fe:
         e3:c9:4e:7e:54:a7:f1:a0:83:59:0b:51:25:a8:ba:7e:4f:ae:
         99:5f:bc:19:d4:e5:5f:67:10:20:15:76:04:be:a4:3a:b9:6d:
         81:5d:d0:1b:7d:e5:82:26:f1:16:2d:90:8b:d5:09:eb:50:1d:
         b7:5f:78:a4:33:32:77:46:64:7a:02:39:d1:13:ee:75:e3:f6:
         90:38:34:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:00:30 2024 by rpki-client on console-fra.rpki-client.org