Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
File:                     mo9LAp4p7t8n1FzU05AQgya-JvA.mft (raw, json)
Hash identifier:          +ShVJmVKWXOU831+RfY87DvtWNGhZjx9e9SiWYIzjP8=
Subject key identifier:   0D:D2:2A:AE:BF:98:0D:F3:53:BB:69:37:13:25:D0:1D:C6:A5:CC:F2
Authority key identifier: 9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0
Certificate issuer:       /CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
Certificate serial:       018F8938491B1726408934280144799993F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
Manifest number:          1179
Signing time:             Sat 18 May 2024 01:01:58 +0000
Manifest this update:     Sat 18 May 2024 01:01:58 +0000
Manifest next update:     Sun 19 May 2024 01:01:58 +0000
Files and hashes:         1: H8RJfYofQhSGm7OSSSDAfbeRCGg.roa (hash: UGb8v8Vo2+nrZ8gb0c6gmM2XVkM1R5J6tasjgbU34lc=)
                          2: mo9LAp4p7t8n1FzU05AQgya-JvA.crl (hash: en/LXX5xPTu+7rfqyNPTu+arqIiXD1hnGeeH+HIu97w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:49:1b:17:26:40:89:34:28:01:44:79:99:93:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8f4b029e29eedf27d45cd4d390108326be26f0
        Validity
            Not Before: May 18 01:01:58 2024 GMT
            Not After : May 19 01:01:58 2024 GMT
        Subject: CN=0dd22aaebf980df353bb69371325d01dc6a5ccf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:39:c2:34:f2:db:c5:8b:dc:64:e5:22:1a:bb:
                    54:83:cb:a5:8f:b1:87:17:3b:03:2b:16:5e:8a:58:
                    30:e0:a0:3a:82:35:e7:70:ad:8c:92:32:17:78:76:
                    d0:59:b6:a9:a5:c3:7b:5f:b6:7d:97:9b:4a:1f:d5:
                    16:03:61:26:e1:2c:e8:95:e8:99:dd:95:da:3f:fa:
                    c0:d0:27:1a:09:7b:ed:5b:af:38:a0:b6:46:56:a2:
                    a1:11:5b:d5:5a:1a:d2:99:97:cb:32:d5:33:07:ea:
                    a5:75:41:21:b1:a7:97:b5:c1:c0:ce:99:f7:e6:57:
                    1d:5c:76:7d:a3:64:aa:43:3c:e8:6c:22:a0:1a:22:
                    4b:07:2a:98:b1:18:76:fb:22:08:07:c9:2b:25:86:
                    fa:79:2b:37:e5:e6:a6:28:05:cb:c5:64:38:12:e7:
                    62:d5:26:d1:b6:b6:42:98:0c:d6:9d:1a:20:05:9e:
                    e3:49:ba:02:af:74:b0:18:5e:08:5d:10:b7:3e:0d:
                    74:10:29:d8:af:d4:ec:ff:ef:3c:7a:7a:fe:c5:90:
                    1d:39:3b:1d:d4:bc:48:c1:0a:c5:d8:6b:d2:f1:fe:
                    f5:a1:c1:eb:5b:c1:30:16:1c:b7:1f:49:61:93:39:
                    5f:0d:47:3d:2d:c8:f8:fc:0f:79:22:57:29:f1:c1:
                    9f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D2:2A:AE:BF:98:0D:F3:53:BB:69:37:13:25:D0:1D:C6:A5:CC:F2
            X509v3 Authority Key Identifier:
                keyid:9A:8F:4B:02:9E:29:EE:DF:27:D4:5C:D4:D3:90:10:83:26:BE:26:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mo9LAp4p7t8n1FzU05AQgya-JvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/194589-6c6e-47ce-9733-13952643f114/1/mo9LAp4p7t8n1FzU05AQgya-JvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2a:4a:0b:b2:34:9b:fd:cf:07:59:1b:8c:56:50:da:d3:30:
         71:49:49:53:cf:10:3b:b1:0e:0d:af:dc:d2:98:75:27:4f:18:
         37:fd:d3:22:b9:a6:15:1c:a2:a4:72:52:b3:22:e7:a2:45:a1:
         df:dc:b7:55:34:69:23:f5:df:49:9c:95:8d:aa:ec:b5:13:3b:
         8a:f0:9b:4b:31:c1:b8:db:89:ac:60:db:74:33:e4:ba:f9:05:
         51:0a:17:0b:ba:86:4e:e0:51:87:21:97:54:6e:49:6b:86:2b:
         39:e6:7c:f3:64:97:1c:a1:cc:24:1c:13:ba:ea:2a:c6:ed:dc:
         d8:41:b0:0b:81:42:3b:29:aa:a3:13:57:35:6a:5f:f5:ce:e3:
         7b:e0:87:23:b7:7b:5f:a8:22:5c:2d:11:34:fd:c9:a6:fb:e8:
         df:29:d2:cc:72:86:cc:24:66:1d:b5:fc:69:8b:3c:3f:8d:70:
         b5:ce:b7:1d:d5:52:98:c7:a6:23:10:76:5f:d1:39:36:9a:7d:
         59:01:1d:ba:aa:db:9c:7d:bd:41:08:7a:23:b6:7c:08:b5:6d:
         e5:02:26:18:01:ab:e6:8a:75:0e:e4:85:30:61:aa:06:1b:ba:
         4c:b9:a2:7e:c8:19:0e:ab:c2:04:78:3d:09:08:73:05:0e:59:
         17:62:1d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:14:24 2024 by rpki-client on console-ams.rpki-client.org