Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/s9MHqYYJLNZfyTQZhj4D2YlEARo.mft
File:                     s9MHqYYJLNZfyTQZhj4D2YlEARo.mft (raw, json)
Hash identifier:          msGtCMtyBIzEwcMKyh5rTY6am7TZxFo6AdjgtQix1ok=
Subject key identifier:   97:80:D7:BB:E9:43:7E:83:A8:7B:FF:8C:73:25:7A:AE:F9:43:9C:A2
Authority key identifier: B3:D3:07:A9:86:09:2C:D6:5F:C9:34:19:86:3E:03:D9:89:44:01:1A
Certificate issuer:       /CN=b3d307a986092cd65fc93419863e03d98944011a
Certificate serial:       018F8748BFE1C665C3964F20AC3F0023F3B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9MHqYYJLNZfyTQZhj4D2YlEARo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/s9MHqYYJLNZfyTQZhj4D2YlEARo.mft
Manifest number:          0631
Signing time:             Fri 17 May 2024 16:00:42 +0000
Manifest this update:     Fri 17 May 2024 16:00:42 +0000
Manifest next update:     Sat 18 May 2024 16:00:42 +0000
Files and hashes:         1: gX33RndK-vfUB8vyVKm6SlYQRYQ.roa (hash: zQZdZkQE0fWrtIb5Wrm+JOKQkirwQvGsHtspHPipPJM=)
                          2: s9MHqYYJLNZfyTQZhj4D2YlEARo.crl (hash: w9vRH7ATGom1NmEr19/k/Di/NMK4Ijm8UljMmMHHhFQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/s9MHqYYJLNZfyTQZhj4D2YlEARo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/s9MHqYYJLNZfyTQZhj4D2YlEARo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9MHqYYJLNZfyTQZhj4D2YlEARo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:bf:e1:c6:65:c3:96:4f:20:ac:3f:00:23:f3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d307a986092cd65fc93419863e03d98944011a
        Validity
            Not Before: May 17 16:00:42 2024 GMT
            Not After : May 18 16:00:42 2024 GMT
        Subject: CN=9780d7bbe9437e83a87bff8c73257aaef9439ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2f:ce:66:c9:35:56:25:81:8d:db:01:75:0b:
                    df:bf:ed:7f:48:9c:15:45:5d:15:a1:44:5f:a8:7a:
                    e9:73:72:3c:89:42:25:0c:e6:8c:a0:1c:7a:18:82:
                    01:b8:b0:b7:9e:3f:c3:b2:98:f9:b5:47:94:7f:fc:
                    f5:56:f4:01:a4:88:10:17:bd:eb:9b:d2:19:6f:20:
                    ac:fa:7f:ba:d1:c3:5d:23:6d:d2:b5:5a:6f:0f:2c:
                    de:8b:d2:ab:db:1f:bb:d5:72:3d:be:a4:45:a2:97:
                    99:31:d7:d3:ac:55:33:f7:38:32:48:ca:d2:83:91:
                    86:e8:eb:20:9f:43:9e:2e:cd:5c:84:ca:60:04:30:
                    b7:e8:dd:66:87:8f:af:e7:b8:eb:6b:d8:76:af:ea:
                    9a:7b:ce:80:d8:13:d7:75:e0:bd:5e:c7:32:92:63:
                    ae:c9:66:fc:4c:9f:47:c6:0c:30:52:f0:5c:a5:13:
                    99:6c:cf:e1:20:1e:2b:23:e5:ba:3b:7f:43:77:b6:
                    d6:ad:5c:2c:79:6a:16:83:32:fe:17:2c:df:2e:50:
                    b7:51:03:77:cb:33:61:f3:b8:2b:20:36:7a:b1:e5:
                    29:27:b2:d8:78:64:e0:68:bb:a4:57:1d:02:63:89:
                    a7:01:ac:56:56:c0:c0:73:75:82:ce:27:54:7c:75:
                    30:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:80:D7:BB:E9:43:7E:83:A8:7B:FF:8C:73:25:7A:AE:F9:43:9C:A2
            X509v3 Authority Key Identifier:
                keyid:B3:D3:07:A9:86:09:2C:D6:5F:C9:34:19:86:3E:03:D9:89:44:01:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9MHqYYJLNZfyTQZhj4D2YlEARo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/s9MHqYYJLNZfyTQZhj4D2YlEARo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/8e206b-e987-461a-ad00-fbbc76ea96d5/1/s9MHqYYJLNZfyTQZhj4D2YlEARo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4f:9d:cf:32:c5:81:35:c0:9f:26:54:ca:42:a8:bc:3a:59:
         f3:37:70:98:02:1b:5c:82:1a:7e:ef:e4:4c:4c:5b:ce:4d:89:
         21:25:7c:57:a9:c4:64:cf:f4:36:d0:84:a7:0d:62:5e:c9:f0:
         b2:8e:78:33:f8:7c:7a:66:4a:cb:31:1a:c1:48:c3:b3:ff:eb:
         52:f3:4e:ff:7b:93:ae:09:17:ab:0e:bb:4d:01:7a:02:ac:25:
         c8:25:38:12:89:4e:63:bf:e2:93:e2:8e:d1:07:db:c7:ad:de:
         c8:46:0b:33:ef:12:db:e4:c3:2c:3a:1e:fe:f1:e3:04:2c:a7:
         8c:70:4e:5a:86:0a:c8:7c:2c:b2:0f:c5:75:19:b2:d3:a3:a1:
         84:4a:8e:8c:a9:11:46:c8:b3:11:cb:61:41:6f:21:67:71:d3:
         b0:49:31:32:18:15:8b:6b:ed:9b:31:97:7f:4a:08:08:c1:2c:
         e2:e9:f0:e8:74:69:e7:d2:9f:71:f3:c5:45:57:f4:e5:36:f3:
         e0:5b:88:88:11:e1:e8:0b:5c:3b:d0:f0:ac:b5:29:52:5b:b4:
         4a:16:a0:41:80:16:09:7a:69:21:53:f1:29:4c:66:0c:dc:d0:
         13:7d:32:bf:9d:f3:8a:1f:ae:82:6a:60:19:0c:e3:2d:72:4c:
         5b:62:5d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:06:11 2024 by rpki-client on console-ams.rpki-client.org