Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
File:                     Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft (raw, json)
Hash identifier:          OauA4G/2g0er39VO23SSI6Fo4gjpKS+pbKr1nZdAz2Y=
Subject key identifier:   84:91:7B:03:21:5C:CC:5E:5E:B9:B6:C9:FE:EA:1C:95:D8:1E:C2:BD
Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Certificate issuer:       /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Certificate serial:       018F874AF4C0E48B48952F78CE052436A154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
Manifest number:          086B
Signing time:             Fri 17 May 2024 16:03:07 +0000
Manifest this update:     Fri 17 May 2024 16:03:07 +0000
Manifest next update:     Sat 18 May 2024 16:03:07 +0000
Files and hashes:         1: 4GuHaXmkQr73kkO3GeWsPewisYw.roa (hash: 8Rac4nTwQ5GAjCtQEa+a09Dh8NNf9nrl5L/HWN++UpY=)
                          2: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl (hash: g6LyvjmtEL6L1V0+UInjD+wMJ4lUx0OiRKfWeE44EUo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:f4:c0:e4:8b:48:95:2f:78:ce:05:24:36:a1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
        Validity
            Not Before: May 17 16:03:07 2024 GMT
            Not After : May 18 16:03:07 2024 GMT
        Subject: CN=84917b03215ccc5e5eb9b6c9feea1c95d81ec2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:2c:86:46:b3:70:2e:67:5b:5e:38:d1:bc:
                    4e:03:8a:a5:ea:fd:ea:9c:e6:f4:66:a8:02:95:20:
                    76:db:15:6a:7e:66:7a:05:a0:45:15:b9:76:e6:9d:
                    f0:b9:5c:78:f8:8f:2a:74:cb:c3:0b:f7:7f:ee:ec:
                    4a:1d:7f:91:81:01:98:53:0b:16:47:3a:0a:8a:5d:
                    33:2d:7b:14:24:d5:f9:c8:a5:da:e7:61:b9:ac:dc:
                    ca:21:c4:d4:cd:50:c4:99:f1:fd:86:b9:08:5d:34:
                    e2:3a:ba:1c:f4:ce:99:2c:a0:69:de:27:21:60:59:
                    eb:55:55:27:b4:62:c2:93:c1:71:1a:be:39:bb:0d:
                    12:f3:c1:3a:e8:aa:b5:09:d5:fc:2b:34:d3:28:56:
                    95:12:f0:98:b3:03:49:7d:3b:1f:dc:bb:33:98:cc:
                    c8:7d:75:09:f5:ff:5c:d1:3b:35:d6:c7:18:64:a7:
                    b2:50:09:38:d7:97:d1:af:b5:84:a8:db:9a:4e:f2:
                    cc:26:a9:c6:9a:08:6b:90:36:7c:76:f2:9a:b5:31:
                    34:9a:67:d1:17:47:66:36:d9:28:a5:77:ea:c5:ef:
                    ea:cc:c5:1a:d9:82:ee:b0:d2:1e:63:fd:15:98:ad:
                    ca:ae:d3:c4:05:ee:bf:23:03:fd:92:c6:7b:8a:29:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:91:7B:03:21:5C:CC:5E:5E:B9:B6:C9:FE:EA:1C:95:D8:1E:C2:BD
            X509v3 Authority Key Identifier:
                keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f4:ab:7d:20:10:0c:ed:bf:6f:f1:3f:9a:b2:1d:ed:2d:cf:
         34:e9:e3:c2:f0:dd:b4:3a:8c:6e:87:68:a5:5f:d9:24:74:a8:
         f2:d1:5c:27:1f:5e:0a:2a:e3:84:02:71:ab:6e:ea:80:7b:71:
         9f:e9:d0:5d:61:5b:aa:93:a4:7a:20:c8:ca:55:5c:8b:ab:28:
         e6:57:6f:89:22:d3:d6:e7:6b:74:c9:86:80:96:b0:29:f2:7b:
         e8:8d:81:42:3b:06:f3:f5:31:f6:46:ae:ec:20:46:99:d2:89:
         f3:f3:c7:20:2f:2c:c8:63:5c:73:f6:d1:44:90:7f:f6:02:de:
         71:93:61:7c:2e:af:87:87:ee:46:cd:07:cc:6d:0e:cf:b0:2e:
         df:b4:b0:3c:7f:0d:96:6c:ad:26:87:f3:f0:a3:d1:a9:f4:fd:
         3b:3c:0a:cb:e3:39:34:35:e6:a5:a0:6a:7b:3c:da:1d:57:aa:
         1e:2a:02:4f:e8:04:14:02:32:cd:cc:2d:56:2e:69:b0:8a:75:
         97:c8:30:11:34:82:8b:cc:c2:34:fd:ec:1f:be:53:09:75:16:
         44:7e:5e:98:50:c0:8b:d2:2b:7d:fb:1f:95:8f:50:ce:8a:9d:
         7d:76:cb:91:73:58:31:6f:21:18:83:5e:fa:20:ab:56:46:f3:
         3e:c3:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:31:27 2024 by rpki-client on console-fra.rpki-client.org