Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
File:                     s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json)
Hash identifier:          zJiyRJA8A5C6KYKbG0lR4N7qlYonK5+j3cD0q/ekk2c=
Subject key identifier:   9C:6B:0B:45:D1:C5:53:8C:93:21:ED:A2:FF:C7:42:B8:FC:53:D0:1F
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Certificate issuer:       /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial:       018F8937D949683B5B88C3E461E51ED7F620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
Manifest number:          1178
Signing time:             Sat 18 May 2024 01:01:29 +0000
Manifest this update:     Sat 18 May 2024 01:01:29 +0000
Manifest next update:     Sun 19 May 2024 01:01:29 +0000
Files and hashes:         1: 9I0h-2gZn-GT6bHfxOMOmJ0EGE4.roa (hash: +/dQrI4zK91TaRWVslcXt1VUXD/ghX9jyZ4jQid5O+w=)
                          2: NdfYhyEIlOx2bM1fbY-6y_Mzqu0.roa (hash: GVG5D0DMkIKvSNVyuIcHw5fPR+kX2pfQRbrnBqYsWAI=)
                          3: TINsK14tVkPnTRZR_ZlFXCFyeVU.roa (hash: N/GIm3rtMm0CfXzbos/tlIYsJw7j5xZbBeyzAuoEAKE=)
                          4: _wQSHk03wW5Lf4blHA4JfIh1oYM.roa (hash: Iq0RNI/RXnzo9CWG7STXxSecZ+twPEF2J+dlj2gvdKU=)
                          5: naCDrTI4ZxLMhotNMDHPASIYbZY.roa (hash: aR3PswhmxTD7d0uQzfjJdm7bSPrB/RzWXhv5NZpNO7o=)
                          6: owO_Fpj7ES5g2k-xve4j0Jaaswg.roa (hash: oOb341g8oEofIVH7HHp1M+Dk7OmziBrYUGPCh0e6woE=)
                          7: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: iu+jHv9PdDMJ9HsMf9pxfWluFnz+eZ3Zf4W6PW73ICg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:d9:49:68:3b:5b:88:c3:e4:61:e5:1e:d7:f6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
        Validity
            Not Before: May 18 01:01:29 2024 GMT
            Not After : May 19 01:01:29 2024 GMT
        Subject: CN=9c6b0b45d1c5538c9321eda2ffc742b8fc53d01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4c:25:97:ae:44:72:d2:80:d3:90:c9:fa:44:
                    09:60:af:a9:ee:80:31:80:fa:d7:5e:05:33:3f:18:
                    ad:c1:39:65:be:c5:ca:87:10:37:dd:72:60:6b:86:
                    01:46:e3:e5:f4:0a:fc:41:6c:3a:a7:7f:a4:94:b2:
                    b0:49:dd:55:d3:c6:70:97:c9:ef:9a:e9:fe:a5:4f:
                    44:d7:26:41:c9:d3:21:3b:56:07:ab:50:d3:72:18:
                    c5:3d:6e:00:26:3e:56:ae:92:7b:6b:ee:db:e1:74:
                    fb:5b:69:ed:b5:db:f8:32:3d:d1:ee:fa:ad:4c:8c:
                    d3:b4:63:ca:89:a8:0e:47:05:fc:00:55:04:dd:f3:
                    81:f1:89:62:6d:74:8e:30:4e:d6:df:02:82:09:89:
                    93:9c:51:57:e7:65:4c:8b:36:79:96:3f:4a:93:84:
                    eb:9d:c9:7c:79:fe:fe:de:06:93:61:bb:27:09:87:
                    57:40:15:34:4b:0f:b4:3e:e4:9d:4b:7a:42:83:87:
                    26:a3:20:df:28:cc:2f:b8:40:d4:f4:96:e8:6d:04:
                    da:0c:90:f8:8f:24:76:43:4c:a7:09:b0:51:23:9e:
                    b9:81:e4:20:19:1a:7d:a1:6e:86:89:f0:82:e6:ee:
                    5d:e6:2b:b7:0d:a1:a8:9c:49:a4:e1:23:10:04:58:
                    a2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6B:0B:45:D1:C5:53:8C:93:21:ED:A2:FF:C7:42:B8:FC:53:D0:1F
            X509v3 Authority Key Identifier:
                keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ad:ed:a1:db:e2:32:80:85:c5:eb:b1:95:92:3c:fb:46:81:
         e0:24:1e:19:e7:f8:de:2b:aa:2b:ad:1e:ad:43:ad:75:07:39:
         cc:bd:fa:82:e7:34:3e:57:ec:4b:22:86:47:0d:4d:66:f8:e9:
         17:56:c4:a1:bb:d6:82:a8:13:8a:ff:6c:5d:77:19:d2:55:ed:
         f4:14:41:1b:6a:d7:0d:24:9e:36:87:60:4e:6f:3d:e9:74:07:
         e2:a5:c7:72:d6:22:89:f6:e1:04:64:6d:7d:f9:a4:33:1f:4c:
         24:e5:51:22:09:26:61:0f:da:13:af:fd:12:fe:62:77:a1:b6:
         2b:ab:67:f3:14:30:4b:72:b9:ae:7e:c3:be:d3:a6:fe:1b:85:
         03:85:82:58:b6:0c:62:68:82:da:f8:1f:48:8e:43:b5:aa:38:
         db:0e:6f:eb:b6:32:9b:d3:c7:83:c5:f1:4c:d2:1e:7a:2d:78:
         d5:6c:c2:76:af:08:2a:1d:1d:9a:9c:4b:5e:df:f3:91:ba:91:
         0d:89:23:f3:10:2f:d4:5a:f9:91:9a:c0:55:12:61:f1:a7:98:
         d4:3d:2f:15:ad:52:20:4d:02:18:46:78:0b:8b:86:1a:73:a4:
         3a:ed:6c:57:15:b9:aa:fc:9e:37:50:68:9d:d7:a0:57:18:2a:
         a1:34:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:03:16 2024 by rpki-client on console-fra.rpki-client.org