Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
File:                     9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json)
Hash identifier:          iRV1uuQDgXRiM5fZ+/XyNRK1Rf6ugXZ59RS3vjgUGMo=
Subject key identifier:   5B:F8:11:D8:CB:F6:8D:3E:89:25:35:67:68:88:CC:AE:C2:98:50:94
Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70
Certificate issuer:       /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
Certificate serial:       018F362E7AB2824A52A94FB22A22DA348A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
Manifest number:          0869
Signing time:             Wed 01 May 2024 22:02:46 +0000
Manifest this update:     Wed 01 May 2024 22:02:46 +0000
Manifest next update:     Thu 02 May 2024 22:02:46 +0000
Files and hashes:         1: 5S_peVEqVR2yz9AB9kEYnjkqJf4.roa (hash: JN+fDAYO1vu9s3uiFRzWLYtTRtxMx8mlusyzxiCtX+U=)
                          2: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: nuezIToLvmp7FKEKqDflMgQMxgWxdUR2pjY+Zyzks0Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 22:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:2e:7a:b2:82:4a:52:a9:4f:b2:2a:22:da:34:8a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070
        Validity
            Not Before: May  1 22:02:46 2024 GMT
            Not After : May  2 22:02:46 2024 GMT
        Subject: CN=5bf811d8cbf68d3e892535676888ccaec2985094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:26:14:38:99:ed:9f:57:cb:ac:79:4a:ce:96:
                    e7:0a:4a:36:75:f6:d2:36:a8:d3:f5:8e:68:a0:48:
                    27:56:e4:f3:15:06:10:5c:0f:38:40:dc:62:5b:f0:
                    96:84:12:37:98:ac:5c:54:dd:06:a5:6b:3c:51:0d:
                    1f:36:f3:6c:b5:79:77:79:65:3c:c1:38:a9:56:9a:
                    dc:7d:59:b6:9e:5c:49:c8:cc:e6:3e:4a:bb:d3:56:
                    44:25:12:ae:24:79:12:74:28:4e:3f:e2:82:cf:5c:
                    44:ae:23:73:50:9e:7b:03:bd:5a:73:5a:39:30:11:
                    a5:33:bd:b8:a2:8f:60:19:47:e1:de:60:1c:dc:c5:
                    f3:57:b2:e7:c5:c7:b9:e1:95:c4:37:0b:16:bf:1b:
                    b8:92:f5:3d:65:a2:b3:4d:07:4d:6f:79:b0:10:c8:
                    b9:e5:22:d2:b9:6b:74:d4:3c:94:4d:06:ef:9e:a8:
                    0d:53:1f:b7:c0:12:69:c8:aa:2f:b7:0d:13:44:99:
                    ce:ef:66:1a:c6:01:14:74:e3:a3:11:4a:bb:85:a6:
                    b6:77:ff:8c:67:fb:4e:ab:e1:c5:b3:72:3c:7e:44:
                    6e:a0:15:d7:36:47:0b:c1:2d:da:68:fe:36:b5:0f:
                    40:9e:ff:60:f0:a8:4d:cb:36:bc:d3:6f:8b:43:f8:
                    c0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F8:11:D8:CB:F6:8D:3E:89:25:35:67:68:88:CC:AE:C2:98:50:94
            X509v3 Authority Key Identifier:
                keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a3:ce:07:9a:25:82:07:f4:6c:df:ea:12:9d:91:04:9b:5b:
         b1:e5:68:44:54:bf:78:8c:3f:00:da:93:39:4d:7a:a5:e5:30:
         97:fa:06:25:61:e1:81:97:a6:0c:d2:14:5c:e2:6e:08:6a:2b:
         18:77:75:59:c0:44:03:55:6b:09:77:c6:f5:8e:83:9c:5f:b0:
         74:0c:80:54:3d:b0:95:29:ab:c7:2b:25:65:42:de:ef:10:03:
         5f:07:e3:af:66:a3:7f:20:9e:7e:f5:2e:bf:34:74:b2:55:8f:
         e9:e2:36:e7:f8:7a:47:ef:9f:85:33:f1:28:bd:9d:f8:86:9d:
         86:79:c1:1c:23:8c:13:76:69:54:be:3d:8e:8b:0a:f5:43:80:
         0c:47:19:68:c3:fd:82:5e:73:dd:33:d1:89:97:f0:79:12:98:
         3c:e3:b7:85:54:17:0d:a2:8d:3a:3d:24:2b:ee:eb:b4:0f:d8:
         40:f2:c0:00:c3:b4:fd:73:0c:82:5a:6a:f8:13:04:14:3c:d9:
         10:28:3d:74:e1:3f:57:5e:fb:ba:74:1f:21:77:33:27:5c:ee:
         d8:8f:a2:c1:47:00:f5:16:50:0e:04:cf:71:15:7f:94:a6:f0:
         b8:a2:d9:5f:e9:fb:95:16:14:54:ce:c3:42:f3:e9:e8:04:c0:
         94:fd:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:56:07 2024 by rpki-client on console-fra.rpki-client.org