Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
File:                     E9g7Il3TOGDFHcRKqI218D3BWnQ.mft (raw, json)
Hash identifier:          vnTSRP3aLxhNpsXppM3ExV/6oQUMtVJP1fLW2WASi64=
Subject key identifier:   14:2A:61:73:03:C9:0F:90:65:8B:F7:2E:ED:3F:9B:D1:D7:98:86:E8
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Certificate issuer:       /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial:       018F4D5AA213D0729B417B8CC8B1C7D480F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
Manifest number:          10E9
Signing time:             Mon 06 May 2024 10:02:16 +0000
Manifest this update:     Mon 06 May 2024 10:02:16 +0000
Manifest next update:     Tue 07 May 2024 10:02:16 +0000
Files and hashes:         1: 0lEDI-XocBIwjCKqCMNAQNnQe_k.roa (hash: y2g1IA6H0q3s6EDaG+oyXVNETWxuN37hr6/C/Nk0Awo=)
                          2: E9g7Il3TOGDFHcRKqI218D3BWnQ.crl (hash: cHVXvVQm4k0gC+wo1OXLFqlcl3RJVlem0cseocbmRb4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 10:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:5a:a2:13:d0:72:9b:41:7b:8c:c8:b1:c7:d4:80:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
        Validity
            Not Before: May  6 10:02:16 2024 GMT
            Not After : May  7 10:02:16 2024 GMT
        Subject: CN=142a617303c90f90658bf72eed3f9bd1d79886e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:b3:c3:e0:d6:7b:92:93:25:cf:6b:d9:94:
                    1c:16:b6:c1:ad:db:ff:ce:8e:33:4d:e0:fc:c0:3e:
                    42:1b:44:bd:05:2d:e3:41:a0:fc:dd:a6:cf:88:51:
                    31:11:f0:26:fc:28:74:4b:bd:b9:83:8a:54:18:9f:
                    40:6e:3a:31:20:6d:b3:cf:2c:0c:bd:ad:0f:98:a9:
                    c3:ea:c5:22:51:8b:7d:7d:bc:52:ca:3d:58:3a:bb:
                    96:67:1a:e1:e2:c9:1e:1a:e3:5c:2f:22:34:a8:2d:
                    5e:f9:de:f7:92:b8:ba:9e:11:3c:4e:0a:24:4c:ae:
                    5f:ec:b9:a1:13:c6:cc:dc:06:fe:57:c1:82:c3:3b:
                    fc:03:58:b0:40:f5:b8:2e:d5:fb:34:d4:42:0b:18:
                    07:1d:ae:b6:1f:0a:12:c8:c2:51:73:88:28:07:ca:
                    cd:4b:72:37:ca:92:53:57:ab:b8:e3:2a:64:a1:14:
                    f7:0f:af:54:35:02:0a:5e:ea:a0:df:89:8d:ae:1b:
                    7d:d0:8b:4e:11:14:06:8a:f7:ba:2a:61:76:3d:c2:
                    64:ba:f3:d7:81:be:fb:a0:e3:c7:f9:5e:82:67:46:
                    b3:c3:18:d6:5c:ee:62:19:37:47:08:ec:88:f2:5d:
                    35:83:7f:8a:e1:e2:9d:57:77:8f:b4:23:6c:a0:1d:
                    17:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:61:73:03:C9:0F:90:65:8B:F7:2E:ED:3F:9B:D1:D7:98:86:E8
            X509v3 Authority Key Identifier:
                keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8c:b1:0f:bf:b2:51:b6:00:14:b4:ab:2f:18:b7:75:05:73:
         29:0f:d3:ac:9b:19:b5:41:19:fb:45:8c:84:5b:ba:8f:b4:b5:
         da:aa:04:3b:da:f5:cf:34:0c:cc:59:1c:1f:28:46:fd:22:d2:
         b3:4c:3d:41:27:5b:95:f0:52:96:fd:c8:8e:93:99:29:29:67:
         8d:6a:7b:75:db:ba:5e:cb:ae:a2:e0:33:2b:ae:78:3a:8e:5a:
         0e:48:fc:a5:be:02:74:81:f5:fb:28:aa:e1:7d:af:3f:15:9c:
         b8:a6:2f:ef:e5:fb:08:d8:73:61:85:54:a5:ff:e8:f4:a4:66:
         8e:73:c9:bf:32:16:3e:44:c3:ec:d2:59:fe:56:10:50:32:40:
         bd:77:5e:3f:45:ba:01:37:70:6e:61:2a:6a:58:3f:39:d2:13:
         6b:91:bd:5c:21:c8:4e:af:3b:cf:75:56:53:5e:c9:0f:71:08:
         9c:85:56:d3:06:06:e9:6e:fc:55:1d:bd:86:06:c6:c4:14:71:
         ff:f1:d3:a4:91:78:4c:42:88:fb:97:6a:f8:57:5f:71:a6:a0:
         7f:22:77:29:66:aa:54:42:bd:a5:56:e7:da:a6:b1:2a:09:bb:
         5f:82:8e:8f:68:49:95:31:ec:c2:f6:16:70:70:66:af:7e:c8:
         b8:67:04:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 13:10:06 2024 by rpki-client on console-ams.rpki-client.org