Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.mft
File:                     zO2ZIDBTHn6LUYrv2eJnzFKO2po.mft (raw, json)
Hash identifier:          njwAEXganNWYhuF6hdlA611ugLOS5J3gkoGP2owfdW0=
Subject key identifier:   6D:6E:12:50:6E:5C:6B:0E:DA:E7:EC:10:13:1A:64:8A:AD:73:3E:A3
Authority key identifier: CC:ED:99:20:30:53:1E:7E:8B:51:8A:EF:D9:E2:67:CC:52:8E:DA:9A
Certificate issuer:       /CN=cced992030531e7e8b518aefd9e267cc528eda9a
Certificate serial:       018F88247122D9E6B98447C867287FE286B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.mft
Manifest number:          09B2
Signing time:             Fri 17 May 2024 20:00:40 +0000
Manifest this update:     Fri 17 May 2024 20:00:40 +0000
Manifest next update:     Sat 18 May 2024 20:00:40 +0000
Files and hashes:         1: RvYIwRdT5Ruc0fCvQBV1DqHTgro.roa (hash: HBm+SpMYGNkyoa+YZC9dpL7H8k5GmmWxNKmGrJkKP7A=)
                          2: zO2ZIDBTHn6LUYrv2eJnzFKO2po.crl (hash: CG881//Xeix48LL5d6TRDs1pAp3qzvcc5LsBn+WWhoU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:71:22:d9:e6:b9:84:47:c8:67:28:7f:e2:86:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cced992030531e7e8b518aefd9e267cc528eda9a
        Validity
            Not Before: May 17 20:00:40 2024 GMT
            Not After : May 18 20:00:40 2024 GMT
        Subject: CN=6d6e12506e5c6b0edae7ec10131a648aad733ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:4a:bc:b2:7f:3b:28:86:49:30:e6:c5:a9:
                    48:ac:fc:e0:51:93:e5:c1:b4:86:94:f6:cc:3a:11:
                    62:20:ce:b5:25:e2:67:0a:7d:0d:66:60:bd:f8:f9:
                    dc:c4:97:fa:2b:04:ed:c9:d6:82:e0:8d:09:d1:24:
                    50:e3:9b:d9:a2:bf:74:fa:4f:0d:08:b6:fa:d7:aa:
                    dc:5d:f6:d7:58:be:8f:a5:00:80:c1:15:ed:ee:05:
                    02:30:c0:ae:e6:41:9b:af:f7:3b:90:a1:0e:4a:65:
                    14:15:9e:4d:22:94:16:5f:6a:d6:c7:4c:06:9c:4a:
                    48:de:7d:a5:3c:af:35:a0:79:4e:b1:d8:84:08:c9:
                    2a:b9:97:29:03:6b:41:d1:88:6d:8b:6a:4a:bf:d4:
                    92:29:2f:3d:f5:58:9e:23:75:7c:45:ea:35:b4:d1:
                    6d:e0:df:f7:04:49:3a:65:cb:9b:1e:8e:bc:62:85:
                    dc:8a:ea:9a:7a:f3:d5:48:99:80:9d:3f:32:80:a9:
                    67:19:69:d3:c1:24:1f:ef:4c:fb:a8:d6:27:91:2d:
                    67:19:7e:c2:06:b1:c3:53:55:1c:fa:8e:d8:87:c3:
                    43:cc:6b:5e:8f:bf:72:e9:19:77:b4:f4:eb:58:4a:
                    a5:c0:85:02:45:97:36:12:f6:56:d9:71:05:1e:53:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6E:12:50:6E:5C:6B:0E:DA:E7:EC:10:13:1A:64:8A:AD:73:3E:A3
            X509v3 Authority Key Identifier:
                keyid:CC:ED:99:20:30:53:1E:7E:8B:51:8A:EF:D9:E2:67:CC:52:8E:DA:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO2ZIDBTHn6LUYrv2eJnzFKO2po.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a05e77-f301-4125-9118-e4d1f0a27b21/1/zO2ZIDBTHn6LUYrv2eJnzFKO2po.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:44:2b:c9:f6:f3:e3:52:f0:8e:41:1d:24:fc:04:8e:2c:fc:
         fa:8f:b6:39:87:20:fb:72:9e:a9:64:b0:b8:d7:e0:b0:e0:ca:
         cb:ab:b7:05:7d:26:7a:88:68:73:a6:4e:ab:f4:0a:0c:b2:99:
         d0:53:10:21:da:47:65:9a:82:4c:09:01:ea:e0:cb:90:46:41:
         fe:01:4b:ee:e7:f0:72:81:fb:94:74:2d:65:d1:20:94:0d:d2:
         14:f4:ac:32:84:53:3d:01:7d:9c:3b:86:83:a4:54:8e:b3:dc:
         c6:20:15:29:c4:07:da:6d:6e:41:fc:c0:65:b3:1c:8c:97:94:
         06:12:7e:0c:77:62:82:d6:cf:33:ab:c6:f2:41:6e:75:56:6c:
         ba:49:7b:31:82:00:05:7a:e0:97:1a:4b:14:b4:82:04:cb:70:
         ec:ae:5f:c5:75:49:34:24:4a:60:79:b3:0f:ef:90:bb:f4:fe:
         86:84:28:1d:55:64:f1:e9:42:cc:6d:e2:7b:92:f8:0a:ab:4a:
         2f:3f:91:33:75:cf:c7:57:cc:c7:42:d8:05:04:5f:29:fc:ed:
         70:9a:c4:59:88:dd:44:17:3a:94:73:55:72:01:e6:17:64:f3:
         ed:3d:53:4d:76:b8:01:68:ac:bf:7f:28:87:5d:70:7a:1c:0f:
         64:b8:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:02:07 2024 by rpki-client on console-ams.rpki-client.org