Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
File:                     f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json)
Hash identifier:          blyOGgDq1kmz2wiQa0f9g8giHzhfD5nGWEqZucNLZ3I=
Subject key identifier:   4D:3F:86:AE:72:3B:B7:FA:61:96:77:26:5D:5C:C2:54:DE:5C:B7:55
Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E
Certificate issuer:       /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
Certificate serial:       018F87B6B8CC49767A4BB3CD86212C74ECE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
Manifest number:          0CFF
Signing time:             Fri 17 May 2024 18:00:50 +0000
Manifest this update:     Fri 17 May 2024 18:00:50 +0000
Manifest next update:     Sat 18 May 2024 18:00:50 +0000
Files and hashes:         1: UrXeYZV5KYbluNmIOyV48FxaP00.roa (hash: IRT7Pkrr6E9u8IBPjeY5rl1BDmgfgI4Cllo7ibszJ08=)
                          2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: FTxNpHds2IsLwSO+SFRKpMBNaMSz6rDp2NbYeUDLr68=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b8:cc:49:76:7a:4b:b3:cd:86:21:2c:74:ec:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e
        Validity
            Not Before: May 17 18:00:50 2024 GMT
            Not After : May 18 18:00:50 2024 GMT
        Subject: CN=4d3f86ae723bb7fa619677265d5cc254de5cb755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d1:17:8c:f8:9d:ab:27:91:0f:1b:bf:49:46:
                    9c:be:4d:0f:fc:44:6a:60:a4:34:90:4e:03:f5:71:
                    a3:49:39:e9:a5:cb:81:6e:bb:e4:90:70:e6:2c:49:
                    f7:9b:5e:0b:f2:3c:02:61:0e:7b:42:c4:e3:28:63:
                    85:c1:92:30:98:38:c1:e1:84:98:6a:c0:d9:5f:85:
                    f0:c9:0a:dc:64:ba:34:68:53:bd:a3:59:83:71:d4:
                    47:48:07:4a:0d:2a:fd:a5:7e:ae:c9:32:3d:5a:9b:
                    66:85:1a:3b:e9:87:03:bc:81:4a:c8:37:42:a2:9e:
                    4c:3c:35:e0:ec:bb:28:4a:e8:2c:df:45:a3:88:d2:
                    a8:db:f3:0d:47:06:46:ea:ae:8c:94:97:7b:57:30:
                    55:bb:c2:c7:87:b9:01:fc:22:5b:61:f0:f3:6a:f1:
                    68:d6:d9:c4:4a:ac:23:47:e6:ff:4a:f3:44:6b:fe:
                    15:25:34:a6:2b:77:f4:64:34:46:ca:16:cd:69:cd:
                    b6:a1:1b:bc:76:db:2a:ad:f0:90:16:a8:16:b0:e1:
                    83:36:c2:36:88:0d:25:89:0f:5f:b7:cd:42:af:ca:
                    0a:8b:5b:e1:fe:9f:a4:ea:8a:df:8b:f4:08:15:5c:
                    e5:f4:00:b2:2a:d6:20:b4:3f:2f:69:d7:f1:24:32:
                    a5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3F:86:AE:72:3B:B7:FA:61:96:77:26:5D:5C:C2:54:DE:5C:B7:55
            X509v3 Authority Key Identifier:
                keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:37:c9:43:9e:e5:ed:65:04:3f:1d:12:d4:49:af:44:cb:73:
         bf:6b:95:0e:a8:75:ca:20:62:e3:99:01:ce:5a:db:58:19:7b:
         f2:d9:43:f6:65:d9:7e:d7:d0:70:27:7b:34:35:1a:85:34:0f:
         e0:5e:7e:68:68:ab:e6:d9:d9:55:59:08:b1:80:ea:6b:b0:8c:
         5b:fd:94:09:df:7b:dd:da:28:d4:31:fb:95:81:24:9b:b6:66:
         84:b5:19:ad:10:5d:0b:af:18:0d:ef:c5:14:29:33:fc:22:85:
         2a:c7:bf:91:e2:c8:d6:20:be:d9:a6:7b:e5:32:c3:aa:e8:3a:
         1f:42:0c:23:41:e4:30:80:22:87:82:e5:82:96:99:c6:1b:75:
         f3:23:3c:ec:2a:5e:ca:a7:ac:8e:e5:e0:ea:37:03:d6:59:d7:
         9b:23:b7:10:52:98:56:cf:2b:cd:4f:e0:16:5a:c1:3e:63:fd:
         d4:fb:ed:ed:af:c2:23:e7:49:52:e0:03:cc:b2:1f:2e:03:5a:
         da:06:46:7d:86:ed:24:05:c2:b4:85:a3:13:dd:db:e1:4d:56:
         f2:bf:e1:b8:27:16:49:0b:51:65:b1:25:81:34:39:7f:3a:db:
         c7:25:d3:15:4d:9b:e5:d9:64:42:84:93:12:23:bf:d1:fd:eb:
         64:7b:f9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:09:41 2024 by rpki-client on console-fra.rpki-client.org