Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File:                     9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier:          +ZclyTmuS0g1QzK9ygoYb+dK/4n0IqnEg1KY+R95biA=
Subject key identifier:   9F:1B:73:6E:48:54:81:6A:31:EB:84:9E:F4:A4:65:10:CE:60:07:75
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer:       /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial:       018F3BF857942FC7390C3E570D6204587783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number:          0F45
Signing time:             Fri 03 May 2024 01:01:22 +0000
Manifest this update:     Fri 03 May 2024 01:01:22 +0000
Manifest next update:     Sat 04 May 2024 01:01:22 +0000
Files and hashes:         1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: pRViNcUCng/8IDWmOJ6OAk5AZl10tJD3533aUkDuPSQ=)
                          2: LYSdWEpG1pJ1UCe9MBmxu5qaEoE.roa (hash: 5SHmDvGXrtjSLp3RHZqp3Uj31CEiWlUOwDUOgQWDEu8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 00:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:f8:57:94:2f:c7:39:0c:3e:57:0d:62:04:58:77:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
        Validity
            Not Before: May  3 01:01:22 2024 GMT
            Not After : May  4 01:01:22 2024 GMT
        Subject: CN=9f1b736e4854816a31eb849ef4a46510ce600775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:c9:5c:e2:cf:c2:c9:d0:72:42:bb:42:89:
                    f1:7e:66:f0:32:d4:5f:ab:52:f6:ab:77:3e:b0:55:
                    a4:f9:77:f8:e1:5f:79:af:0b:3c:2f:f4:95:4e:69:
                    d5:67:bb:4f:6a:1a:d9:97:1e:25:5e:a3:cf:1b:c4:
                    ab:02:0b:a7:42:97:9f:89:91:ce:4d:2d:ac:94:cb:
                    0b:e1:40:db:47:c5:c6:76:3e:bc:a3:e4:e1:f2:ae:
                    44:35:ac:13:d2:8a:9d:28:2f:1b:f3:1c:1a:fe:ae:
                    81:2e:88:ff:6c:2c:78:e5:49:ab:02:bb:c8:dc:fd:
                    3e:62:7c:1b:d3:57:fb:9d:67:8b:13:06:05:e3:6a:
                    0a:25:f5:c1:3b:e6:56:f4:d2:3c:52:9b:42:a6:92:
                    bc:ee:2a:fd:af:db:d9:24:14:12:e3:3d:c4:c4:b1:
                    b9:2b:f0:e8:27:23:28:f6:2c:e2:44:f3:e3:69:8b:
                    74:c4:8f:61:64:e8:cc:26:d4:1a:d9:65:c6:8f:55:
                    a6:f3:f3:1f:05:cd:f0:d6:ca:9b:31:78:2d:ea:71:
                    3b:48:5c:ba:ab:ca:16:7f:f5:fd:a4:87:aa:4b:ca:
                    18:85:b4:b4:d5:04:1a:9a:06:d6:17:d4:13:81:ce:
                    71:6f:60:65:ce:30:d1:d3:7d:57:cd:b0:cb:03:c1:
                    c2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1B:73:6E:48:54:81:6A:31:EB:84:9E:F4:A4:65:10:CE:60:07:75
            X509v3 Authority Key Identifier:
                keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:9c:b4:5f:5d:69:f3:b0:2f:bc:ed:9c:38:1b:79:0c:ae:ef:
         79:b5:28:96:f3:c9:37:ea:e5:a7:10:49:e0:2f:6c:8d:7a:f9:
         1c:cf:db:47:6c:64:a9:a4:8e:ff:57:21:e0:19:60:5b:8f:fa:
         33:9c:69:ad:4e:5b:19:4e:6e:3b:07:9f:6d:a0:e5:b4:54:18:
         85:d3:90:b9:9c:a8:21:88:94:29:5f:eb:6e:ee:ea:e0:5f:91:
         df:2b:3e:f9:33:3c:37:82:84:be:ab:87:bb:cd:22:5a:aa:36:
         8a:64:dd:3b:7a:1d:c1:1e:5c:d5:9d:6a:b3:ed:ef:e4:70:2e:
         98:dd:32:0e:4b:30:7f:2d:a3:e7:39:8d:4e:8b:33:46:61:8c:
         e1:84:ad:f3:30:16:ba:cc:05:4d:80:e5:6d:f2:4e:91:45:38:
         23:8d:30:cc:a9:e9:68:fe:65:fc:20:01:b9:e6:91:75:f2:aa:
         28:33:09:87:88:33:d6:35:2c:5a:d6:b8:4b:33:12:93:fa:f1:
         d9:76:86:84:f5:31:33:df:e1:07:e6:d3:16:44:e7:eb:f7:59:
         1d:68:7b:61:82:7b:a9:e7:69:21:3f:c5:bc:2f:41:0b:58:b4:
         c7:f5:32:b0:e3:2e:0e:81:1b:c5:0e:3e:1d:7e:75:44:43:40:
         1b:a7:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:36:25 2024 by rpki-client on console-ams.rpki-client.org