Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File:                     fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier:          +jwMwG94oQvalzXZbSirqb5rpi5eAQ6Vf/4jQu4DcNg=
Subject key identifier:   11:FF:B6:93:EA:AF:4B:3B:1C:B2:61:36:20:13:D9:E5:85:CB:63:0D
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer:       /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial:       018F8410760D7B98ADA59032B01D6CC484A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number:          D9
Signing time:             Fri 17 May 2024 01:00:22 +0000
Manifest this update:     Fri 17 May 2024 01:00:22 +0000
Manifest next update:     Sat 18 May 2024 01:00:22 +0000
Files and hashes:         1: HQoBO9RjdKLwoeqksuokxbJaWSk.roa (hash: 8W9rkB3Ok/L8J6IbT/biCZe+0F9+oEYB21b5LmVm4uc=)
                          2: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: /cx6Pa8bkz8x5W4U39cZD7MkZ68ZvwBepAnvaYZlgLg=)
                          3: ggPwk8LfPP6nN88mJrj6tRZAul8.roa (hash: AxVmlOce7azlxfdG+/ZZQi9BMCg4g4YvdGpdEeGf9S8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:84:10:76:0d:7b:98:ad:a5:90:32:b0:1d:6c:c4:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
        Validity
            Not Before: May 17 01:00:22 2024 GMT
            Not After : May 18 01:00:22 2024 GMT
        Subject: CN=11ffb693eaaf4b3b1cb261362013d9e585cb630d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3a:49:eb:0c:8c:ca:3d:79:6a:99:89:21:86:
                    81:f8:11:9a:f5:28:b5:51:f5:dc:18:60:14:50:9f:
                    3e:ca:fd:6d:bc:a3:16:70:7e:d5:9b:01:5d:20:d6:
                    d9:bb:da:dd:1a:bf:ba:46:8a:9e:f8:22:c2:92:44:
                    52:5a:80:34:f5:e5:40:e9:ee:0c:83:29:c0:dd:03:
                    40:bf:15:86:46:aa:db:f9:25:c7:49:3c:66:94:eb:
                    b4:27:70:83:0b:c5:9c:61:a9:07:54:df:c6:59:cf:
                    38:30:81:64:e6:59:fc:6e:de:d1:37:b0:b3:c3:a5:
                    d9:cc:84:df:67:85:69:ad:9e:f8:22:3f:cf:2d:2a:
                    d8:70:f1:92:36:56:fd:9b:07:97:0e:20:17:85:8e:
                    3b:e0:99:94:c1:9e:03:96:0e:cb:b3:a8:cc:5b:b8:
                    f0:24:b8:2c:59:b9:1f:bf:ac:66:69:74:d5:48:dd:
                    3e:11:f0:c8:85:e4:74:e4:b6:67:b8:d5:9f:6a:53:
                    78:2e:b5:65:da:10:ee:cc:02:5c:ea:de:e8:25:8c:
                    64:24:43:99:09:ea:24:ee:ea:eb:23:9b:a6:e4:2c:
                    d5:b1:9a:d2:9e:06:f0:1b:54:98:b8:6e:45:76:95:
                    e6:46:61:b9:7b:b1:6d:4f:f2:26:4e:67:5d:75:73:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FF:B6:93:EA:AF:4B:3B:1C:B2:61:36:20:13:D9:E5:85:CB:63:0D
            X509v3 Authority Key Identifier:
                keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ba:fd:21:77:e3:69:59:60:de:25:83:8b:e3:1e:4c:a9:4e:
         7c:60:60:b1:06:98:f1:0e:7c:17:e3:aa:06:d6:3e:b0:e3:d8:
         a4:5e:00:21:da:af:50:9d:25:1d:63:04:64:15:52:60:86:9c:
         63:01:5d:39:94:25:3b:aa:f0:5a:cf:63:64:3f:e0:4f:1a:65:
         cf:46:b8:b6:5a:21:31:b1:3b:40:34:38:fd:88:13:75:1b:c5:
         81:1d:05:1c:87:da:74:d3:3e:9b:22:9e:c8:27:a2:f7:d6:be:
         5b:d6:f7:f1:20:99:db:45:8a:49:0c:f2:3e:f1:fe:48:7c:46:
         21:8b:46:54:c3:37:34:bf:e4:0f:e7:50:08:93:27:ad:a4:2b:
         5c:e5:d5:37:2d:29:a1:64:41:ae:c4:b1:44:28:5e:25:57:6c:
         4b:93:60:31:9c:1e:4c:0a:6e:46:73:33:ee:cc:88:1c:49:bf:
         2c:d9:c4:e2:15:42:84:88:58:63:1e:d7:ce:b2:25:05:7c:f2:
         d2:6b:66:38:65:8b:ba:25:d8:99:df:b8:6a:04:93:11:6a:59:
         d6:22:2e:fe:02:4d:50:33:62:a6:f7:f3:82:62:c0:09:ca:1b:
         e1:7e:c6:6c:7b:86:34:f7:85:ce:6b:cb:fb:c3:44:13:11:06:
         44:9a:95:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 02:19:37 2024 by rpki-client on console-ams.rpki-client.org