Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
File:                     2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft (raw, json)
Hash identifier:          Ntm8InkthYtGPV9SgtRb37EK+UJbcA6nwd8XuBUKYvU=
Subject key identifier:   B1:9F:80:78:BA:84:7A:D2:E2:90:AB:3A:B7:0C:8B:17:D3:06:9C:FA
Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88
Certificate issuer:       /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
Certificate serial:       018F532788C7089BE5679F8CBAAF480104BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
Manifest number:          087D
Signing time:             Tue 07 May 2024 13:04:10 +0000
Manifest this update:     Tue 07 May 2024 13:04:10 +0000
Manifest next update:     Wed 08 May 2024 13:04:10 +0000
Files and hashes:         1: 2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl (hash: lDEQGoHNPN+axBtYeAj6eCXTR7xNcSlIuoLC4Yoh4AM=)
                          2: 6KYERBRl5ekA-7sjOqzF05qJa5A.roa (hash: nDQLNcVbt7VFw1Xequ9PZpxUx2QrU9GV2wW34LaLUM0=)
                          3: 6eM8-2F9vQoJbxGw5IcYcs9sfXQ.roa (hash: 3BR/5GtSs881nrEofnh0BcIZaw3nXw8inMB5Hpf5omU=)
                          4: Dy6XhSxZqckgA0viJWcHEMwk3CU.roa (hash: PuvDB8xpvlN4yV07agPsntCXqt75SkI8d+65HAK3nqg=)
                          5: aFw08flLxetDI7put7ijDiQwuzw.roa (hash: pB6AxYZ8Msaleq4Kryl0IACx+7bt1YZa5fUgxDV60IE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:27:88:c7:08:9b:e5:67:9f:8c:ba:af:48:01:04:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888
        Validity
            Not Before: May  7 13:04:10 2024 GMT
            Not After : May  8 13:04:10 2024 GMT
        Subject: CN=b19f8078ba847ad2e290ab3ab70c8b17d3069cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:32:f3:c1:6b:00:17:22:5a:6c:bf:61:62:
                    1d:7c:51:2c:1d:eb:ad:96:a0:df:a6:eb:05:98:cb:
                    46:f7:61:e7:86:c3:76:43:09:22:3f:eb:79:f2:ad:
                    d1:e3:ec:fd:89:83:d2:b4:bd:79:e4:77:86:2f:c9:
                    7f:28:aa:e0:b5:fd:82:a0:ae:95:34:16:30:a9:bb:
                    f0:d7:4e:82:a8:78:02:d3:47:43:bd:53:d0:41:36:
                    2d:60:7a:7b:4d:22:7a:b4:a6:3b:51:cd:0c:06:fd:
                    5d:7e:0b:8f:1a:8e:60:64:38:6e:6f:8b:8e:91:d0:
                    7b:c9:4a:db:05:00:c6:86:bb:3e:fd:b4:76:d1:a9:
                    e0:31:0f:c1:2e:aa:f1:1d:6f:7d:5f:9b:25:32:20:
                    73:06:a2:75:38:84:76:88:26:96:75:9a:6f:f8:f3:
                    36:06:ee:89:b4:a5:68:ad:e8:b9:f5:1d:9f:fb:27:
                    82:c7:47:96:ac:ce:ca:d3:df:23:12:0c:85:fd:4f:
                    8f:94:a4:d2:ca:33:38:d8:16:e0:36:2e:87:b8:ff:
                    5a:ae:f8:5c:00:d6:15:f5:04:a3:d3:11:ce:3b:47:
                    2a:08:93:bb:e8:ed:b3:73:29:3f:3b:32:88:a5:da:
                    08:5e:c5:f8:98:ef:b0:bb:48:14:47:da:6c:b0:b2:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9F:80:78:BA:84:7A:D2:E2:90:AB:3A:B7:0C:8B:17:D3:06:9C:FA
            X509v3 Authority Key Identifier:
                keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:78:3c:d0:6f:3f:c5:75:7e:1a:06:85:38:b5:82:44:fb:5e:
         4c:1d:30:47:a7:49:c2:2e:63:22:18:0b:e5:4d:78:f0:7a:45:
         42:96:96:3a:6d:50:d6:15:5f:d1:82:87:5f:92:d8:ed:c0:6f:
         60:a2:34:54:ad:71:20:31:22:11:0c:8e:1b:d8:cd:15:3a:ac:
         e1:c3:f0:69:1c:90:1f:ab:ab:ac:5e:20:54:b6:93:c1:00:6c:
         91:68:3d:65:f2:97:4c:48:b9:c6:ea:22:3c:89:b0:9d:76:10:
         70:bd:47:4a:44:ad:56:3f:3e:eb:52:fd:bb:2c:c0:60:e1:0b:
         7d:c0:d3:0f:d4:21:21:c7:6c:0b:26:51:c1:c8:9c:fa:7a:98:
         5d:a1:de:17:34:82:89:23:59:d5:c4:89:ec:55:4e:f5:e2:a0:
         da:8a:20:06:d6:d5:09:06:2d:a4:e1:00:22:24:4a:ab:08:7e:
         b2:9a:a9:e4:45:68:03:13:96:41:fb:d5:99:4a:ef:18:c4:c3:
         56:3a:53:b1:fb:f3:f5:1e:be:ed:29:86:36:2c:96:87:5e:1c:
         17:71:10:e7:00:09:92:52:dc:ad:5b:c3:ef:d3:fd:4f:17:66:
         49:5b:f0:63:35:04:b7:7d:dd:4a:14:67:9d:09:9a:34:41:fa:
         3e:4b:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:50:26 2024 by rpki-client on console-ams.rpki-client.org