Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
File:                     l9nve9MDJN7fcLrOS72ldgwyaxo.mft (raw, json)
Hash identifier:          g1ywo1qLE3GsLq1M5hTdWy4dLSyk+dA3hXWXU9j7/Fc=
Subject key identifier:   C9:A5:29:EE:59:FB:75:F5:11:0D:7D:12:94:11:FB:75:4B:51:76:4E
Authority key identifier: 97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A
Certificate issuer:       /CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
Certificate serial:       018F87ED880510687A1DAD95370FEAE14BF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
Manifest number:          0A3F
Signing time:             Fri 17 May 2024 19:00:42 +0000
Manifest this update:     Fri 17 May 2024 19:00:42 +0000
Manifest next update:     Sat 18 May 2024 19:00:42 +0000
Files and hashes:         1: IRlpu7LqAELyw5oyPu2jL_iQOvI.roa (hash: SqOv9Gq8bJnQYzfXnmYE9BsbWHRFyitsP1MvnfmuGJY=)
                          2: l9nve9MDJN7fcLrOS72ldgwyaxo.crl (hash: Bvy2RjjVyQsFwkz7QA7ZQ52Uc1RPvMsPrgszgcI/h+k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:88:05:10:68:7a:1d:ad:95:37:0f:ea:e1:4b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97d9ef7bd30324dedf70bace4bbda5760c326b1a
        Validity
            Not Before: May 17 19:00:42 2024 GMT
            Not After : May 18 19:00:42 2024 GMT
        Subject: CN=c9a529ee59fb75f5110d7d129411fb754b51764e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:24:a2:3c:3c:75:94:e2:68:41:b1:ec:17:8a:
                    11:b7:e4:7a:52:46:7c:da:c5:c2:ec:e7:d4:0a:6b:
                    51:b0:3b:e9:20:d3:65:c6:f8:9d:a1:d8:8b:80:ee:
                    ab:28:dd:4b:6a:33:81:08:84:9a:9b:34:b8:c2:58:
                    c4:18:76:5e:3f:69:e8:5f:f7:3a:ec:74:e3:c8:2e:
                    82:85:b8:60:d2:14:66:79:45:97:06:f7:6a:61:23:
                    e3:34:ee:04:9e:a8:b8:ff:21:88:17:a1:4a:f7:12:
                    77:d8:39:4d:52:3c:e8:83:68:d6:42:35:9a:10:b7:
                    c3:bf:42:0a:9a:17:ce:b5:56:b6:e2:d9:b0:ae:24:
                    20:11:46:aa:ab:a1:29:0a:e6:d4:91:24:1f:6f:23:
                    11:c3:27:c0:12:7b:e7:72:26:e0:6e:5c:67:9d:4b:
                    5b:9b:eb:73:f3:e9:b1:f1:17:ae:fb:b8:8f:34:25:
                    e4:15:c1:ac:74:63:45:fc:f1:49:45:85:70:2b:0d:
                    e2:60:a7:f3:cb:05:17:fb:15:72:61:ea:f8:9c:87:
                    56:c7:d1:d7:53:bf:59:b0:e0:d5:b8:3d:de:43:2f:
                    f8:90:66:3a:90:23:2b:36:32:13:10:e1:21:b6:56:
                    70:37:ad:23:73:db:f3:25:1c:bb:e5:da:d1:98:37:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A5:29:EE:59:FB:75:F5:11:0D:7D:12:94:11:FB:75:4B:51:76:4E
            X509v3 Authority Key Identifier:
                keyid:97:D9:EF:7B:D3:03:24:DE:DF:70:BA:CE:4B:BD:A5:76:0C:32:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9nve9MDJN7fcLrOS72ldgwyaxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/l9nve9MDJN7fcLrOS72ldgwyaxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9b:cd:17:03:a9:91:6c:50:93:6f:41:29:77:27:80:a2:5f:
         9d:8c:a9:17:75:b2:1f:40:25:79:fd:12:13:c0:19:73:dc:db:
         91:a3:94:51:f0:e3:78:91:c3:b5:ea:3d:b3:92:23:57:86:4c:
         86:d1:f9:b4:ad:66:62:ba:6a:66:77:c1:7b:9a:0d:d0:49:3a:
         6c:4d:86:38:0a:06:f5:81:a0:c4:92:f8:76:2d:82:3f:08:d0:
         07:6f:bd:55:79:77:9b:97:c1:27:74:7e:4a:80:e3:3b:e9:71:
         62:64:8b:f4:69:d3:b8:af:bb:aa:8c:03:35:69:d7:d3:9a:fe:
         4f:fa:d1:34:c2:c3:f2:cd:71:9a:0f:93:ac:75:dd:a8:97:c9:
         78:e1:14:b5:c6:ff:fd:37:8e:32:bc:03:d6:0d:ba:b6:d8:de:
         55:a2:0a:fc:1a:56:38:69:a7:80:94:a3:10:2f:e7:90:3c:cc:
         e2:19:56:5f:60:7c:58:c4:9f:82:45:c3:5b:4c:5e:ef:a2:df:
         3d:92:d2:ff:39:dc:6c:b6:4e:07:03:2a:95:cc:94:8d:59:ad:
         8a:b5:a4:49:e6:a7:54:0d:50:47:42:e1:12:05:e7:43:86:11:
         46:54:1f:5e:2d:72:f6:46:57:c2:4c:b9:29:f5:b5:50:76:5d:
         d5:77:85:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:17:09 2024 by rpki-client on console-fra.rpki-client.org