Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
File:                     F9vVrPH5x10YofdQMRFMSPCyM2M.mft (raw, json)
Hash identifier:          /SBOkyMlkgO+1WZzo8V+SqX85iGKF+DQQkDFt6IYVoU=
Subject key identifier:   D8:67:F2:C4:54:C4:29:C2:DD:1D:DF:60:EF:6D:67:9D:5D:39:F8:C8
Authority key identifier: 17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63
Certificate issuer:       /CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
Certificate serial:       0190298244466FBC348E2EA5F73FC2BF14FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
Manifest number:          11CA
Signing time:             Tue 18 Jun 2024 04:02:01 +0000
Manifest this update:     Tue 18 Jun 2024 04:02:01 +0000
Manifest next update:     Wed 19 Jun 2024 04:02:01 +0000
Files and hashes:         1: 1-r2YH42SRoVFiIYfpX9dfOJc5-k.roa (hash: OiNMq8FZEpOgDgTyZtkm4smH0LJsIxEU7vjE8kIiqBg=)
                          2: 1FS0VoSubdhEQ399wLCks4MOU_E.roa (hash: w6duaT7EU6ALdQ3N1EX0bnDAcmcAmWDqE1ULKZhch9o=)
                          3: F9vVrPH5x10YofdQMRFMSPCyM2M.crl (hash: IWCh1Hn16eEjOzPL6GXyBCgPfiKosrbJapgIrf1xKUA=)
                          4: N7jc_-UwG0He_UI7UPF4CSv8WrM.roa (hash: q0xsX4ohT7ePtc6+9uBVyHfygE4TSg/PbTnLZGFdYLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 19 Jun 2024 04:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:29:82:44:46:6f:bc:34:8e:2e:a5:f7:3f:c2:bf:14:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dbd5acf1f9c75d18a1f75031114c48f0b23363
        Validity
            Not Before: Jun 18 04:02:01 2024 GMT
            Not After : Jun 19 04:02:01 2024 GMT
        Subject: CN=d867f2c454c429c2dd1ddf60ef6d679d5d39f8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:95:83:e0:86:40:d9:95:ec:39:f4:9f:db:
                    18:66:96:51:cd:d0:35:78:6f:1f:75:33:30:75:e7:
                    79:71:83:a9:71:5d:8e:64:68:89:0d:b6:64:05:be:
                    83:0c:c8:f8:42:ab:08:8c:07:7e:79:04:0a:14:59:
                    10:c0:f5:00:2d:e5:32:13:da:6f:c2:12:06:12:a6:
                    89:a4:1e:3e:07:9e:9f:f3:ca:72:65:28:4a:ee:81:
                    66:62:be:60:7b:bf:cc:0f:cc:e9:dc:e5:63:2c:06:
                    72:83:50:a1:5a:5a:c9:92:d0:4b:54:12:aa:4c:fb:
                    c8:63:14:cd:8c:1c:79:c1:8f:84:e5:6b:de:a1:f4:
                    d3:fd:37:73:ba:c3:36:43:55:aa:dd:fc:4c:13:d9:
                    aa:89:62:93:c9:db:84:71:9d:cf:47:b0:2c:18:b7:
                    ad:fa:b3:3a:c3:57:44:c9:62:48:9c:9a:63:45:be:
                    94:77:0a:f5:e7:78:6f:a4:06:c8:33:f5:c9:e2:81:
                    26:bd:6d:79:f8:72:6d:ee:64:79:9d:02:27:24:11:
                    10:55:1e:4a:24:7b:91:c9:a5:d0:3b:3f:90:2e:a9:
                    b5:70:a9:b9:08:9c:15:33:36:b4:ec:8d:9b:29:69:
                    ed:8e:a4:06:60:e6:12:aa:a3:2a:81:4b:96:31:99:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:67:F2:C4:54:C4:29:C2:DD:1D:DF:60:EF:6D:67:9D:5D:39:F8:C8
            X509v3 Authority Key Identifier:
                keyid:17:DB:D5:AC:F1:F9:C7:5D:18:A1:F7:50:31:11:4C:48:F0:B2:33:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9vVrPH5x10YofdQMRFMSPCyM2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/29199f-f6cc-448a-bfd4-581db87c821e/1/F9vVrPH5x10YofdQMRFMSPCyM2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:a6:68:64:8b:d4:70:32:35:f4:9e:5c:59:fe:34:7a:63:d2:
         d3:cf:41:49:b0:fd:83:c0:47:8f:da:5f:a5:af:e6:fe:9b:0b:
         d0:05:81:40:74:03:cc:e1:cf:d8:95:ed:db:63:94:b3:1d:f4:
         b9:1b:74:ff:1c:83:5b:bf:14:aa:21:20:71:07:d6:eb:1b:d3:
         27:6f:fe:08:bf:94:04:98:f2:df:07:78:b4:d3:d4:4b:59:a8:
         92:30:97:7c:c6:c9:24:69:c5:6d:3b:55:63:83:2a:ac:46:d0:
         3d:7c:58:e4:c0:4c:15:d3:69:9d:54:65:5b:4d:ba:95:50:61:
         98:6f:dd:a7:a5:ca:84:74:98:19:b4:8a:9c:a7:c3:7c:25:c1:
         bb:f3:5a:f4:30:1f:99:da:2a:77:da:cb:a8:85:51:36:59:15:
         85:f0:98:1a:b6:a6:c3:cd:2a:3f:f3:37:f6:25:48:81:08:c5:
         13:58:36:4f:3e:52:fc:07:ca:75:46:47:2f:39:31:4b:30:e4:
         8d:01:b5:64:59:96:a4:79:35:df:ad:b8:ed:03:dd:85:f4:b3:
         ea:75:c5:8b:b4:2e:a8:84:0d:e7:7b:b7:b6:09:d7:fa:64:93:
         46:fb:bd:8c:fd:69:f0:6a:93:28:c9:a3:63:ce:94:37:67:cb:
         f3:11:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:18:37 2024 by rpki-client on console-fra.rpki-client.org