Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File:                     aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier:          uDk+O+4STXPVnPcUPRWAygAsIid2lHfTkHeY5xffPds=
Subject key identifier:   5C:5A:72:0B:81:D8:FE:19:75:D5:DC:7F:D3:28:1C:FA:78:BA:D8:0E
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer:       /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial:       018F87B66D2B3B2D9063440D071FEFE5AB21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number:          02C9
Signing time:             Fri 17 May 2024 18:00:30 +0000
Manifest this update:     Fri 17 May 2024 18:00:30 +0000
Manifest next update:     Sat 18 May 2024 18:00:30 +0000
Files and hashes:         1: 4_1ElJtDQ3FY7IxlFZG4IIXy3Pg.roa (hash: ZQgjM+e5kyfdW9DS7ZOAd9sZdmcX0NlwHP7webnbwG8=)
                          2: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: TUorUJo8mRkOiEWT3kAuFeLD+3cNJcfYeJs8ague5jc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:6d:2b:3b:2d:90:63:44:0d:07:1f:ef:e5:ab:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
        Validity
            Not Before: May 17 18:00:30 2024 GMT
            Not After : May 18 18:00:30 2024 GMT
        Subject: CN=5c5a720b81d8fe1975d5dc7fd3281cfa78bad80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:da:42:47:ac:35:3e:07:cb:e8:db:f7:dd:
                    b2:d1:08:17:3c:f4:0b:b9:a9:50:fa:ea:fb:f6:28:
                    4f:24:fd:09:36:60:c1:b7:fc:a9:a9:b6:c0:52:16:
                    f5:2a:4b:06:89:97:38:4d:51:14:2b:da:3a:19:3b:
                    55:ae:90:6f:26:fb:de:f8:a2:13:f3:de:f7:49:ed:
                    27:4f:88:ba:b6:a3:6a:37:4d:05:dc:69:76:d2:68:
                    6b:9b:19:d1:35:fc:27:bf:54:9b:e8:6c:61:10:a0:
                    c1:15:bf:67:91:14:db:e1:4f:50:2a:0c:9a:90:14:
                    c2:48:40:86:33:5d:16:2c:62:b4:04:b6:ed:68:ed:
                    0a:76:5c:ec:4e:13:ae:a9:f3:d3:37:6d:98:f2:e4:
                    db:c9:39:3e:21:e8:89:f8:88:cd:bb:cd:5f:9b:7a:
                    36:8c:c6:4f:90:32:54:35:63:83:8f:57:9a:d5:8b:
                    bf:18:52:e2:6d:25:66:5f:68:c4:cd:87:74:28:5c:
                    a0:f8:7a:97:24:b5:53:a0:d5:41:02:1f:ce:9b:0f:
                    75:e8:46:dc:7f:78:2a:f9:93:09:00:8e:5f:41:a2:
                    1d:92:62:ee:26:e6:8c:2e:60:4a:5a:31:d7:6d:23:
                    c8:63:0c:6c:19:cd:92:d6:48:83:2a:2c:a7:6a:59:
                    a9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5A:72:0B:81:D8:FE:19:75:D5:DC:7F:D3:28:1C:FA:78:BA:D8:0E
            X509v3 Authority Key Identifier:
                keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:29:77:4c:8d:c3:8e:00:21:e4:b0:3a:ff:6a:b8:2d:64:ce:
         26:d4:29:2a:13:0b:52:01:31:ad:ac:7d:0b:54:ec:84:0e:37:
         fa:66:b9:08:4b:18:2a:5a:25:17:6f:af:cc:da:88:7d:56:a7:
         a1:b8:b7:ef:77:e2:4d:7e:70:d0:4d:06:29:3b:94:3c:8d:ac:
         ba:c6:51:30:03:f7:a8:d8:09:c5:f5:35:0c:9a:e3:72:41:22:
         22:4f:5d:b2:92:16:2d:68:76:0f:f2:67:56:a0:a6:5b:9a:d5:
         52:f8:c2:f0:d3:a7:96:20:0c:a2:51:ee:e1:1a:b5:97:a3:e6:
         b3:c7:bd:45:05:35:27:f2:35:bb:9c:02:ac:b6:9c:bb:fe:c3:
         a5:4a:f9:5a:04:59:86:7a:a8:91:0a:98:e3:1a:a5:51:59:f8:
         f8:ea:ba:bf:96:5a:73:a5:d6:05:54:d9:a5:c6:19:15:15:20:
         6d:d3:3c:d1:76:3a:fe:ce:8a:57:dd:da:ac:16:94:7d:17:82:
         b2:b2:27:a8:f8:55:6d:95:ed:b5:af:7a:6f:3e:f0:0a:29:d6:
         9b:b3:fe:b2:2b:70:25:c6:1c:bf:f1:54:fd:19:c9:93:b8:5a:
         02:bc:e5:b0:c0:f7:ed:c4:0b:b1:a0:2e:76:03:db:1d:db:38:
         ca:dd:c8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:10:40 2024 by rpki-client on console-ams.rpki-client.org