Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
File:                     Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft (raw, json)
Hash identifier:          ZLTP9fSjpTI9SrtaIkeot9njBokU2tm6r/sYN4GtshQ=
Subject key identifier:   9E:5B:80:95:A8:68:5C:7B:F2:A6:9A:9B:11:9B:DB:14:CC:34:2B:CD
Authority key identifier: 13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60
Certificate issuer:       /CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
Certificate serial:       018F23EF4103A64F5113760F7A178DEB28B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
Manifest number:          060F
Signing time:             Sun 28 Apr 2024 09:00:33 +0000
Manifest this update:     Sun 28 Apr 2024 09:00:33 +0000
Manifest next update:     Mon 29 Apr 2024 09:00:33 +0000
Files and hashes:         1: 2EIzexQ0O1e6OAwkqoEqc-hS4eI.roa (hash: 9XBVWOg6AwbDq5K8di/+/ApXibs9CxjFDJ0FbrXspZc=)
                          2: Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl (hash: OwoYc+Qd8KObYYF3c1y11eq9hSJhhJW7bCp/GS3E3JI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:ef:41:03:a6:4f:51:13:76:0f:7a:17:8d:eb:28:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133f456d2b82cc6d80b7b1ac571b4787f1569b60
        Validity
            Not Before: Apr 28 09:00:33 2024 GMT
            Not After : Apr 29 09:00:33 2024 GMT
        Subject: CN=9e5b8095a8685c7bf2a69a9b119bdb14cc342bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e0:13:15:a7:66:03:fc:3b:06:c3:d2:dc:83:
                    5f:23:1e:db:b0:4b:5c:24:c3:1b:7e:f6:ff:5e:bf:
                    b2:a8:5a:87:68:92:d3:fb:67:3a:c0:e7:2c:cf:f0:
                    10:dc:a1:0a:18:2b:a9:d8:29:ef:82:8e:4e:09:88:
                    bc:95:3c:21:d9:51:09:da:d8:35:80:22:4e:b1:7a:
                    71:aa:c8:bd:bf:e1:73:93:d9:c3:02:9c:7a:7a:7f:
                    f0:09:60:8b:69:71:98:2c:38:0f:50:de:df:fa:06:
                    de:60:1d:f7:a2:c1:97:db:69:5e:1a:cf:b6:79:76:
                    fe:b8:3f:93:ff:76:23:12:e7:20:55:e8:c7:e1:04:
                    0e:fc:a8:7e:d7:6c:9c:ef:77:6b:24:8c:5f:13:3f:
                    39:28:6f:82:b9:d9:0e:a6:8d:3f:33:be:fe:30:d0:
                    de:ac:f3:0f:73:c0:d0:1c:d2:df:ab:dc:43:fb:03:
                    f6:a2:16:d1:1e:6a:08:0f:de:64:e0:e4:2e:44:bf:
                    32:e7:31:6f:b1:8d:b2:92:19:40:48:17:09:ba:91:
                    c1:eb:0a:13:87:92:94:b9:91:b5:37:12:cb:bc:fb:
                    07:17:43:73:39:13:9b:2d:31:41:d2:c5:c4:89:2a:
                    a5:7d:8f:45:5e:2f:45:2a:b7:0b:9a:e5:38:c9:35:
                    f4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5B:80:95:A8:68:5C:7B:F2:A6:9A:9B:11:9B:DB:14:CC:34:2B:CD
            X509v3 Authority Key Identifier:
                keyid:13:3F:45:6D:2B:82:CC:6D:80:B7:B1:AC:57:1B:47:87:F1:56:9B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez9FbSuCzG2At7GsVxtHh_FWm2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d00210-d685-48b2-8e53-bb2fdca78245/1/Ez9FbSuCzG2At7GsVxtHh_FWm2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:00:f8:7e:ec:9e:a4:aa:1a:c8:ee:17:b0:03:6e:70:d3:ee:
         f1:6a:17:38:83:51:1f:59:0a:77:e0:98:84:a2:4e:f5:f0:c4:
         02:16:ee:8c:d2:ec:ac:6b:71:f1:1d:f6:e8:73:e1:a8:34:43:
         5f:44:07:59:da:7d:7f:78:aa:b4:15:8e:69:5d:0f:a9:75:bf:
         0e:98:27:77:af:3a:d1:b6:58:f2:2a:00:5c:98:d1:ff:65:80:
         1b:1d:f3:ff:ea:5f:99:73:0f:f3:0e:bd:40:d8:30:cc:50:c3:
         03:5f:25:31:04:01:e1:bb:85:1c:0f:f2:4f:34:92:a0:7d:7d:
         b8:f8:96:9d:3e:7e:07:64:61:cb:a9:e9:03:66:e2:87:67:93:
         51:6f:0a:8b:d6:63:32:bd:e3:ae:10:99:c7:43:33:1f:76:02:
         2d:e9:87:3c:fe:b5:2f:26:bb:c8:28:55:a8:a0:a5:3b:39:cd:
         d0:28:58:4d:f6:6e:d7:e3:9f:e8:dd:05:b3:68:c7:78:ea:e4:
         85:ee:f6:be:ed:3d:e5:2e:60:0c:37:0d:ff:fe:c9:5a:11:5a:
         70:26:94:12:38:82:f7:7e:a4:32:88:54:dd:45:c3:4a:f9:29:
         ac:52:f8:32:f5:15:0d:ca:92:37:84:38:44:61:9f:f5:eb:58:
         f3:e4:51:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:33:26 2024 by rpki-client on console-ams.rpki-client.org