Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
File:                     b9M_nmhWjdYFvJKvwe9raeEnq9g.mft (raw, json)
Hash identifier:          VMyHHH48lI/eOEC6CzvjaT0Z1WHDCLaLEutzTbbLRXI=
Subject key identifier:   55:E0:A2:5F:17:1C:32:FA:C0:5D:3C:1D:52:AF:94:12:9D:2B:81:B4
Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Certificate issuer:       /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Certificate serial:       018F8748C1D743B96429EE4C12D28505E6BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
Manifest number:          0AE3
Signing time:             Fri 17 May 2024 16:00:43 +0000
Manifest this update:     Fri 17 May 2024 16:00:43 +0000
Manifest next update:     Sat 18 May 2024 16:00:43 +0000
Files and hashes:         1: IXUniQOuTGZA2YukI1HFBrTejbg.roa (hash: 11OyDR3wuZYHtRhb/X/hse2aIQRHuAUz+ETU6uPig7o=)
                          2: b9M_nmhWjdYFvJKvwe9raeEnq9g.crl (hash: /XZu6rymrpZ/5Tu8y4hcisYMUuvjxlm4ypKjziUDRN8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:c1:d7:43:b9:64:29:ee:4c:12:d2:85:05:e6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
        Validity
            Not Before: May 17 16:00:43 2024 GMT
            Not After : May 18 16:00:43 2024 GMT
        Subject: CN=55e0a25f171c32fac05d3c1d52af94129d2b81b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b5:2e:15:5b:bd:fd:35:ba:32:84:20:ad:54:
                    db:ef:37:be:87:52:7b:06:44:25:2f:3f:64:dd:46:
                    c2:20:a2:25:8b:43:85:13:4d:0c:e7:40:fc:0a:9c:
                    03:3a:0e:b9:7f:6b:55:0e:e5:88:e7:a8:d0:ee:bd:
                    77:0d:b9:29:dd:bf:4c:c7:82:c2:69:22:5c:24:62:
                    5f:08:3f:14:f6:f1:80:fa:a2:18:dd:e0:5d:02:c7:
                    25:88:38:dc:16:e5:f1:2d:93:83:1b:9a:72:05:2a:
                    1a:ff:61:63:08:1f:e1:20:4f:dc:51:d2:dd:ed:a1:
                    df:a9:38:59:6c:6e:ee:a1:83:d4:1d:d0:4f:af:c1:
                    83:b4:f6:92:b3:ee:64:f7:ec:0e:85:9a:7a:ac:2e:
                    79:45:1c:16:62:84:ad:1e:a1:76:82:ca:c3:e3:8b:
                    47:f7:45:d7:d5:be:76:80:ed:07:c9:67:99:46:4b:
                    c4:1b:71:46:fc:ca:60:1a:6e:28:f4:5c:a2:95:d6:
                    1d:2c:2d:78:16:94:4d:75:c5:8c:ac:13:11:c5:4d:
                    12:55:3b:19:ac:ec:08:81:a8:be:fe:c6:2f:ef:97:
                    d9:dd:4c:fb:5b:fb:80:3d:15:c4:0f:e7:1f:93:71:
                    05:46:89:0d:af:32:73:6b:c8:07:34:48:4e:c6:30:
                    6e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E0:A2:5F:17:1C:32:FA:C0:5D:3C:1D:52:AF:94:12:9D:2B:81:B4
            X509v3 Authority Key Identifier:
                keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:ba:bd:f6:22:dc:e9:64:19:8b:3a:68:bd:a0:f5:12:2a:
         d2:a4:46:3e:ed:8d:f3:64:8f:da:73:5e:87:df:38:e6:af:6e:
         13:c8:27:a0:4d:a2:e1:24:69:15:8c:5d:c8:5a:b9:18:48:5a:
         f2:a6:8a:e1:66:78:fb:d5:ca:05:bc:f2:ef:5e:1a:bd:24:b4:
         d2:2e:ab:76:e4:9b:09:80:1e:df:ca:69:79:2b:f4:67:8c:40:
         a4:36:0b:b6:6e:91:1d:c8:b0:8a:1b:61:10:38:a0:73:51:1b:
         58:79:2d:0e:cd:9e:34:64:6b:19:f6:ed:d6:38:3c:c3:fd:a3:
         91:61:f1:6d:59:04:d7:65:ea:f3:51:42:ba:c1:c8:b5:ab:a7:
         4c:07:11:cd:c7:a2:d4:04:a7:41:44:1f:97:9e:2e:54:62:6c:
         d9:f6:0a:00:7c:21:8d:5a:ac:e3:e5:8e:1f:fb:d8:d7:7e:96:
         dd:2e:3d:33:ee:79:9f:0c:46:b4:de:94:17:61:3e:c2:92:b0:
         01:4a:86:9d:39:39:59:58:58:95:b7:72:c8:8c:21:13:eb:df:
         9b:47:b5:8a:c2:a0:33:f3:d6:db:ac:25:84:bb:b1:65:40:e4:
         bf:da:0c:d2:89:c4:41:dd:a2:88:c0:24:27:66:9e:18:b7:79:
         62:22:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:51 2024 by rpki-client on console-fra.rpki-client.org