Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
File:                     RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft (raw, json)
Hash identifier:          F+MhWn2oESqPo86CiUqGi+AMpy6GZISCd4Rd69oTlko=
Subject key identifier:   E9:FA:CF:A5:E2:B7:CD:66:92:E8:65:03:E7:84:C4:DF:7B:03:D0:6B
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Certificate issuer:       /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial:       018F874A2623F8F10252E85EE3EA97C45F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
Manifest number:          1209
Signing time:             Fri 17 May 2024 16:02:14 +0000
Manifest this update:     Fri 17 May 2024 16:02:14 +0000
Manifest next update:     Sat 18 May 2024 16:02:14 +0000
Files and hashes:         1: 0hnLckQ5u2EIhSUlq9Z5RtNiTnM.roa (hash: 19SJjaivFAbVRczQ+EjvauRhnNaG22pxZ0XkkJ7ohvc=)
                          2: 1--9HzWUN4Zms4phwaMtfRkmPwuU.roa (hash: QCs8b0Mt7GG2+D3IHc7pSfKPUZEXRERAReT7lfg2kOw=)
                          3: 4YoTrMYsGaMYHxRnEqgcg_cMVU4.roa (hash: wYtD8IQfPDq8fhWI3l1ZE5I+Mmb5cXVGlsC+hhza/jA=)
                          4: 8nUMk0ZLdg4r1bX9hPaRnyTpa00.roa (hash: KWd6bRvadTngjr+4tKWBVRMhH6nzdvPiQYnxoA5SdH0=)
                          5: AFDW-TeYyjaXjrsqzNH_PMys9Kw.roa (hash: XNXUFKZDBpqz72TdXhTTtJXF4FkEX1N21QqOdHQFFv8=)
                          6: AimmUuuiRmnYNq9BoxTIc-4oHQI.roa (hash: r2sfOvpw5l/lU4CfwBxOhbP2IGUMf996HYj/YdegMiQ=)
                          7: JbNoC95w1JQtWygUocBhQxahhfw.roa (hash: oSqHY8wrfsHUCJnTv6dBbHL24NN7EUdvpj9xGsnyrLY=)
                          8: Jiyp13OcrtiHeqI8Ya--4azX0WI.roa (hash: rPlPGcy6FqQWuDn5doXE8Z1d1aAzd2Av1oqyKqSFolA=)
                          9: LgJzXa3xS73sERAxBxtag5k1Tjs.roa (hash: iu95ONtduTtI/FrTz2W4Tg8MIyeml9oGI6nwimOAwbM=)
                          10: Q3Y3Ok1moLR6Sw7Xz8fDLPd8QhE.roa (hash: 56lCxziyfEbm1iw/2KMvPZreRnpLBGkVJqcvrTLC3Qc=)
                          11: RCF7eHvLUMV2rrGrW9ncmRUGiZg.roa (hash: gNGuH0skSTcqMsPZzfpNalK08YIauMV9EZnsZ9Dw97Y=)
                          12: RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl (hash: BhOUynFrRM84/X8KbNu6dsHiOkd5t/D/+pQd5t5Sk+I=)
                          13: W6yOl6slDOB1FMq9IzS5UOO5Tr8.roa (hash: zYsqCBhpeX2biH8hIs/uDdIZ2YYRsLJj3yAwBTrTj+w=)
                          14: _5MrvEw54wKIIe1TTqIpJ1VNQQY.roa (hash: 0ny9HmXZO/e8gI0JwoTMf3pWHCckocrlDhhHmLul0/c=)
                          15: b5xwVTx7ETHPITRmh-4LGQ3dwNY.roa (hash: Zg9yc2HTMK2oGNUAOZjjO8OYsdq70UTjZXgAaDIzow4=)
                          16: cLUo_2VhPxkq0M0Z6ddXrv-jO2I.roa (hash: bGLgXGDM0rPSzEjiIvttzeM9TwFiFW3XOo6CXAxMLqg=)
                          17: ehX_FzwyPyV_VrqaOsuIT6XbuUQ.roa (hash: 5zF4iSUlvLefN5X1xcizcdv/ZVrx8VoGJD3UFrklqmg=)
                          18: hHUX6sbKqsn82eHrypcYvrrRBSo.roa (hash: j4BYR+vsmkyNoGhXq23kDy53WaAc/wCfhOcRha6S6wY=)
                          19: j-9U4DI-atm6fVgm8PUjxMDP77A.roa (hash: RiBlLkYIVdXTqFRMsrzca7dzWOHxAsdA7F4xMAYbS0g=)
                          20: ohIAeCvbtcSAnkbl8jHDndTBHO0.roa (hash: NLzPbPvpp6PSUqDBOtXnng7EbD7hS0CwGeg1eCAgKxc=)
                          21: qNrodSNfhjHrt-CL3KWtpv_qCIs.roa (hash: 06GXtuProy1u14ttbaFRl2phzgrBlEySLQ625/xJTeY=)
                          22: ra9LDKfHxZhP9Ccq4PeQ0RFFBuY.roa (hash: COzU7zKQ73gzjJw/3uNpZRxfqgSUTcYhcKZQCFAv3vQ=)
                          23: xLgokziNR-YYQ6AMg7k4DpqeIbY.roa (hash: 6ESA9VZ6paosGSkbHx0VY5ShC77wNeSwlr/q7Ng5v7w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:26:23:f8:f1:02:52:e8:5e:e3:ea:97:c4:5f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
        Validity
            Not Before: May 17 16:02:14 2024 GMT
            Not After : May 18 16:02:14 2024 GMT
        Subject: CN=e9facfa5e2b7cd6692e86503e784c4df7b03d06b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:78:94:dd:71:78:6b:64:55:10:9e:90:b6:
                    51:cb:b6:26:71:3e:b4:b4:d6:1c:d9:3d:01:e6:89:
                    74:46:c2:29:1c:01:f4:ec:2f:93:40:e1:90:03:5d:
                    36:51:0f:5f:d0:2f:94:63:7d:9a:f9:20:6a:f0:4d:
                    09:93:98:e0:be:48:22:83:ac:a1:98:eb:1a:a5:6c:
                    1c:15:74:cf:24:4e:0a:5a:fd:d6:a4:a0:f5:f2:2b:
                    ff:af:5b:40:cc:66:fa:95:92:62:48:94:45:41:df:
                    dd:76:d2:d8:e1:83:b1:2f:64:e8:5c:b4:35:09:a3:
                    aa:2f:67:3f:89:1f:8e:2c:ce:fa:5c:70:55:4d:49:
                    bc:24:94:d4:42:8f:d1:48:c2:ad:8e:7b:6d:75:c8:
                    f1:22:c0:f1:bd:d2:6b:e6:a5:19:3b:19:44:86:12:
                    ac:6d:c2:59:af:eb:51:e3:e7:e4:03:e5:ad:0d:b4:
                    15:fc:17:bf:2f:cb:0e:a5:c7:03:58:1d:30:90:79:
                    44:37:3f:09:d4:0a:d9:b2:8e:eb:a0:f5:01:e7:c4:
                    95:ac:fc:d3:3b:66:8e:e9:b2:ef:19:d0:94:8c:89:
                    69:e9:e2:fb:bd:7e:b8:dd:8d:84:85:80:67:e9:d1:
                    b2:6e:02:af:1f:17:52:e7:91:f0:ae:9c:7f:8a:d6:
                    1c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FA:CF:A5:E2:B7:CD:66:92:E8:65:03:E7:84:C4:DF:7B:03:D0:6B
            X509v3 Authority Key Identifier:
                keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:18:d8:7a:95:85:7b:70:31:25:ed:ca:fe:8e:85:07:37:56:
         62:49:04:20:a5:4e:2a:8e:9e:57:4c:0b:c8:30:38:45:c0:06:
         d4:e5:58:c4:2a:20:d2:21:fa:d7:bd:d6:39:83:98:1a:89:98:
         d9:fa:ac:30:29:08:1a:dc:66:bb:3a:00:40:d0:1f:95:84:51:
         9b:d1:fc:0e:05:a7:ce:61:31:bb:08:01:f2:61:82:c6:f9:e4:
         c7:0e:96:4c:49:dc:5d:0b:6b:50:54:35:2c:16:1a:79:d9:fd:
         37:35:ac:4b:c0:6f:f8:3e:ca:34:d4:e6:af:6c:ee:8f:5b:e2:
         84:2a:12:16:9f:0b:6d:a4:d8:0e:56:f8:aa:e4:3b:a5:03:2d:
         28:5b:4d:26:01:95:cc:83:08:71:25:fc:0a:e4:7d:73:6d:59:
         14:13:ae:92:60:02:57:1e:a4:75:86:8e:6f:6f:60:ec:ba:55:
         c3:11:5e:f6:eb:22:44:c9:64:fb:62:d9:19:18:1f:d2:31:20:
         ce:c5:15:fd:79:1b:9a:7e:e0:93:7b:7b:74:28:d0:49:8c:69:
         d9:80:81:70:b5:a7:b1:d3:57:37:75:47:49:4c:24:4a:91:47:
         26:34:f6:5a:30:fc:46:c2:b7:33:54:fb:de:20:16:0e:00:9c:
         95:fc:e3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:08:45 2024 by rpki-client on console-ams.rpki-client.org