Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File:                     9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier:          YVV/9uv3cr3XeqLKY3aUgC/fzEYQdSOewKSLWJXeBjY=
Subject key identifier:   9A:C1:E8:AC:D4:A2:7C:A0:3D:F0:7E:D5:25:D0:E7:8A:A7:EA:79:F1
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer:       /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial:       018F874A9A229470CF370BA34CF8EA0D2E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number:          0296
Signing time:             Fri 17 May 2024 16:02:44 +0000
Manifest this update:     Fri 17 May 2024 16:02:44 +0000
Manifest next update:     Sat 18 May 2024 16:02:44 +0000
Files and hashes:         1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: FRGAilNdVnIK5F33Lqt++lsjvI60JBojD7+YRfpJceU=)
                          2: dS28SPTem61f0Cz9-41Su3oP830.roa (hash: pVWH+bibCidT9Hvj6XtCPNnY9GS0bHlNK0YQqGG5mBs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:9a:22:94:70:cf:37:0b:a3:4c:f8:ea:0d:2e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
        Validity
            Not Before: May 17 16:02:44 2024 GMT
            Not After : May 18 16:02:44 2024 GMT
        Subject: CN=9ac1e8acd4a27ca03df07ed525d0e78aa7ea79f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:9a:3d:82:96:b9:a7:47:4c:0f:3d:78:2e:
                    4c:db:81:74:2e:58:b1:cf:95:3e:d9:09:99:47:7b:
                    84:c7:7c:27:58:1f:ee:15:db:5f:b5:5d:5e:7e:d0:
                    a3:d5:5a:02:8e:3c:3e:c4:cd:8b:2a:6f:6f:40:4a:
                    76:b3:49:a9:f1:5e:dd:1a:1f:6d:1e:68:46:d3:07:
                    ce:12:aa:40:8e:bb:37:e5:5f:d7:a7:d3:99:20:f5:
                    a2:36:c4:52:12:57:3c:01:19:f0:e1:c9:74:d9:9a:
                    64:29:91:b5:7b:60:7f:12:ef:b1:65:12:08:bf:e9:
                    d8:c5:9a:93:59:be:a2:99:84:82:d4:b3:cb:b9:ef:
                    55:9f:c1:04:cf:cf:73:53:60:c2:9f:84:7e:6d:8b:
                    b1:9d:dd:02:1e:13:e3:0e:ae:73:1e:a3:ad:8f:8b:
                    55:70:e3:24:25:66:d2:ea:4e:d1:b6:d5:52:95:fd:
                    ee:6d:79:c9:fe:8b:11:04:c0:ea:dd:d5:49:64:3c:
                    be:12:ed:b7:a9:cb:5b:a3:7c:22:55:fd:52:fd:91:
                    2d:35:99:83:26:d0:aa:14:69:cb:ca:cb:9d:3b:eb:
                    f0:1b:67:97:80:18:ac:c6:7d:a0:43:29:9e:65:57:
                    57:e1:40:3c:f4:e8:f4:10:32:06:76:98:7c:af:84:
                    56:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C1:E8:AC:D4:A2:7C:A0:3D:F0:7E:D5:25:D0:E7:8A:A7:EA:79:F1
            X509v3 Authority Key Identifier:
                keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:38:e4:3a:39:74:9b:af:c0:4d:39:91:14:4b:93:70:8c:75:
         1b:a2:c7:ee:29:81:e4:c0:37:83:38:5e:09:04:64:60:6a:c5:
         2f:65:27:5c:73:d5:69:ec:74:76:bd:18:cf:69:48:61:78:8a:
         cb:fa:3a:8d:0e:34:36:ab:19:75:8b:84:8d:96:7b:bc:f8:66:
         7f:6b:c5:9c:88:a8:88:7a:45:c8:eb:19:fc:31:e4:51:fc:a5:
         a7:06:b5:1f:13:41:ba:cb:f6:ba:15:1d:27:3a:2a:39:3b:a5:
         39:32:26:4e:27:31:ee:48:89:25:a6:14:d4:e5:9f:77:f2:30:
         b9:98:85:01:8e:bf:dc:7b:8f:34:9f:2d:1f:cc:60:92:d9:22:
         56:5f:a1:4e:36:67:3a:d7:d9:be:40:da:93:03:8f:c8:ee:9d:
         74:33:f9:2c:ee:6a:33:4a:31:62:26:82:dd:c4:73:b4:a6:d0:
         3b:fe:7c:2c:e0:47:65:d9:0d:8d:76:4a:7e:84:db:c2:ec:03:
         09:6c:45:9b:9b:ee:d4:89:5c:98:3e:62:95:f3:e8:e8:e0:19:
         ec:44:1d:c8:79:e3:0b:7d:84:21:f5:86:86:df:f2:7c:20:17:
         67:61:6a:4d:8b:4e:44:31:f7:2e:27:a8:5d:68:c6:24:d9:6e:
         3a:c9:ef:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:45:46 2024 by rpki-client on console-fra.rpki-client.org