Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File:                     9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier:          Mh23g5KpVdPAgnI94TWMh8f52JjyDW4AENr1VTrb3Fs=
Subject key identifier:   74:9B:E2:D3:DD:7A:57:42:E0:0B:63:45:BF:77:D3:D1:58:96:B5:33
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer:       /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial:       018F4D908233E59C17861B1355A0B85C91E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number:          1162
Signing time:             Mon 06 May 2024 11:01:07 +0000
Manifest this update:     Mon 06 May 2024 11:01:07 +0000
Manifest next update:     Tue 07 May 2024 11:01:07 +0000
Files and hashes:         1: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: zqwNVaaLx699uY5dfmBuuDXG9W3PNgx6sd1L2J6QS8I=)
                          2: EuZZYs1ux7ko6Ld0WZdZoRAspWU.roa (hash: RimTCikNuxS+lLrBLGRdc74URoWKUr7llCfvCzCqoF8=)
                          3: p2XgZRftuXbkyYprJT-DqxtHS9M.roa (hash: MPXlnMODjBG4sxcK9Xlq2Vnt63961YoyJGIpBsGQTNs=)
                          4: qZLmA4iMZWKshNHs3uKmEIz97m4.roa (hash: Rbp8c7aHRhodj2N2DGqczKQq7xzt60K6dzUp04MHp2U=)
                          5: wZEOjcoo85pAvXxxWdGDX6eIbZ4.roa (hash: o94qISSYE0VF9jgB5SRetJScgKtiYiOPwgO+sLoqd0A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:90:82:33:e5:9c:17:86:1b:13:55:a0:b8:5c:91:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
        Validity
            Not Before: May  6 11:01:07 2024 GMT
            Not After : May  7 11:01:07 2024 GMT
        Subject: CN=749be2d3dd7a5742e00b6345bf77d3d15896b533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ef:83:c3:2f:d5:4c:23:ad:ad:2a:3b:11:1e:
                    05:f5:66:1e:bd:3e:0d:76:9c:60:2a:53:2a:6e:72:
                    a7:9d:63:c9:29:bb:d2:3a:60:59:cb:3f:4d:4d:38:
                    f7:85:7d:74:d9:d4:88:c6:aa:8a:70:5d:56:88:54:
                    83:85:1f:29:46:b0:f9:b2:55:21:72:a3:c3:49:f7:
                    32:48:e5:66:63:99:ce:ae:6d:af:74:93:b5:98:bd:
                    77:27:77:1a:00:33:f0:c3:4e:2d:bd:ba:3e:13:0c:
                    d8:ff:1f:17:ae:af:02:90:fe:22:20:94:a9:f3:42:
                    69:4d:09:4c:75:29:52:74:b0:7a:dd:e1:f0:69:8e:
                    ef:62:07:fc:ed:5e:c1:98:08:78:d1:7c:3d:15:f5:
                    e9:fe:7b:d7:e8:25:ba:1a:e7:89:a4:51:46:97:c6:
                    94:13:e2:5f:e4:1b:04:5e:e0:55:3f:c0:fe:fb:f8:
                    0c:5a:94:89:cf:dd:a5:43:1c:a7:c3:e1:ac:7e:ed:
                    2e:2e:29:74:75:5b:b2:3b:29:8f:67:cd:0b:ef:51:
                    6a:4b:e8:86:0e:75:ca:59:49:1f:44:85:10:36:07:
                    51:5c:4e:7f:b9:8f:3a:36:61:8b:12:0f:1a:5c:1e:
                    01:72:32:f4:74:c8:a6:e8:45:43:60:f8:92:3c:b3:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9B:E2:D3:DD:7A:57:42:E0:0B:63:45:BF:77:D3:D1:58:96:B5:33
            X509v3 Authority Key Identifier:
                keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:cc:0d:68:6f:2b:1c:39:91:32:02:c8:96:c2:a1:79:f9:b5:
         0c:ba:fb:94:8f:af:37:33:29:fc:d3:09:bd:e4:03:1c:61:69:
         b5:c1:3d:6c:ef:43:a0:04:0f:74:85:52:26:7c:6a:db:f2:8f:
         44:27:e1:68:83:55:22:58:ea:a9:7e:f3:35:1e:fa:67:35:8a:
         ad:ce:9a:8c:38:c4:74:2c:3c:f7:2a:b8:63:39:fa:7d:26:60:
         37:c0:d3:de:a1:97:22:31:93:6e:95:11:47:1a:c0:9e:4e:12:
         3c:a6:7f:f3:db:70:73:48:86:1d:7b:f6:7e:77:dd:c3:38:ec:
         ad:88:86:35:99:d4:ce:ea:c1:f3:3e:e2:3d:6f:4d:af:a9:7e:
         42:7c:e7:b9:44:22:7b:97:79:9d:3e:1c:c7:31:f0:34:67:af:
         49:4f:2f:be:41:67:dc:27:a3:ad:f2:6c:35:d0:39:a8:f3:a1:
         b6:a9:dd:79:db:6f:f4:0d:2b:8e:d9:fb:fb:cc:c7:47:2e:e9:
         53:f5:b3:d2:12:76:fc:4e:cb:f2:50:e9:b2:d3:66:4d:1e:cf:
         31:38:71:7a:90:1b:35:9b:2e:3d:84:f7:9c:ab:72:5c:0d:11:
         fd:aa:52:3f:82:fc:47:80:0e:26:d7:d6:1e:34:e3:dc:4a:dd:
         7c:8e:8a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:19:23 2024 by rpki-client on console-ams.rpki-client.org