Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
File:                     avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft (raw, json)
Hash identifier:          MMaPdy/dLOmEPEFeekvdZgFJYISuj070HQyWfC2v9Sk=
Subject key identifier:   F2:21:74:B2:A3:9C:67:9B:FB:09:28:09:6B:A0:E7:DC:DC:49:E0:34
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Certificate issuer:       /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial:       018F87B6432EC78B3079C5D3F4CB2DDE2AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
Manifest number:          0C8D
Signing time:             Fri 17 May 2024 18:00:19 +0000
Manifest this update:     Fri 17 May 2024 18:00:19 +0000
Manifest next update:     Sat 18 May 2024 18:00:19 +0000
Files and hashes:         1: YkSODmQWK2LV6cPbww4RkPzIUp8.roa (hash: hkBf+BdQNIgN8IgdXcmtUkpLcOI+u7cXwezFhawWkmg=)
                          2: avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl (hash: sPYDEhU1voU/po5sSLToWhSZL5WaHAfO7g2iWtTdBEk=)
                          3: hug8E-GbrDH-NNJamzlkUtl_fOo.roa (hash: 1iSvprfEIFea8OXFaTaCfQ8mGeEyDOCQGi8wsTrbf68=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:43:2e:c7:8b:30:79:c5:d3:f4:cb:2d:de:2a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
        Validity
            Not Before: May 17 18:00:19 2024 GMT
            Not After : May 18 18:00:19 2024 GMT
        Subject: CN=f22174b2a39c679bfb0928096ba0e7dcdc49e034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:02:fd:c6:27:9b:a4:7d:5e:8f:f0:62:36:
                    eb:49:f6:10:14:90:3c:63:b2:0b:e7:5f:cb:1a:8e:
                    9d:d4:84:54:47:72:18:12:76:4d:37:62:38:75:4f:
                    cf:90:0d:50:22:58:52:bd:57:2e:65:00:41:36:52:
                    54:19:56:a0:83:01:ed:41:bf:5f:dd:dc:89:91:84:
                    98:c7:90:d6:1d:80:b3:fc:4f:b5:bf:e7:29:ca:88:
                    ec:be:22:a0:65:fd:39:ca:eb:30:96:82:4a:db:10:
                    90:15:a9:c0:bf:11:6e:72:97:15:c6:0b:9a:55:61:
                    2a:c4:62:34:71:6d:2e:00:0b:11:1e:b7:8d:1b:94:
                    4b:c0:10:22:75:60:ac:59:9c:57:18:7d:19:bb:bc:
                    4a:bc:c3:e8:05:d8:1a:10:30:c7:4f:26:03:a0:d7:
                    76:6e:0b:b1:a9:a3:47:99:83:07:30:b3:6a:45:92:
                    df:f2:2f:94:17:12:c2:c5:cb:9d:fe:eb:5d:9b:0d:
                    28:60:3c:c3:59:e4:ca:eb:36:d6:e2:82:46:af:51:
                    3b:e6:c0:ae:ed:98:d7:8a:37:2f:1f:c4:a8:c0:e2:
                    98:95:36:3c:c3:4d:5e:9f:c3:c7:80:20:f8:b2:e4:
                    c5:cc:67:da:e5:06:5b:ac:4e:a0:75:26:ee:88:43:
                    04:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:21:74:B2:A3:9C:67:9B:FB:09:28:09:6B:A0:E7:DC:DC:49:E0:34
            X509v3 Authority Key Identifier:
                keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b7:24:a9:38:31:18:9d:ef:fc:33:19:01:71:c9:50:fc:0a:
         bc:b7:61:3a:bf:75:f4:4c:38:bb:b4:cc:da:10:9c:24:ca:e1:
         fd:23:02:2e:bf:24:6d:82:7c:fe:7f:c2:47:c1:d5:bd:98:a2:
         c9:8a:2a:e7:0e:dd:5b:a1:a7:ee:1d:dc:94:49:64:7a:c9:b4:
         b9:05:35:fd:11:3a:ee:35:5a:12:27:1f:b2:00:67:59:76:a1:
         13:15:96:b2:17:2e:73:70:85:e5:84:72:a0:00:61:e9:d3:93:
         0a:cd:b9:b7:b4:f2:7f:1e:71:8a:aa:f7:07:c9:21:d8:9c:ff:
         ab:f7:19:36:2f:2a:fb:e5:50:48:54:de:b8:3c:a9:39:02:48:
         b3:99:7c:74:89:4f:79:34:5a:69:f0:c7:b1:a3:df:06:a9:a7:
         dc:f4:9a:de:c9:3d:9f:7a:b2:24:7c:bd:10:12:b0:c7:22:b0:
         6f:00:56:3c:5b:78:38:5b:5d:41:02:ae:bb:6b:dd:b0:e0:29:
         6a:26:70:27:b6:e6:14:d9:94:1b:61:50:47:95:65:1f:5b:2e:
         e9:28:06:fd:1a:93:27:20:dc:60:80:b8:27:06:c1:0e:87:72:
         4c:01:d9:77:eb:a4:15:7c:d0:d7:44:6d:51:1a:b1:1d:9c:c3:
         2b:60:6e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:11:16 2024 by rpki-client on console-ams.rpki-client.org