Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
File:                     ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json)
Hash identifier:          xzEbQJzxmvjKj1tCzuoF2SfJHR6RBHb22L2A+iuUELo=
Subject key identifier:   3D:44:40:83:A8:0A:E0:97:FE:E9:90:0C:0D:16:F2:E6:5B:EF:AB:B1
Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C
Certificate issuer:       /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
Certificate serial:       018F885B2E6B57511B886126C46DC9189B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
Manifest number:          0266
Signing time:             Fri 17 May 2024 21:00:28 +0000
Manifest this update:     Fri 17 May 2024 21:00:28 +0000
Manifest next update:     Sat 18 May 2024 21:00:28 +0000
Files and hashes:         1: bwCJcd9zFE8BrUhi591ieSk8Lbs.roa (hash: 6qP9Jj6MJuqo/RoraE7qSg04aYeIqOuytcHkOoshRhw=)
                          2: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: z8FQ9pZ6ZFFoeEIZNAES0X5Qp6L7NJIRZi8MDlghSqk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:2e:6b:57:51:1b:88:61:26:c4:6d:c9:18:9b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c
        Validity
            Not Before: May 17 21:00:28 2024 GMT
            Not After : May 18 21:00:28 2024 GMT
        Subject: CN=3d444083a80ae097fee9900c0d16f2e65befabb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:64:54:27:ae:b5:a1:c1:17:f0:75:31:44:4a:
                    18:02:eb:fc:18:1d:30:97:a2:32:26:03:aa:8d:fa:
                    bf:e1:d3:03:46:8a:c5:a0:ec:ff:9a:53:9b:d5:86:
                    a8:64:0d:1a:8b:e6:57:59:3c:33:67:a1:01:7f:23:
                    7d:fe:f7:ee:1f:b7:32:50:f6:a2:c4:c2:4d:67:42:
                    47:0e:b6:d3:97:f6:f8:4e:25:30:97:77:8b:7d:84:
                    1e:ef:9a:7b:de:61:6a:13:49:e4:41:07:c9:42:90:
                    6b:2a:2e:84:49:8a:1b:11:02:41:13:a3:2e:a0:0c:
                    e9:4b:9a:db:95:d6:d6:5f:ba:2a:74:61:4c:a9:a3:
                    de:ed:25:24:f3:8c:91:0d:01:02:46:9a:aa:6e:d0:
                    9d:b6:a9:0c:4d:20:f9:a7:2e:b6:d9:c4:3f:b8:ab:
                    b3:64:e7:18:78:42:5e:a7:2b:b5:20:5c:24:9d:9c:
                    81:23:02:a4:ec:11:82:f9:b1:9c:92:df:93:b9:c7:
                    97:10:b6:6e:6a:b5:97:80:70:5a:0a:1b:ed:f6:83:
                    a2:d4:de:9b:b1:d5:67:98:39:23:26:ad:2c:96:25:
                    38:a4:5d:2c:78:ff:87:73:37:53:a5:94:76:61:34:
                    8a:d4:16:31:ed:5b:37:0a:47:fa:b1:c3:21:10:7d:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:44:40:83:A8:0A:E0:97:FE:E9:90:0C:0D:16:F2:E6:5B:EF:AB:B1
            X509v3 Authority Key Identifier:
                keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b6:ac:93:45:f4:f8:70:ed:f7:78:7f:53:93:e4:32:cb:30:
         7a:a5:0e:84:58:73:49:ac:47:57:f9:ca:3c:8c:cd:89:ac:16:
         6c:44:21:52:a7:3b:13:f5:d8:6d:94:ee:cf:e0:f8:76:b7:6c:
         5a:bd:4b:7d:1e:e1:50:1e:75:3f:b8:05:8d:47:19:b1:e5:61:
         55:30:01:09:84:2e:d5:b4:16:bc:b8:7b:c9:d9:ba:d3:bb:a6:
         d8:ed:58:fa:d9:6f:03:b3:84:d5:82:8b:a6:e1:ab:2f:dc:68:
         98:bc:b6:29:f5:10:ae:41:55:31:4e:99:4f:70:2f:82:c1:60:
         96:22:7f:61:b1:2b:8d:6a:6c:a6:28:e9:a3:d6:20:9c:aa:5a:
         66:f0:1c:4e:3b:0c:42:67:7b:5e:b9:03:88:59:80:02:3c:0a:
         43:3f:8b:71:c6:5a:97:32:29:91:00:8d:c0:da:58:d7:0f:6c:
         43:56:9d:0d:b8:7d:9a:e9:cb:f1:95:82:80:8b:d3:11:0f:53:
         e2:3c:63:f4:51:41:db:02:2b:ec:0d:02:ef:96:53:90:3f:72:
         ab:ac:3f:a0:0c:87:91:04:4e:74:d8:ca:cf:e2:92:58:e9:57:
         40:b0:8d:22:ff:39:16:a2:7e:ac:b2:8d:7c:8c:30:fe:5a:5a:
         78:ad:48:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:44:30 2024 by rpki-client on console-fra.rpki-client.org