Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
File:                     CcdG9nt6xW6m3YWVHsAiy71nrwY.mft (raw, json)
Hash identifier:          IuYzvMeWLUacjj0InL9EFRosSY0cwfaBdAUvu5LNeU0=
Subject key identifier:   8D:B3:BC:18:65:02:D4:33:5B:5F:8A:33:62:8A:06:5E:48:4F:D9:9A
Authority key identifier: 09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06
Certificate issuer:       /CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
Certificate serial:       018F45A2269981E7C9E4B7D937C4E6D92150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
Manifest number:          0E80
Signing time:             Sat 04 May 2024 22:03:25 +0000
Manifest this update:     Sat 04 May 2024 22:03:25 +0000
Manifest next update:     Sun 05 May 2024 22:03:25 +0000
Files and hashes:         1: 1ctpF4qbES0uhVgaWT70mRT3eto.roa (hash: PK8LOJaDo9tm6Xn25GLaqg3rfxRH8R/d2CIwxxqNg8k=)
                          2: CcdG9nt6xW6m3YWVHsAiy71nrwY.crl (hash: yMl2/8eWGAXNC/77CFC3t0Gk9+xmNSq+5v9jx7KsLtA=)
                          3: lXz1SIbXuevEbshGOg1tJCah0Co.roa (hash: JUSXp+S1N2Jq0Dh6YSmdaeiL1gSi3RKjT8DceACDbfc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:45:a2:26:99:81:e7:c9:e4:b7:d9:37:c4:e6:d9:21:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c746f67b7ac56ea6dd85951ec022cbbd67af06
        Validity
            Not Before: May  4 22:03:25 2024 GMT
            Not After : May  5 22:03:25 2024 GMT
        Subject: CN=8db3bc186502d4335b5f8a33628a065e484fd99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:30:7d:38:07:cb:81:86:5d:ff:a3:43:7a:f0:
                    fc:b1:89:4c:f6:64:ad:8d:91:44:d9:72:cd:20:a0:
                    e1:20:74:41:44:68:b8:6e:f3:11:06:4f:99:cd:89:
                    86:61:e2:b5:d0:83:4c:48:7c:50:73:37:71:d1:f2:
                    7b:6c:02:9e:cc:82:33:f5:79:e0:98:f8:ae:14:7d:
                    53:f7:7d:62:3a:f3:1f:b6:e0:7b:1b:22:d5:7c:42:
                    ff:d3:ad:db:96:88:67:40:ba:75:3b:d4:2c:aa:0a:
                    d5:b3:c4:b9:3b:1e:b6:02:c2:10:a6:7f:64:90:b2:
                    aa:63:83:d8:ab:79:30:59:3b:f2:2f:ec:c0:45:a8:
                    aa:bb:de:2b:ce:a5:0f:83:65:e6:5f:c7:da:32:a4:
                    cc:20:e0:43:52:05:2e:89:ac:1c:f9:09:4b:dc:0b:
                    0d:8d:f4:78:0f:2a:37:97:a7:17:be:cf:ad:d0:91:
                    ee:df:39:6c:9b:d6:6e:60:f5:23:65:ed:27:ea:11:
                    4e:12:8d:b3:60:88:79:89:64:a2:bf:ec:ff:f2:62:
                    85:83:0a:4d:d8:ae:d6:f5:8e:fa:f1:e5:26:be:8a:
                    6e:14:7d:be:b0:47:d8:6e:2c:ab:95:95:c8:1b:eb:
                    9d:fe:bf:03:89:dc:f3:af:c6:f7:1b:8b:6f:c3:42:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B3:BC:18:65:02:D4:33:5B:5F:8A:33:62:8A:06:5E:48:4F:D9:9A
            X509v3 Authority Key Identifier:
                keyid:09:C7:46:F6:7B:7A:C5:6E:A6:DD:85:95:1E:C0:22:CB:BD:67:AF:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcdG9nt6xW6m3YWVHsAiy71nrwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/93af97-3b9e-4961-8904-a6f611a8ab93/1/CcdG9nt6xW6m3YWVHsAiy71nrwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5e:8e:5e:f0:cc:57:5e:f1:04:89:d6:a8:f3:3e:6b:65:54:
         31:53:c2:48:9d:62:08:c8:79:c7:7d:46:6b:f8:8f:f4:b8:9f:
         dc:28:47:6e:b2:79:60:cf:db:33:ea:7f:6e:68:fe:2d:e9:48:
         43:e2:4f:12:d9:32:6a:42:85:ac:fc:43:89:6f:43:37:89:8d:
         8f:a7:f1:66:28:13:9f:5e:00:b4:8c:da:70:45:23:67:54:1f:
         a3:d1:ec:0b:6d:0c:ea:e9:63:9a:25:45:fe:16:e9:06:46:cb:
         1d:53:87:d6:15:71:96:dc:1e:b3:7b:13:3c:32:c6:39:92:eb:
         3f:79:a8:1b:a2:dd:8d:77:aa:cc:17:3c:b4:fd:28:a9:23:fc:
         c7:6c:6e:4f:30:b1:05:6f:9b:b5:1a:52:ac:46:3e:b3:54:97:
         30:b3:92:09:be:ec:26:5c:d1:83:76:2d:70:c4:04:0c:7c:65:
         2f:bf:ce:ba:07:6e:aa:4a:7d:01:c1:c3:a8:7d:e0:34:d4:f3:
         73:67:36:9d:19:94:8a:c2:30:c9:1b:eb:91:74:cb:67:3d:c8:
         bd:a1:df:0b:c5:48:c4:96:0b:0b:2c:f7:c9:3a:f6:2b:31:53:
         89:3f:7d:71:05:fc:0d:b1:37:48:13:a4:51:0c:fa:84:84:d1:
         7b:63:44:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:33:22 2024 by rpki-client on console-fra.rpki-client.org