Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
File:                     v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json)
Hash identifier:          wwBF/nuFb6eF6uyndvuClZH4M10lLK6FROIm9CeU798=
Subject key identifier:   D9:EF:E4:71:FD:BC:58:25:0A:31:CD:33:AE:57:42:F8:EC:89:A8:F7
Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B
Certificate issuer:       /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
Certificate serial:       018F8749AEBD0AB8E63CDBB9B2766BBC1711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
Manifest number:          0A6E
Signing time:             Fri 17 May 2024 16:01:43 +0000
Manifest this update:     Fri 17 May 2024 16:01:43 +0000
Manifest next update:     Sat 18 May 2024 16:01:43 +0000
Files and hashes:         1: UdndFC58SkQuCEHWpsZPCw1kkrc.roa (hash: 6h/c94WjdNGidGK6BWLzTjj0MfTfEP53N3h2viPAQu8=)
                          2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: gxnih6SdX2tbkFVrFavPQMS5OgFcG8oPpfKwrpT+DTk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ae:bd:0a:b8:e6:3c:db:b9:b2:76:6b:bc:17:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b
        Validity
            Not Before: May 17 16:01:43 2024 GMT
            Not After : May 18 16:01:43 2024 GMT
        Subject: CN=d9efe471fdbc58250a31cd33ae5742f8ec89a8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:f6:3e:d5:79:d2:51:bf:b7:e9:16:3f:c0:
                    43:e3:72:79:52:87:e1:5a:b4:86:ae:1a:04:9c:aa:
                    60:a4:26:c2:ef:40:ce:d6:db:db:25:17:c4:0b:0f:
                    69:e3:94:61:66:c0:a9:00:86:4e:be:bc:42:b7:e5:
                    c6:ed:3b:8f:24:1b:cc:81:d5:ff:76:db:7b:6e:73:
                    b1:2b:04:07:33:c0:d2:37:0c:5e:d4:31:89:66:74:
                    05:b9:e6:f6:7a:f2:79:1a:fa:94:90:23:d8:bc:06:
                    bf:5e:cc:64:24:36:45:60:5b:06:bb:ca:31:8e:30:
                    d8:5d:49:71:31:31:e1:e6:cb:fa:88:47:43:85:97:
                    79:01:55:38:aa:cc:73:a4:de:a0:ed:1f:1c:b6:da:
                    07:08:a3:dd:d0:2c:01:7f:2c:bb:70:cb:c8:ab:99:
                    9f:a9:4b:06:c7:1c:7e:c0:ec:4a:bd:4c:56:95:6a:
                    0e:55:cc:b5:ea:d2:0e:ed:c6:7a:91:67:88:eb:0c:
                    62:b2:7b:f7:e4:a3:dd:41:bd:cf:83:db:6f:d3:c7:
                    4d:98:bc:d3:91:ce:5b:72:18:dc:5d:01:b7:f6:d6:
                    59:24:da:f9:df:3b:f6:c6:c1:db:a4:f9:c9:08:60:
                    85:73:e2:4e:97:be:83:b5:f8:d1:b0:b2:e9:c1:5e:
                    f1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EF:E4:71:FD:BC:58:25:0A:31:CD:33:AE:57:42:F8:EC:89:A8:F7
            X509v3 Authority Key Identifier:
                keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ea:c0:2d:1b:79:ae:70:d5:e8:46:81:19:02:34:2d:c0:af:
         3e:e7:17:f5:d8:45:c9:16:ab:7b:ec:a7:d8:a9:17:8e:08:a4:
         8a:3d:e3:53:a6:72:d7:9f:79:cb:30:16:ba:4a:30:49:2c:94:
         a3:90:33:23:a8:01:ed:fe:7d:07:75:0a:8e:4c:e2:f8:4f:ab:
         53:83:82:79:f9:63:2c:69:8e:5f:d2:df:39:3b:ae:49:01:fb:
         ab:65:96:70:dd:f6:c8:17:54:c2:2a:42:72:74:fe:80:5d:8d:
         fa:c8:b9:56:2c:1f:8b:db:ae:62:78:b8:74:66:8a:d6:c6:b0:
         bc:47:ff:5f:45:45:be:4a:fe:1a:dc:e9:31:be:af:08:0f:07:
         a0:ce:2d:a6:be:ba:9c:a4:d2:29:78:d6:73:b5:74:8a:35:4f:
         47:a4:97:49:ee:97:d1:9a:8f:1b:d2:f0:03:be:a9:3d:48:93:
         dd:41:fc:25:8d:86:e9:71:1f:12:b5:d7:25:d6:67:c9:c0:9c:
         5f:31:67:ad:61:e9:b8:b8:8f:1b:b5:6d:5a:d1:93:5d:ed:73:
         af:ea:be:1a:d8:f0:ab:70:7f:2c:b1:14:ca:db:a8:86:e5:6d:
         c9:a4:92:54:1f:20:21:bd:8a:8e:95:64:76:fa:0e:d2:ea:7c:
         a0:ba:da:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:44:47 2024 by rpki-client on console-ams.rpki-client.org