Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
File:                     cGmgJahPQu8-8LYFLeP9ZejAhpI.mft (raw, json)
Hash identifier:          F5MVN/6qH1DgGF9x1jUprWgxnxuKww21mnuKdIlew4g=
Subject key identifier:   A4:43:3E:36:6B:2A:41:DD:2C:CC:56:E9:14:D1:4C:89:9D:93:C5:B1
Authority key identifier: 70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92
Certificate issuer:       /CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
Certificate serial:       018F874AEDA41A831E9BEBD9D813B5F0461B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
Manifest number:          09A0
Signing time:             Fri 17 May 2024 16:03:05 +0000
Manifest this update:     Fri 17 May 2024 16:03:05 +0000
Manifest next update:     Sat 18 May 2024 16:03:05 +0000
Files and hashes:         1: 1MHjz11tSDSzqTLg4pv0prV8I4s.roa (hash: /f9tshTvtqrUIT2RjNgmkvB+G5K9sNk5rpVdP3+bne8=)
                          2: cGmgJahPQu8-8LYFLeP9ZejAhpI.crl (hash: Vp670Q/YJgYrjLWOlCVxn+orTLr9ZQsz+3syDzZWToo=)
                          3: ywmvdxuATAVZRgO1PVAcVFaOIlE.roa (hash: dVEwHyJX1y05nWOyx7+6R5bqYtf88VDlAh1PL8nBzTU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:ed:a4:1a:83:1e:9b:eb:d9:d8:13:b5:f0:46:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7069a025a84f42ef3ef0b6052de3fd65e8c08692
        Validity
            Not Before: May 17 16:03:05 2024 GMT
            Not After : May 18 16:03:05 2024 GMT
        Subject: CN=a4433e366b2a41dd2ccc56e914d14c899d93c5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:d1:36:29:f5:95:d1:09:29:5a:ad:6e:37:
                    40:28:b5:3a:d0:ed:96:d8:01:e2:89:f0:77:db:df:
                    d1:88:7f:a7:6b:de:c6:e2:9c:67:82:69:b9:0a:bb:
                    e7:57:a1:71:b9:0f:99:1b:89:84:c6:6e:d1:a9:c0:
                    b3:7d:04:fd:41:46:e3:8e:ab:94:80:b1:d8:e6:85:
                    e4:a2:c7:6a:b9:19:b4:75:77:44:5f:fe:ca:f8:66:
                    d5:9f:59:30:03:c3:27:0a:be:b0:40:bc:57:7c:55:
                    bd:f7:b0:c9:8e:78:40:c0:80:8c:75:d7:14:35:b9:
                    95:44:3e:21:c6:73:b3:0d:77:ab:c3:19:49:ae:9e:
                    cf:f6:08:74:b0:76:97:f2:10:2d:03:31:c9:79:d4:
                    61:10:57:14:e4:52:27:fc:e0:2e:de:a2:1e:fa:27:
                    be:ba:69:78:93:e8:12:b5:16:b7:ea:5a:0d:16:fb:
                    f1:d7:2a:50:68:03:16:e6:0b:91:b7:a6:eb:59:53:
                    91:97:ac:b8:86:0a:f1:e7:f3:dd:e1:2d:21:f6:28:
                    48:30:7e:5e:3d:c4:d7:5a:83:4d:6c:f8:d5:0b:38:
                    d1:84:d7:3c:c0:3a:3c:cb:02:62:dd:56:f7:b2:94:
                    36:e8:3e:a7:62:8b:0e:25:e2:e7:ec:e2:a9:d1:f0:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:43:3E:36:6B:2A:41:DD:2C:CC:56:E9:14:D1:4C:89:9D:93:C5:B1
            X509v3 Authority Key Identifier:
                keyid:70:69:A0:25:A8:4F:42:EF:3E:F0:B6:05:2D:E3:FD:65:E8:C0:86:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGmgJahPQu8-8LYFLeP9ZejAhpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ad0116-7558-4656-9fb3-5199a711684d/1/cGmgJahPQu8-8LYFLeP9ZejAhpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c8:ba:c5:85:ae:08:98:16:40:d8:ba:c3:f1:37:39:9e:96:
         4e:e3:f1:2a:1a:23:d7:30:69:95:9c:1a:e3:70:04:b7:20:a3:
         a5:8a:db:06:34:88:be:aa:9c:da:48:75:ed:f0:5c:70:8d:2b:
         01:5b:00:21:4b:03:8c:6c:31:09:32:c9:40:7a:ec:15:7d:f6:
         9c:66:2c:71:d6:d9:ec:ca:a4:4e:4b:92:b2:ba:17:4c:49:c9:
         61:9a:2e:9d:9c:0e:11:bf:5e:13:08:33:f9:93:bd:64:68:7d:
         61:f5:6c:85:3a:6c:f7:e2:c4:7a:7e:65:17:25:4f:73:ac:8e:
         76:03:bf:dc:83:35:14:a3:13:9c:76:8b:f6:d4:8f:97:70:7a:
         02:15:c3:aa:d1:a2:29:a0:da:f3:80:d9:30:f5:fd:b5:a9:98:
         1e:b8:d6:51:f5:1b:7d:fa:f8:94:49:67:5e:09:04:69:a1:dd:
         2e:e9:00:06:93:5e:af:4a:dc:ac:6d:ea:a8:7a:24:b5:f1:ba:
         ec:5c:05:66:c8:59:8a:f5:b9:81:b3:f0:54:d2:9d:db:20:e9:
         70:69:9e:ba:bb:82:b3:55:c0:bf:cd:60:b6:35:ad:5e:4a:22:
         52:f1:b0:e0:70:9b:55:ce:8c:29:a9:03:ae:be:32:9c:04:7a:
         53:4e:2b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:26:35 2024 by rpki-client on console-fra.rpki-client.org