Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
File:                     Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft (raw, json)
Hash identifier:          r4qoUrpVumkebebz5rRB0DrvsTjAAPnguZbjQZsSERQ=
Subject key identifier:   12:14:74:EF:D1:7E:E6:02:F1:DF:F4:B3:01:8C:4A:F0:DA:F9:2A:78
Authority key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Certificate issuer:       /CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Certificate serial:       018F535B8E5375D504EA54F7A2D2F1DFE441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
Manifest number:          0F28
Signing time:             Tue 07 May 2024 14:00:59 +0000
Manifest this update:     Tue 07 May 2024 14:00:59 +0000
Manifest next update:     Wed 08 May 2024 14:00:59 +0000
Files and hashes:         1: Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl (hash: RmkjEdHz700Zt1Zz6qKPPU9WAhj2DqxojekUn1aU1tk=)
                          2: GHE_EI9dYmcDQ5TBN7W-kWGB1Bo.roa (hash: rqFeFt3X2pMNHHXGYTgFQemqBRvU6CtKe5D41J9g/GQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:53:5b:8e:53:75:d5:04:ea:54:f7:a2:d2:f1:df:e4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
        Validity
            Not Before: May  7 14:00:59 2024 GMT
            Not After : May  8 14:00:59 2024 GMT
        Subject: CN=121474efd17ee602f1dff4b3018c4af0daf92a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9a:52:e4:67:48:d3:0d:cd:fb:32:ea:9b:07:
                    7f:9c:6e:d0:a5:80:35:cf:91:3d:98:b6:81:3d:b8:
                    69:5f:2e:ab:69:c9:e5:f1:ab:03:96:e2:57:8e:f2:
                    36:ed:f6:35:36:42:ba:e5:a8:1f:10:b8:a1:9b:08:
                    75:8a:62:25:b0:fb:ac:a3:c3:19:ab:3f:49:72:57:
                    3a:5e:b2:95:3b:c2:ab:82:89:00:7d:5f:c7:c4:4a:
                    8f:ab:58:8f:5c:b0:a3:a4:70:f3:d2:82:b0:0c:de:
                    16:09:f5:09:46:60:f8:ad:02:58:55:54:6e:22:ae:
                    3e:fa:2b:bf:22:58:37:89:3b:83:33:c0:8f:a4:36:
                    47:75:62:ac:3d:39:20:8f:5a:9a:79:00:67:25:ad:
                    7d:11:a0:ae:a8:b6:b1:1a:e7:97:ba:4e:73:42:28:
                    f9:c8:40:a0:32:20:32:e8:c2:5a:ee:83:dc:4e:4a:
                    c8:7b:0c:33:36:3c:44:7e:1a:9c:68:e7:cf:39:0d:
                    bd:f5:c2:dc:42:3c:b4:ca:af:cb:48:01:34:1c:6a:
                    83:3f:50:ea:d7:45:38:c5:95:b9:01:86:35:be:30:
                    02:9d:72:57:c6:69:a7:9a:67:0f:8f:1b:97:0a:e1:
                    9c:ac:00:16:b2:99:73:15:92:1e:d4:89:a2:b5:ec:
                    9e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:14:74:EF:D1:7E:E6:02:F1:DF:F4:B3:01:8C:4A:F0:DA:F9:2A:78
            X509v3 Authority Key Identifier:
                keyid:0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ba:e1:a9:73:9b:de:50:6f:d1:d7:1f:aa:1c:19:d3:dc:db:
         39:f8:71:99:30:8b:b6:4c:f9:d4:ee:c6:42:5c:f7:36:34:d7:
         0c:52:71:61:0c:90:25:52:b6:d0:fc:b8:19:7e:5d:92:30:e4:
         2c:7c:d6:09:a4:f2:45:35:88:8b:0c:51:00:1e:2a:43:7f:b4:
         e4:ad:f1:5c:62:09:18:e7:46:ba:6f:66:b6:48:4e:b7:ef:37:
         2d:24:6d:69:dc:55:02:cf:37:85:15:80:fe:d0:cc:33:5b:62:
         c9:2c:f9:02:1e:7f:d3:39:e1:bd:6d:5b:bb:0c:b6:a8:a5:49:
         53:d7:75:1d:7b:f6:5a:ff:a2:0e:ff:45:1e:82:89:2e:07:ab:
         5b:df:93:a2:36:2a:e4:12:78:aa:e8:8c:af:45:61:2e:08:27:
         c5:4e:98:4e:38:65:e9:3e:30:21:89:be:0a:13:fd:90:78:e7:
         29:e9:c8:19:70:07:cb:e3:4a:ce:a4:07:9e:fa:47:78:fc:0e:
         44:30:d0:89:ea:9f:e0:0b:34:07:db:71:f8:43:e1:43:ed:f1:
         06:87:7e:f3:a2:50:b6:d4:1a:db:82:cd:63:5f:29:d1:c1:6e:
         a6:ed:49:b6:7c:37:a6:b7:02:89:3a:2d:2c:8e:67:5e:c5:65:
         bb:9d:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 18:02:57 2024 by rpki-client on console-ams.rpki-client.org