Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File:                     ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier:          flLLCJLXIi701814J+2tS9raX4OJq6B2ByHs979CLt4=
Subject key identifier:   1A:72:30:85:4A:3C:A2:D7:AA:EF:71:CD:DA:F8:DB:A7:D7:C0:17:77
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer:       /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial:       018F87B692BA61FF3650A51FD2FD2F1F632F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number:          0FB9
Signing time:             Fri 17 May 2024 18:00:40 +0000
Manifest this update:     Fri 17 May 2024 18:00:40 +0000
Manifest next update:     Sat 18 May 2024 18:00:40 +0000
Files and hashes:         1: 4opRnbyKa6AqJ8mtge-QmXNZjHU.roa (hash: yj/CpG4U7lt4+sJ9h071gpt7JUiyStN00sBvpxUR/EY=)
                          2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: t01Fhf7sS19ekh6esLKNmfzY7hYx7ihHl3R2s5Mm19s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:92:ba:61:ff:36:50:a5:1f:d2:fd:2f:1f:63:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
        Validity
            Not Before: May 17 18:00:40 2024 GMT
            Not After : May 18 18:00:40 2024 GMT
        Subject: CN=1a7230854a3ca2d7aaef71cddaf8dba7d7c01777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:8e:8c:47:93:aa:6a:89:09:aa:af:30:84:
                    d2:43:68:ab:16:23:01:90:aa:7b:11:b6:3b:73:8e:
                    9f:55:c0:81:8a:4a:99:15:0c:44:5d:6c:1e:3b:ab:
                    51:2f:7e:c5:5b:e8:de:b1:07:ba:26:df:26:1c:04:
                    af:28:f5:11:94:95:60:dd:6b:a5:a8:b0:4d:55:43:
                    b1:de:ea:77:99:3d:73:5c:e9:a1:2d:e2:28:7c:01:
                    2f:74:32:5a:e4:cd:f9:72:fc:82:46:52:92:bc:49:
                    35:13:2c:30:fa:dd:f8:c3:77:9f:7d:86:c0:ef:46:
                    a1:29:31:9f:de:c2:d9:e3:40:1c:32:19:a3:2c:ab:
                    b0:93:7f:fe:f0:24:a0:39:2f:fd:43:3a:03:db:d1:
                    3b:97:d6:20:b0:72:dd:2c:a6:cc:e2:fd:1d:d7:5e:
                    f6:61:63:97:24:13:96:77:59:3a:96:bc:a4:5e:34:
                    c3:3a:ac:49:8d:02:17:8e:a5:ee:18:5e:07:4f:25:
                    a7:69:52:6f:27:0a:5f:65:fc:89:8e:0a:4a:e8:c6:
                    30:7d:20:31:d8:a3:10:35:42:05:5c:98:ff:2e:ce:
                    22:70:61:e6:32:fd:30:b7:aa:88:a2:ed:47:77:b4:
                    e7:50:8d:9e:70:9d:71:dc:29:13:56:16:05:6e:57:
                    3e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:72:30:85:4A:3C:A2:D7:AA:EF:71:CD:DA:F8:DB:A7:D7:C0:17:77
            X509v3 Authority Key Identifier:
                keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:45:1f:1a:63:12:2c:44:e5:24:96:ca:9f:3e:8c:42:79:6e:
         61:63:e0:f2:a2:c9:41:76:f2:92:32:78:70:23:00:7e:60:d9:
         a0:30:fc:ea:d2:5c:fa:ef:94:21:23:5b:6b:a5:d2:8a:4a:67:
         14:6e:46:3e:6c:d5:da:7c:cc:a2:fd:38:fe:d9:9b:9c:ad:22:
         b8:64:98:32:81:cd:77:00:f4:23:f2:67:0e:f0:33:cf:4a:66:
         c4:9c:82:a2:3f:13:9c:df:ca:3b:55:93:92:02:8a:fe:85:aa:
         03:bc:1c:60:19:00:3a:57:ab:09:e7:4a:d4:bc:bb:c7:3a:70:
         d4:d5:a7:15:45:02:21:e4:34:85:94:3a:55:03:42:9a:e3:83:
         17:cf:23:3d:4d:7e:d7:48:d2:70:46:d5:28:9f:4b:8c:a3:ce:
         06:79:f1:3f:b2:ca:49:e8:54:20:14:b9:fd:df:0f:5f:74:98:
         b8:c0:38:db:89:68:17:c9:d5:de:c2:31:f1:0e:ea:b8:00:a9:
         73:0d:ee:9a:d5:62:2d:2d:50:0f:4c:7a:b7:25:8f:84:bf:4f:
         9e:c1:7e:b0:63:d8:42:9f:fd:39:32:58:a5:5e:75:eb:68:ea:
         9b:2e:0d:24:fc:93:09:99:46:22:6e:c5:f2:e5:51:c6:5f:5c:
         e7:16:75:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:13:04 2024 by rpki-client on console-ams.rpki-client.org