Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
File:                     mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json)
Hash identifier:          Xtj0uGfIpq2Zw/89Ogc2FHmwEhVOnJ5Pjc4pbfjLfkU=
Subject key identifier:   30:88:D1:20:77:6F:A7:87:73:BC:5C:CC:4C:FB:FB:6F:0B:B7:8C:A2
Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
Certificate issuer:       /CN=99252ff7f4dcf62234d22f86a1135b344923daab
Certificate serial:       018F885B1DE7CFA3D8CACEE152A807390C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
Manifest number:          042F
Signing time:             Fri 17 May 2024 21:00:23 +0000
Manifest this update:     Fri 17 May 2024 21:00:23 +0000
Manifest next update:     Sat 18 May 2024 21:00:23 +0000
Files and hashes:         1: UuBG0aOb6_GftuhFLQe4PZGjyng.roa (hash: sdSq+5L8tFFEWuJI49wUxFMZoGaEooBPts7hj6uRRyk=)
                          2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: i8FcKHyuj9+16boS29mFI1/yRia1JTghhmiYyvFG0BE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:1d:e7:cf:a3:d8:ca:ce:e1:52:a8:07:39:0c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab
        Validity
            Not Before: May 17 21:00:23 2024 GMT
            Not After : May 18 21:00:23 2024 GMT
        Subject: CN=3088d120776fa78773bc5ccc4cfbfb6f0bb78ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:ac:c1:e0:40:87:d2:2e:46:be:6e:0c:02:
                    02:38:c9:c5:0a:cf:ec:aa:ff:38:b7:9b:6e:6e:2e:
                    bc:2c:5c:76:21:d0:19:35:c4:19:4a:9f:d9:a4:8b:
                    29:98:21:20:c8:56:49:9d:e3:28:59:08:1e:eb:18:
                    4a:b4:e8:c5:df:7b:bc:76:e8:d1:ed:3c:1b:a2:ae:
                    47:1b:de:32:ba:20:82:f7:2a:8d:db:cb:0e:82:bf:
                    b8:31:b7:07:df:59:d4:40:30:25:e3:95:53:c0:e7:
                    9c:d0:cc:3e:af:ef:bd:94:05:cb:b4:ba:a0:d4:9d:
                    c5:94:f9:8a:fc:cc:4e:00:68:a4:9a:cf:dc:ec:f5:
                    dc:27:87:b9:95:98:40:fd:b8:cd:c3:a8:3a:17:eb:
                    8c:10:cc:4a:a6:b3:7d:61:7b:d7:c5:d2:3e:75:ea:
                    73:7e:95:98:e7:4c:3d:74:15:2c:d6:b9:57:70:f7:
                    ef:16:1b:0d:8e:09:9c:7e:c9:11:42:67:c9:ac:fe:
                    1b:e3:8c:d8:3a:34:f2:01:66:24:c9:53:f5:86:dd:
                    e6:af:bb:cd:21:a4:0e:ba:4c:a1:4b:a4:81:3d:de:
                    67:99:64:85:40:19:34:26:0d:ab:60:43:b7:81:df:
                    0d:01:b2:1a:c8:12:c5:1f:43:51:a4:89:1d:a0:74:
                    e6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:88:D1:20:77:6F:A7:87:73:BC:5C:CC:4C:FB:FB:6F:0B:B7:8C:A2
            X509v3 Authority Key Identifier:
                keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:fa:47:e8:2f:7f:38:4d:cd:19:6a:c2:74:97:70:cd:ba:f4:
         ef:df:f1:1f:51:b8:41:b7:c3:fe:84:16:54:ad:de:5f:83:60:
         f0:64:17:87:45:91:b1:1b:8c:fa:ad:80:59:0d:78:d2:00:3c:
         db:ad:fb:b7:9b:4b:77:67:7a:05:ab:e6:f0:7f:16:49:c0:a9:
         1d:5e:90:98:1d:58:d8:96:81:26:f7:03:9d:19:c9:08:8b:fb:
         ca:a4:52:89:53:80:53:21:64:30:4c:41:e8:04:18:58:c8:ca:
         1a:7d:13:90:08:14:c2:e2:b0:ed:9f:00:ec:cc:e8:bc:c2:31:
         36:18:35:6a:10:1e:7f:1b:0f:78:9e:e8:0d:aa:7b:da:f3:b2:
         4c:7d:c0:90:f4:d3:d8:c8:72:9e:2a:72:ab:bb:f5:8f:47:55:
         48:1d:d2:a6:cc:c0:00:7e:cb:37:56:9d:50:00:f4:d3:cf:fe:
         82:60:3d:51:df:3b:c6:4a:b4:7d:de:0c:b6:9e:9c:70:45:dd:
         79:93:48:43:09:58:85:33:f7:50:ca:c6:20:82:15:b2:42:b4:
         8d:ac:fe:5a:73:36:2c:c3:14:39:09:ad:5c:67:53:bd:81:5a:
         04:b7:57:4c:fd:79:a2:61:1d:bc:ce:1d:f2:ae:8d:9d:58:03:
         96:53:96:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:07:02 2024 by rpki-client on console-ams.rpki-client.org