Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File:                     9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier:          p6jTDmvBmgGSnbYw2iOOzacqEGafWpuCUIotfjSJYtU=
Subject key identifier:   6B:6F:F6:95:FD:1F:00:E2:B5:98:CE:23:F0:75:DF:F2:7E:63:06:0F
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer:       /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial:       018F46B30965FD349355F1B9A9F60AF9EB84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number:          1157
Signing time:             Sun 05 May 2024 03:01:29 +0000
Manifest this update:     Sun 05 May 2024 03:01:29 +0000
Manifest next update:     Mon 06 May 2024 03:01:29 +0000
Files and hashes:         1: 83-Jcl6pvOCVUU3PlE4XY1r9SJ8.roa (hash: drS+b61l40KzgXWO3mi7mLZQqcv5j56HlXxKHNjkU7w=)
                          2: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: D6uK1MePWT9LEvhFdfjdAe35jDx2lt96my1ilqQfM/Q=)
                          3: R84KhoSd7ew1QsmSwr9fLf11qnA.roa (hash: fKzs1pbCHOcyDy/0uZzomx6VjjMz9qHR9dYYgh8GzpQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:46:b3:09:65:fd:34:93:55:f1:b9:a9:f6:0a:f9:eb:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
        Validity
            Not Before: May  5 03:01:29 2024 GMT
            Not After : May  6 03:01:29 2024 GMT
        Subject: CN=6b6ff695fd1f00e2b598ce23f075dff27e63060f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:92:4c:fe:d5:04:27:0e:60:79:f3:4f:f8:
                    ba:e1:35:96:ac:32:5c:c2:27:5f:05:8b:7d:52:32:
                    01:c5:34:82:a1:b0:99:96:a0:00:b1:6b:32:02:a8:
                    8d:ba:fe:2e:2b:93:54:df:3e:a6:21:c8:a9:3c:ae:
                    51:00:d7:a3:5d:48:73:1b:5a:06:a4:2c:8a:54:f8:
                    68:13:2c:c5:be:3a:b0:95:65:fb:80:59:67:aa:89:
                    b8:00:c3:f9:c9:5a:b3:cd:58:c2:fa:5a:ed:f6:5a:
                    4b:f6:bc:f8:f5:db:4e:68:aa:99:01:fd:2e:f3:e6:
                    39:f5:d8:52:01:bb:0d:af:67:02:b8:58:d2:d6:4c:
                    4b:78:5b:d1:81:6d:30:30:5f:27:d3:a4:2f:69:da:
                    9d:b4:2c:91:1b:77:9e:47:98:8a:38:0b:c1:fb:eb:
                    84:0f:26:52:47:08:15:4a:a9:10:41:83:f8:3f:a5:
                    24:75:9f:c9:ac:92:5d:b2:36:d1:82:4b:9b:2b:8d:
                    50:09:13:ba:b4:dc:e6:3b:ed:8a:d0:8d:51:0e:09:
                    3d:12:06:ae:0a:18:d6:97:67:ad:13:47:29:d0:73:
                    02:bb:ec:5d:c4:51:04:19:53:a7:f3:97:80:e0:b1:
                    07:f9:9c:1a:d4:aa:cb:a5:f3:93:aa:2f:14:a1:6e:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6F:F6:95:FD:1F:00:E2:B5:98:CE:23:F0:75:DF:F2:7E:63:06:0F
            X509v3 Authority Key Identifier:
                keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d6:7e:74:f2:a3:c1:eb:cf:36:b8:db:10:b2:f6:9b:84:39:
         d5:59:ad:95:8a:39:a6:37:96:d7:0a:a0:72:3c:c0:29:c2:0c:
         d1:4b:ab:c6:d0:30:c6:64:90:31:8c:8f:4c:04:5b:9f:4c:21:
         0e:41:bb:f1:01:d6:78:94:e0:fa:db:39:1a:89:29:4c:b7:78:
         fa:c3:1c:62:eb:44:17:05:5b:9a:70:2e:6d:53:97:d6:2e:ba:
         db:d5:4c:c8:5d:5a:92:e4:a8:ca:b8:29:5a:6b:07:6b:40:96:
         5b:11:d6:cc:97:f5:a7:23:77:27:60:e5:42:16:95:e0:04:07:
         ab:25:84:79:78:6e:93:98:d9:34:71:d4:9c:66:a4:bb:69:62:
         11:ab:f4:8d:0d:a3:2f:71:84:68:6a:38:e8:b3:37:6e:03:89:
         65:79:c2:ce:a9:f7:67:b1:02:3e:26:f6:95:59:2a:d7:c4:f4:
         c3:58:7e:05:89:02:6f:c7:a1:6e:41:e2:12:ed:e2:e3:3f:c5:
         a0:cc:55:e1:31:6a:13:e5:93:b9:75:7e:e1:44:5a:16:99:6c:
         a3:85:6c:5e:b2:f8:27:3f:7f:00:86:21:95:30:55:a2:93:2a:
         f2:48:a8:76:6e:4a:84:8f:7a:96:0d:e7:e3:8a:43:23:5b:ee:
         6c:ba:6f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:53:26 2024 by rpki-client on console-fra.rpki-client.org