Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.mft
File:                     rJy1p1bPVPaUZAwR-OC9GbJ5Pak.mft (raw, json)
Hash identifier:          MlKNjvRhjoft2yb/H1sMA3yDNd9n+nu7ELw1az+uPOM=
Subject key identifier:   06:58:23:FF:F9:33:0A:D4:45:38:A1:F8:66:E6:A3:69:5C:D5:5A:75
Authority key identifier: AC:9C:B5:A7:56:CF:54:F6:94:64:0C:11:F8:E0:BD:19:B2:79:3D:A9
Certificate issuer:       /CN=ac9cb5a756cf54f694640c11f8e0bd19b2793da9
Certificate serial:       018F87B65733E9302C8D55453893F222CC0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.mft
Manifest number:          0CDE
Signing time:             Fri 17 May 2024 18:00:24 +0000
Manifest this update:     Fri 17 May 2024 18:00:24 +0000
Manifest next update:     Sat 18 May 2024 18:00:24 +0000
Files and hashes:         1: 0Xugtl_duHCCFAaqEHQ2XU5ScHc.roa (hash: gNTI4UxZPXWqUE8C9wkHBRzgfLTer6cMo55RwDi6phM=)
                          2: rJy1p1bPVPaUZAwR-OC9GbJ5Pak.crl (hash: VlTta+aAPBIdNoGOJScPx1gkFvDwk/vk43uItSA4aMc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:57:33:e9:30:2c:8d:55:45:38:93:f2:22:cc:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9cb5a756cf54f694640c11f8e0bd19b2793da9
        Validity
            Not Before: May 17 18:00:24 2024 GMT
            Not After : May 18 18:00:24 2024 GMT
        Subject: CN=065823fff9330ad44538a1f866e6a3695cd55a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8a:cc:38:ea:ec:b3:03:0e:57:d0:91:33:47:
                    60:04:19:52:9e:f5:3c:d0:92:4c:a2:b8:4d:e4:e5:
                    63:13:22:84:ac:ed:22:02:6d:6a:c7:ae:ee:1d:47:
                    54:f7:76:63:b5:3e:5a:34:4c:33:03:ae:86:df:ab:
                    f1:87:d2:6d:bf:1a:c2:cc:1e:bc:5f:fc:54:47:6b:
                    01:c2:71:a4:c5:e0:b9:da:11:59:de:26:56:0f:76:
                    1c:1d:ac:99:ca:26:f2:80:92:71:8d:81:45:b7:89:
                    53:ce:3a:fd:72:75:d7:b1:a1:a4:3b:67:4f:e1:0c:
                    43:4b:a9:7d:a9:86:d5:f9:8f:29:56:3b:a5:3e:e0:
                    e5:1f:5b:e5:62:dc:9b:cc:55:f1:8f:97:76:96:60:
                    aa:c0:5a:c9:31:16:29:9d:f3:ef:45:73:f4:4d:bd:
                    03:c9:3f:c0:ac:06:f8:d3:ee:c9:b2:27:72:35:bd:
                    9c:bf:37:af:db:48:93:1d:c9:da:27:ba:9d:d9:93:
                    2b:56:88:79:0d:ec:b0:5d:c5:a9:ce:41:aa:f5:ab:
                    8f:f8:44:8d:f9:a3:da:62:1d:6c:9d:fc:5d:e6:68:
                    1a:68:f2:3f:08:c3:b3:f6:1f:76:10:09:89:be:3c:
                    42:c3:f4:b2:cb:7a:74:53:69:d6:6d:59:60:15:01:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:58:23:FF:F9:33:0A:D4:45:38:A1:F8:66:E6:A3:69:5C:D5:5A:75
            X509v3 Authority Key Identifier:
                keyid:AC:9C:B5:A7:56:CF:54:F6:94:64:0C:11:F8:E0:BD:19:B2:79:3D:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/f5f2a9-8fbe-4286-bbdd-825692695211/1/rJy1p1bPVPaUZAwR-OC9GbJ5Pak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:64:7e:9f:d7:e0:7b:4f:18:1a:ba:7b:45:6f:64:20:98:9a:
         42:bd:95:63:47:e2:7e:62:f7:85:14:26:e9:c6:be:fa:0f:55:
         e3:65:f6:84:a9:3b:f2:ec:26:9b:fc:40:6f:b1:5c:d6:68:44:
         db:b1:1a:71:39:11:ec:84:54:ee:83:76:fa:79:96:d1:34:e9:
         a7:75:0b:7d:a4:fa:f2:79:fa:a3:04:d4:d4:00:67:ff:00:4f:
         af:a8:23:60:18:6e:51:7a:9e:31:53:3b:63:ec:91:42:ca:be:
         ac:7d:a5:bb:0b:74:c3:64:4d:93:c2:fd:d5:0b:6f:45:0a:5f:
         a8:22:db:97:ca:72:a2:25:81:85:82:ac:48:85:de:2d:1b:00:
         19:3f:b1:d2:c1:e2:8f:55:92:6a:69:fe:d6:1b:26:f4:fd:90:
         d4:73:d2:1b:d3:27:2b:57:f7:87:51:48:80:22:d3:18:d3:67:
         7c:7b:e1:05:ce:15:9e:24:e4:45:b6:60:9a:33:d4:16:af:7f:
         ca:e4:41:1b:2b:de:01:46:ca:6d:cf:f4:27:de:88:e4:03:c1:
         0c:2e:6f:71:a5:d8:50:03:52:4c:0a:43:74:87:0d:83:89:94:
         22:e1:c3:16:5d:d9:f5:67:2a:1b:75:9b:81:43:8c:a4:d3:86:
         1d:27:ea:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:20:40 2024 by rpki-client on console-fra.rpki-client.org