Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File:                     gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier:          fXJmbnxrS/tHq09Gi7G45n+dJ6ZMabogEAHKGrunnp4=
Subject key identifier:   CE:89:44:67:DC:55:5B:D0:F1:9F:94:20:C8:24:D9:D5:AD:A7:55:C0
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer:       /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial:       018F889214EA7735B0DE0532467B8BB349C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number:          09BA
Signing time:             Fri 17 May 2024 22:00:25 +0000
Manifest this update:     Fri 17 May 2024 22:00:25 +0000
Manifest next update:     Sat 18 May 2024 22:00:25 +0000
Files and hashes:         1: ep1Ig6iltvYws1RmYx15h4Sl4AU.roa (hash: 7l6VpA3FzH3+fczQ+piI9lq2RqS96c+YhncT2PfQVBM=)
                          2: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: SXG/o0hADXZB6yZtBBaPcNKGjCbigt58KYYM3EM8d/Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:14:ea:77:35:b0:de:05:32:46:7b:8b:b3:49:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
        Validity
            Not Before: May 17 22:00:25 2024 GMT
            Not After : May 18 22:00:25 2024 GMT
        Subject: CN=ce894467dc555bd0f19f9420c824d9d5ada755c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e6:92:7f:5b:52:22:e2:cf:fc:d8:63:70:04:
                    83:6a:60:4b:24:d7:b8:83:05:e3:54:2a:95:9d:72:
                    6a:af:50:fa:aa:da:56:35:fa:0f:ae:2c:8f:38:73:
                    ef:e8:90:23:79:de:82:fe:07:6b:bc:4a:8c:20:ba:
                    a0:b0:7f:57:c7:37:d1:3b:98:f9:06:ab:22:19:a4:
                    7e:d3:97:87:67:2b:05:c2:88:84:dd:5a:62:88:3b:
                    e6:5a:b2:23:3b:4c:46:9e:ab:1f:bf:ba:a3:43:7f:
                    ec:1e:58:f8:13:03:0e:64:c5:92:39:75:e6:41:75:
                    98:66:b6:23:0c:cb:c1:55:2d:05:24:26:2d:6c:d2:
                    ee:c1:7a:f1:84:1d:cc:ac:01:ad:ff:b3:82:a4:f0:
                    2b:82:52:26:36:c8:f0:e3:e1:ab:46:6c:7d:33:ae:
                    cb:a2:5e:4a:57:e7:fb:56:59:7a:5a:d1:a8:af:27:
                    3e:36:8b:59:e7:bf:6b:60:1d:de:a0:d8:fb:92:34:
                    d0:44:fe:14:94:d5:1f:e3:3f:ed:44:d9:f6:03:56:
                    3d:d4:76:cf:45:fb:f3:d7:c9:e2:fa:25:2f:a2:ac:
                    9a:9f:ee:1b:86:97:5a:71:01:c1:52:66:d2:37:8a:
                    fd:9a:cb:f6:20:5a:21:fb:12:39:a1:c5:7b:49:dd:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:89:44:67:DC:55:5B:D0:F1:9F:94:20:C8:24:D9:D5:AD:A7:55:C0
            X509v3 Authority Key Identifier:
                keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ec:37:16:ec:aa:7d:ab:ef:82:5d:ef:ac:c9:e2:c3:dc:e0:
         bb:95:3e:04:0a:05:0d:70:a9:12:92:47:57:be:fd:dd:13:25:
         36:50:83:ab:87:04:0b:39:51:26:fd:44:ea:d1:23:21:84:8a:
         30:97:01:b2:06:d8:9f:75:47:f6:9d:e4:93:57:a0:08:20:0c:
         93:4b:f4:08:f2:3f:27:8b:40:c8:c3:68:06:c1:df:ce:19:5a:
         16:5e:76:b6:7f:b0:8d:d1:11:e9:62:ec:34:7f:8e:17:56:fe:
         2a:9b:6f:52:c7:d9:a4:46:20:d1:6b:58:22:d8:ad:a4:b9:47:
         8b:54:9a:da:f7:68:bb:35:1a:b9:4f:bd:d1:d7:32:45:c2:e3:
         21:ae:a2:5d:c0:67:b7:ac:04:3a:b8:63:a8:75:36:05:69:ed:
         23:00:d5:de:c0:3b:09:e8:d7:16:72:54:6f:92:83:5b:7b:89:
         f0:5c:d5:c5:1e:a0:1b:f2:d1:64:33:4e:30:36:4b:f5:28:ce:
         66:84:9a:5e:37:7e:82:68:cd:a9:21:bd:0c:13:43:93:2c:97:
         76:d0:96:40:ee:40:64:3f:db:a3:95:e9:aa:b0:49:0a:60:82:
         b3:13:fe:50:c4:14:83:4a:d8:03:b4:79:52:2e:65:72:f4:8e:
         ac:f0:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:56:41 2024 by rpki-client on console-ams.rpki-client.org