Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
File:                     mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft (raw, json)
Hash identifier:          abxg80Gqek4Tx0TShLUR2dCYNM4FhhtroJ5Ac/7E5qU=
Subject key identifier:   78:FA:9E:F5:65:1F:9C:DE:DB:3B:77:E8:0F:98:33:5D:F6:94:C5:B8
Authority key identifier: 98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73
Certificate issuer:       /CN=987277fc47d848fa5634ce8031a174fc249fa673
Certificate serial:       018F877F3CB14225C9F29FA1019D350878FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
Manifest number:          0CE9
Signing time:             Fri 17 May 2024 17:00:13 +0000
Manifest this update:     Fri 17 May 2024 17:00:13 +0000
Manifest next update:     Sat 18 May 2024 17:00:13 +0000
Files and hashes:         1: 1q7zDACJxnQl0aeLuOtbt2Xvlw0.roa (hash: LpQHb+QFreEJL7dQs/RXESF4pfLL4wg24vwInNjUKZI=)
                          2: FBpY8zhMUzgyqGUE4soAkAU-D5Q.roa (hash: ptVe+NskK01KTWicktS+5W/noGVZtdLoo44veD+KQzU=)
                          3: K0spuDDcqULoy49vL1xdKNBluFk.roa (hash: YFLBpCfHswKa/wjU6ZzD9D+GGbuu1n+BKvH4n8vO98U=)
                          4: mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl (hash: p+gvlp0PDda7an/2aPT6r02odHC2cR1KMEniygHSefg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:7f:3c:b1:42:25:c9:f2:9f:a1:01:9d:35:08:78:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987277fc47d848fa5634ce8031a174fc249fa673
        Validity
            Not Before: May 17 17:00:13 2024 GMT
            Not After : May 18 17:00:13 2024 GMT
        Subject: CN=78fa9ef5651f9cdedb3b77e80f98335df694c5b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f5:c4:d6:bf:a3:c6:bf:d6:96:57:3a:7b:4b:
                    ab:96:fe:4d:2a:ea:e8:bb:aa:7a:7d:f0:c1:d0:c6:
                    56:81:81:45:30:c3:eb:8b:fa:01:01:03:19:e9:69:
                    af:e2:07:b4:63:42:f3:9c:88:66:a6:78:bf:0f:0e:
                    9e:5e:b3:a3:dc:1d:58:cd:06:df:aa:d0:03:07:5a:
                    cc:31:48:17:21:10:79:37:61:8d:bc:60:24:04:ea:
                    ac:6a:13:ac:38:8a:94:8b:0b:a5:b7:be:cf:18:4e:
                    7f:2e:72:84:44:58:38:b6:20:f5:6e:76:7a:62:56:
                    63:8e:28:76:1a:9b:5a:b4:c0:60:49:52:5a:27:0f:
                    cf:df:e5:6c:b1:05:ca:2e:c9:e2:5a:cc:13:1f:af:
                    5e:2f:2d:3e:6e:18:7f:51:fc:85:1a:54:2f:8f:71:
                    f9:31:55:93:0d:0a:d1:c7:8a:38:69:b5:85:2c:21:
                    91:56:3c:1e:03:89:df:33:94:65:fc:87:23:dd:5c:
                    42:c8:be:8f:cd:e3:cf:ea:fe:0e:31:31:97:f0:75:
                    71:64:3f:28:ce:e1:04:31:12:52:34:c0:43:04:f4:
                    0c:80:30:b3:eb:80:43:c2:02:94:35:be:31:26:cf:
                    8a:fd:1b:d9:9b:87:82:7a:9b:2f:80:6a:46:84:a7:
                    02:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FA:9E:F5:65:1F:9C:DE:DB:3B:77:E8:0F:98:33:5D:F6:94:C5:B8
            X509v3 Authority Key Identifier:
                keyid:98:72:77:FC:47:D8:48:FA:56:34:CE:80:31:A1:74:FC:24:9F:A6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/710934-304b-4f5f-950e-12e8276fdac4/1/mHJ3_EfYSPpWNM6AMaF0_CSfpnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ea:ac:38:15:bf:f8:f8:e6:dd:11:ff:c0:69:18:7d:8d:54:
         32:80:57:f1:3f:aa:aa:45:5e:82:9a:f9:94:f1:84:2f:4e:07:
         29:ff:7f:fc:d9:a4:d5:b5:1a:32:b5:01:16:79:f9:48:e6:d1:
         84:d0:71:ec:b1:9f:18:97:b6:79:5c:70:f9:f5:99:65:4f:41:
         56:44:6e:3a:0f:11:70:43:7b:ab:ff:d8:3c:2d:44:2d:77:2f:
         fd:96:64:3b:fd:47:84:ee:e2:1f:be:cd:1c:a8:12:9a:67:03:
         cb:f6:19:cc:36:c3:5c:2f:de:cc:64:5c:85:b4:66:72:eb:4c:
         9b:18:46:3d:2f:76:9b:03:b0:b6:d6:ad:82:3f:bc:1f:eb:46:
         d5:60:2c:71:34:46:10:63:3a:24:11:5a:af:3b:1a:32:f9:bc:
         83:73:ca:a3:75:a6:ba:7b:99:85:9a:8b:68:c0:6b:41:52:b6:
         09:d8:06:aa:9f:60:01:e0:5b:50:c4:3d:bf:5a:6c:7c:b6:a1:
         06:b9:04:d5:f6:fb:83:66:cb:96:53:42:c3:0a:80:fa:7e:04:
         96:65:ee:b1:77:0d:3d:99:33:f4:a1:97:b5:5c:c3:7c:cb:8a:
         77:2c:da:23:a0:59:44:4b:1d:72:98:f4:eb:ac:a8:6e:cf:74:
         92:2d:08:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:57:02 2024 by rpki-client on console-ams.rpki-client.org