Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
File:                     g9Nuy69V5GTgCzmH2lJktq8tz4g.mft (raw, json)
Hash identifier:          MMnv9YjxG5SerIgOXoi2Z3t80Z1eDbsuHeWRrjjkUdI=
Subject key identifier:   BC:C5:FA:1C:10:89:A8:C5:C9:3C:E0:28:60:36:0D:6F:87:56:DD:28
Authority key identifier: 83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88
Certificate issuer:       /CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
Certificate serial:       018F87488E120B508836C5F186496120F76D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
Manifest number:          0664
Signing time:             Fri 17 May 2024 16:00:30 +0000
Manifest this update:     Fri 17 May 2024 16:00:30 +0000
Manifest next update:     Sat 18 May 2024 16:00:30 +0000
Files and hashes:         1: HTXNKA1ttU2ViXz91PYv2aj9ReE.roa (hash: y7iU++jUcerQ8g8rmPl9DO/guPcP7x3y+XlePyJmioM=)
                          2: g9Nuy69V5GTgCzmH2lJktq8tz4g.crl (hash: 95ptcbY6zaQkmOXo6+4a/OIakJIFBzX0uWkCVWee5M0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:8e:12:0b:50:88:36:c5:f1:86:49:61:20:f7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83d36ecbaf55e464e00b3987da5264b6af2dcf88
        Validity
            Not Before: May 17 16:00:30 2024 GMT
            Not After : May 18 16:00:30 2024 GMT
        Subject: CN=bcc5fa1c1089a8c5c93ce02860360d6f8756dd28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:e0:d4:e1:32:2f:02:77:3d:68:bf:d6:84:
                    29:62:2a:4a:c4:e4:0a:b1:ba:61:c6:68:57:a8:c9:
                    cc:bf:1d:f2:91:b2:0c:fc:1e:1e:f4:98:d6:be:59:
                    65:c0:4a:cd:aa:35:58:47:9a:1e:43:e2:ca:a2:ff:
                    55:00:d5:7a:ed:a5:cb:88:8b:ed:e9:66:74:2e:93:
                    de:0d:76:03:6c:35:07:ee:d1:9b:79:bc:ec:ad:69:
                    19:9f:e1:9a:6d:5b:6e:18:cd:4b:f4:45:19:5a:05:
                    4e:c8:0f:46:2e:e5:8d:ac:fa:62:6c:84:43:b7:a3:
                    ef:6d:15:10:59:22:0a:a7:9e:08:58:fc:6c:b3:80:
                    55:46:e3:04:60:a7:61:a8:22:bf:30:e8:c3:c6:bd:
                    d2:40:a4:d3:e9:6c:95:fa:a0:b2:f8:23:ab:e0:88:
                    54:9b:89:54:ed:cc:42:71:de:ec:82:23:f7:ec:0d:
                    a9:66:88:62:e0:b2:0c:da:cc:8e:cd:dd:e7:dc:8b:
                    94:44:58:ab:da:b8:6b:08:53:3b:35:80:3c:1e:ed:
                    53:17:74:c2:fb:97:bf:c3:37:a3:15:f1:fd:8d:16:
                    45:b0:0f:02:d1:1a:66:ba:df:ab:6f:4b:ce:ff:01:
                    24:d6:c7:3b:86:5c:b1:88:72:5c:e3:92:ee:31:33:
                    01:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C5:FA:1C:10:89:A8:C5:C9:3C:E0:28:60:36:0D:6F:87:56:DD:28
            X509v3 Authority Key Identifier:
                keyid:83:D3:6E:CB:AF:55:E4:64:E0:0B:39:87:DA:52:64:B6:AF:2D:CF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9Nuy69V5GTgCzmH2lJktq8tz4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12bef0-7561-437b-9490-96531d16331b/1/g9Nuy69V5GTgCzmH2lJktq8tz4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:54:b2:74:b1:6f:d7:9b:17:bf:41:3b:7c:e7:44:fa:dc:f6:
         d1:08:ab:f6:e1:fc:ed:4a:50:1d:e2:ee:a7:ea:ab:44:ec:c8:
         b3:26:c7:4d:01:68:35:c8:fe:ab:1e:d5:53:73:42:bb:de:7e:
         17:32:e5:54:6a:cf:32:fc:17:d1:ff:d6:b7:2d:7a:f1:61:d0:
         3c:c8:16:d3:4e:ab:12:fb:67:0a:d0:83:e6:56:b8:f6:42:4a:
         45:37:df:1f:74:b3:67:cb:17:89:18:74:06:d2:e6:ad:da:04:
         aa:ab:86:74:d0:e1:a0:03:82:86:64:1c:be:e3:18:97:99:5b:
         cc:86:bb:87:86:76:a7:a4:b8:b5:4b:af:07:51:25:de:ff:25:
         64:21:73:96:7e:c0:88:64:4a:5b:0b:74:13:5b:ef:61:2c:4a:
         72:3f:bc:70:c5:89:15:2c:53:02:8a:dc:6a:8d:f9:99:01:20:
         29:7b:51:44:58:b7:96:5f:bf:35:ee:f3:01:50:72:0c:a9:d7:
         4b:6c:0f:44:3f:10:5e:88:a3:f0:66:58:ad:79:01:d4:d8:1c:
         80:24:58:0c:a6:0b:05:68:81:5b:f5:82:d4:7e:42:dc:63:4f:
         34:4c:aa:76:a1:37:31:08:77:be:1a:23:bc:42:c7:a0:9c:64:
         a2:72:92:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:57:17 2024 by rpki-client on console-ams.rpki-client.org