Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
File:                     9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json)
Hash identifier:          gEWJjJx+2gS07ag3NcP1CEB3Q/VC2LpQG1OV3m37sfk=
Subject key identifier:   EF:2E:9C:34:A2:5C:8E:3A:09:BE:A8:44:8E:C5:EA:03:7A:89:3B:8D
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Certificate issuer:       /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial:       018F4EA3115E3E92E75E4F37B1C8B87BBBC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
Manifest number:          07EB
Signing time:             Mon 06 May 2024 16:01:00 +0000
Manifest this update:     Mon 06 May 2024 16:01:00 +0000
Manifest next update:     Tue 07 May 2024 16:01:00 +0000
Files and hashes:         1: 88hqBD6YLyRKT_0Xd25ipvWCuyc.roa (hash: 6k4oZXCffuUGy8Qvvtblh2V2GPgy1/ReNxsB0YmmJ3U=)
                          2: 8GTzP2K734ORtagvy-Fnz2Fc9co.roa (hash: WPSzSrhuU7yox2/YcNiJpMioeljolxmAMbRoBUAlJoA=)
                          3: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: dv9fzpm7DhZk9a4A9FEbwMN3OivQFNvwI2AmRw0iBOI=)
                          4: M-N59dC2LyrQtfsH4MAezEx0DYs.roa (hash: 00TfN23v90LE3eSjKQcZlXJGAQsbswrFg80to41Cock=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4e:a3:11:5e:3e:92:e7:5e:4f:37:b1:c8:b8:7b:bb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
        Validity
            Not Before: May  6 16:01:00 2024 GMT
            Not After : May  7 16:01:00 2024 GMT
        Subject: CN=ef2e9c34a25c8e3a09bea8448ec5ea037a893b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c2:1c:5f:17:f7:7d:39:45:bc:56:62:e5:5d:
                    8f:03:97:99:f7:32:2a:7a:72:56:a6:57:07:f2:8f:
                    a2:aa:19:68:99:47:54:48:35:9c:77:93:aa:e9:e4:
                    b9:ff:90:ff:81:6c:fb:52:a8:87:3d:e0:a9:ec:8e:
                    8f:a3:96:21:95:d9:a3:09:00:58:a8:b5:89:6a:2b:
                    d8:91:d1:bf:e2:91:c4:65:b3:69:03:16:56:14:e1:
                    0c:1e:86:9b:ec:2b:11:e7:94:9d:7f:c4:d3:78:a8:
                    fb:ec:62:25:65:06:7b:b5:1f:f0:35:4a:44:00:63:
                    2a:b0:cc:4d:ef:92:67:b5:21:4c:7d:fb:65:a8:49:
                    24:97:09:39:ea:a9:53:da:2b:58:fb:91:2b:f2:81:
                    38:6b:87:4f:f7:d7:5b:2c:1d:ae:2a:b2:7c:9a:e1:
                    1c:c9:36:ee:53:c2:28:db:ac:bf:4f:a8:5b:37:b7:
                    e1:05:28:cd:fe:b1:b2:17:8a:d6:4b:95:f3:f6:f3:
                    c8:07:88:8e:b4:61:f2:67:cd:bc:c1:34:97:b1:52:
                    2c:fc:38:ed:76:64:8b:28:db:58:15:69:31:38:f8:
                    29:f2:26:53:63:3f:4b:9b:80:04:64:56:c8:6c:ee:
                    66:bb:aa:2e:05:e5:4f:34:5d:99:19:7f:c5:34:0a:
                    b8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:2E:9C:34:A2:5C:8E:3A:09:BE:A8:44:8E:C5:EA:03:7A:89:3B:8D
            X509v3 Authority Key Identifier:
                keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:26:6d:d7:61:b5:e2:bf:d0:67:0e:6a:d5:31:fe:e0:9a:f2:
         f2:cb:29:1e:7b:44:6d:a9:97:b2:de:c9:6c:f2:57:9a:94:7a:
         61:a4:e7:7c:4e:d3:44:25:49:23:38:39:f5:84:5e:c7:ae:78:
         27:c6:7f:08:a5:07:d5:df:9e:5c:7b:55:23:b4:54:2a:b5:5f:
         be:53:f5:50:bb:e3:45:42:62:23:d2:cc:3e:a6:1c:ad:19:e2:
         7c:64:08:0c:7b:c6:13:7d:38:2a:8b:41:20:bf:4f:c6:92:fb:
         16:97:53:7a:6c:11:ef:2f:4c:36:50:c0:51:5f:42:86:5d:da:
         73:05:7a:bf:90:6d:c5:4b:ac:45:aa:cf:db:b2:49:00:d3:72:
         b7:06:1d:77:fc:13:19:c6:87:6b:3e:0a:c8:99:53:60:21:7d:
         80:b4:97:86:27:a5:64:50:8d:44:2f:28:2d:08:8f:67:a6:31:
         a5:ff:ab:a7:e8:3e:23:ef:64:29:13:66:73:07:a6:57:ce:c9:
         a3:10:4e:57:ba:c5:76:1e:fd:fb:ff:3a:c6:94:14:b5:6f:40:
         7d:dc:fb:e8:19:77:48:da:25:eb:05:75:c9:b9:7f:41:ca:d1:
         89:00:94:0e:6e:61:1b:59:9b:9d:4d:a0:00:a3:c8:18:ea:36:
         ab:70:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 18:56:06 2024 by rpki-client on console-ams.rpki-client.org