Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
File:                     e9s8XZUevruGqZqE0jjn_KdY4pY.mft (raw, json)
Hash identifier:          9JjnfbDDZCfRFW3ZgNH4Rqwx3/X7oxjK4zd5iPMrVpc=
Subject key identifier:   D2:3E:97:94:CF:74:EC:F1:D2:E3:05:C9:31:33:EA:13:D1:E7:7B:6D
Authority key identifier: 7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96
Certificate issuer:       /CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
Certificate serial:       018F86A3DB15DDA674694667963778D5878A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
Manifest number:          080C
Signing time:             Fri 17 May 2024 13:00:36 +0000
Manifest this update:     Fri 17 May 2024 13:00:36 +0000
Manifest next update:     Sat 18 May 2024 13:00:36 +0000
Files and hashes:         1: b1uDl5l6ydXRZZXLNAMW5uifgTs.roa (hash: 0JDmIP2Lc1rlTzSaFRR3Mkl+lrdpYM4P2KRP0lLU+4I=)
                          2: e9s8XZUevruGqZqE0jjn_KdY4pY.crl (hash: RCxt8L7qRd3ezhGuhQIvaul720EIrDDGLZtxv0GqXes=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:db:15:dd:a6:74:69:46:67:96:37:78:d5:87:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bdb3c5d951ebebb86a99a84d238e7fca758e296
        Validity
            Not Before: May 17 13:00:36 2024 GMT
            Not After : May 18 13:00:36 2024 GMT
        Subject: CN=d23e9794cf74ecf1d2e305c93133ea13d1e77b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:fe:a7:cb:69:1a:f9:3d:2d:7e:02:6b:51:
                    22:ef:4b:d4:85:4b:71:a1:aa:a9:b1:5c:ac:14:03:
                    19:d3:24:fe:b7:9c:13:25:dd:ab:9e:51:44:52:97:
                    eb:33:7e:22:d6:6b:2d:1a:8e:ca:54:b9:8c:77:51:
                    8d:32:5b:9b:fc:8e:5b:83:30:2a:4c:e9:88:57:b2:
                    6d:a8:e3:fc:97:06:c6:d7:61:fb:7e:70:d2:61:31:
                    8b:81:f5:45:cc:89:17:e9:1f:cb:02:3c:e6:40:14:
                    0a:c7:bc:26:63:0d:44:dc:51:e6:86:1f:1c:c7:ff:
                    e2:99:a4:95:c0:fa:c9:5e:e5:e8:5b:eb:09:61:0d:
                    78:e6:2a:43:bd:df:dc:4c:34:42:1e:20:e4:51:cf:
                    8e:5e:23:74:09:64:04:dc:68:4a:42:56:c7:4d:03:
                    04:88:c2:a3:fe:6b:3d:30:96:37:0d:f7:86:a3:a5:
                    a2:57:b9:6d:fe:e6:ce:21:46:e5:c2:56:c9:4a:6d:
                    ee:e3:54:7b:78:fc:16:dc:ca:46:7c:b9:65:1e:d9:
                    e2:0c:b9:85:bb:0b:dc:3a:b8:1f:6c:c3:ef:a3:cc:
                    ab:62:22:68:0c:04:50:0f:11:f1:b9:99:06:e6:36:
                    d3:54:73:09:55:25:da:ce:23:3e:5d:ba:e3:85:06:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3E:97:94:CF:74:EC:F1:D2:E3:05:C9:31:33:EA:13:D1:E7:7B:6D
            X509v3 Authority Key Identifier:
                keyid:7B:DB:3C:5D:95:1E:BE:BB:86:A9:9A:84:D2:38:E7:FC:A7:58:E2:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9s8XZUevruGqZqE0jjn_KdY4pY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b2c749-3f9b-49a8-953b-77f6763f4d2b/1/e9s8XZUevruGqZqE0jjn_KdY4pY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fa:8d:8c:27:8d:74:1c:3b:7e:cb:65:9e:4e:39:6f:3d:3a:
         66:f3:09:17:b9:4d:31:57:54:96:25:c9:fa:3f:c1:8e:17:d7:
         50:e3:05:5d:c0:20:86:80:a9:59:1b:84:9f:fe:2d:01:85:9b:
         57:b5:07:fa:14:8e:a4:18:8f:7e:97:ba:4a:f0:27:33:1e:20:
         63:63:64:ee:d0:1a:80:98:14:4d:64:33:fb:b5:b1:a1:b0:e4:
         0c:c6:9a:d3:70:49:e8:9c:d1:70:df:d2:fb:5e:f2:9a:fb:b3:
         35:68:4e:4b:ff:5a:10:14:aa:2e:02:a9:51:ea:cb:82:64:15:
         a7:57:2c:7a:31:10:62:83:05:e6:a0:8b:f8:ce:fd:90:68:d7:
         b3:8e:47:41:4c:ed:17:17:8f:4f:60:31:fa:6a:3e:35:59:57:
         2b:f4:90:6d:82:65:8b:a9:15:f9:ee:27:e5:b3:fb:90:18:d0:
         1c:dc:98:39:2f:e4:4f:fc:f0:a3:43:f0:0e:93:b8:c4:1c:ee:
         f6:94:4b:f8:86:02:15:a3:13:d9:f0:20:88:ff:55:78:68:3c:
         9f:c6:c1:b7:7a:48:39:05:15:75:b0:02:e4:7d:d2:4d:8f:7f:
         68:a1:99:9d:c9:e1:35:28:63:a3:50:08:34:ef:8d:6d:f9:97:
         5e:20:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:58:36 2024 by rpki-client on console-ams.rpki-client.org