Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
File:                     pDOBaM2dWvBgQBP8QnQSb8WB88s.mft (raw, json)
Hash identifier:          B7l2Nd2z7rVNVmAML0OUyuGQpMp0I11bOFismai7BXc=
Subject key identifier:   45:8C:5B:84:F4:54:52:6F:6E:CE:B9:6C:A1:6D:9E:37:40:D9:95:4A
Authority key identifier: A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB
Certificate issuer:       /CN=a4338168cd9d5af0604013fc4274126fc581f3cb
Certificate serial:       019231DACE69F58F411D74CEFBCC16048E63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
Manifest number:          0974
Signing time:             Fri 27 Sep 2024 05:01:16 +0000
Manifest this update:     Fri 27 Sep 2024 05:01:16 +0000
Manifest next update:     Sat 28 Sep 2024 05:01:16 +0000
Files and hashes:         1: 53ZaxLsRIiEzv9Hw7VjvtE-IIgc.roa (hash: wYHPXTY/tLsUNlMkH+E6dFEiDiIXXnknwUPetUHFymU=)
                          2: Ndj0ofR7Im6hXhXtW7EmVsSGucU.roa (hash: aeLRFhoyda/N9rmXYlgCEJelQLvDDQjl6J1v/5aaNvQ=)
                          3: pDOBaM2dWvBgQBP8QnQSb8WB88s.crl (hash: DjV4NYN7Zz1YzJ3UMyCGC01wO9qMb5BaoF5/byl2RRo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:31:da:ce:69:f5:8f:41:1d:74:ce:fb:cc:16:04:8e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4338168cd9d5af0604013fc4274126fc581f3cb
        Validity
            Not Before: Sep 27 05:01:16 2024 GMT
            Not After : Sep 28 05:01:16 2024 GMT
        Subject: CN=458c5b84f454526f6eceb96ca16d9e3740d9954a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fa:2f:7c:9c:a3:69:4d:31:56:2a:d9:b4:26:
                    4d:56:4d:b6:48:d7:87:30:5d:4c:a1:81:0a:7b:36:
                    22:40:fe:f8:53:f8:b4:01:41:32:e9:9f:f0:c5:74:
                    35:b4:84:b9:df:7f:5d:59:1b:09:3a:77:40:5b:91:
                    30:81:c5:90:d1:b1:72:84:4d:86:94:8d:f3:d8:e5:
                    e2:4a:75:46:d3:78:69:06:f6:24:4e:73:43:cb:fd:
                    8f:8e:38:83:9f:b5:a8:97:37:79:fc:58:34:5b:1e:
                    e1:4d:1f:bc:e9:1e:43:f4:ce:3e:be:53:93:16:be:
                    db:04:08:2a:eb:6f:ef:af:4c:60:8f:de:54:b2:fe:
                    09:3d:9d:16:9d:67:c8:ae:0d:8c:04:51:11:29:83:
                    a4:53:b4:ab:6c:f1:0b:07:54:31:16:ef:df:e4:1f:
                    9d:9f:d9:b1:7f:4a:dc:13:e4:61:fe:61:8a:85:6c:
                    e2:03:24:b5:f7:ea:f1:9e:fd:47:2c:58:bb:15:98:
                    f9:22:37:4a:9b:dd:55:27:7c:ce:66:03:1a:e0:3d:
                    f1:82:c8:f7:5b:06:3e:da:3e:82:cf:1b:05:60:e4:
                    3d:ed:e5:c2:c2:d0:7a:5c:c4:04:be:9d:ed:ac:42:
                    68:04:ce:91:42:93:cb:69:e8:c2:a8:0f:65:b2:5c:
                    1f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8C:5B:84:F4:54:52:6F:6E:CE:B9:6C:A1:6D:9E:37:40:D9:95:4A
            X509v3 Authority Key Identifier:
                keyid:A4:33:81:68:CD:9D:5A:F0:60:40:13:FC:42:74:12:6F:C5:81:F3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDOBaM2dWvBgQBP8QnQSb8WB88s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/176f7d-6f0f-45e5-97f2-c9db981a2a2f/1/pDOBaM2dWvBgQBP8QnQSb8WB88s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c8:73:5c:ca:1a:5a:9f:d7:3d:f5:24:d8:bb:b4:28:38:7c:
         2c:3d:67:3b:bb:0f:29:4b:ad:3b:39:9c:87:d3:c4:15:d4:4d:
         fd:1d:f8:ef:03:73:7f:f5:e1:ad:55:24:64:9d:2a:64:89:eb:
         66:d4:78:26:62:18:b8:ab:7b:de:d6:f6:9c:04:12:a7:4e:c0:
         e9:e1:46:78:7e:a6:87:f1:ea:6c:cb:de:40:b1:95:9a:1d:54:
         39:19:ef:21:f4:2b:27:8e:54:c6:ad:99:b0:01:eb:1b:af:71:
         bd:a4:cf:9b:de:61:44:0f:f1:8a:e8:85:d6:c4:1d:95:d0:f3:
         52:ab:f6:ca:05:1f:17:7e:5f:0a:ff:ff:3e:f9:29:32:d0:fd:
         5c:77:0c:63:1b:d8:0f:65:39:ec:0f:27:83:32:d8:7c:c1:6d:
         bf:34:24:b9:3a:12:4f:69:89:ff:19:96:c2:5b:26:51:ab:74:
         f7:f6:ae:73:e5:e2:cb:dd:8a:4a:ec:fb:bb:0a:18:8e:19:b5:
         79:5a:e6:23:ed:5c:31:70:f6:b3:90:35:36:c5:a9:91:4d:cf:
         f1:89:65:e4:af:a5:3c:ce:6c:ef:3d:ec:e3:ff:93:41:59:a4:
         a7:3a:ac:dc:0d:4b:53:96:60:df:77:ba:e2:db:2d:ef:f0:ed:
         cb:7b:81:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 12:53:06 2024 by rpki-client on console-fra.rpki-client.org