Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File:                     diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier:          HWpnbR/hg99ajzc4i0q6e3MGj/l+OJEOSB5xANZG1BQ=
Subject key identifier:   A5:E7:41:B1:67:01:55:AF:C1:72:B4:21:7E:04:EE:C9:4C:1C:DA:BD
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer:       /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial:       019236CB86A99CDB5DAF92E2DC809C257E91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number:          12DC
Signing time:             Sat 28 Sep 2024 04:02:40 +0000
Manifest this update:     Sat 28 Sep 2024 04:02:40 +0000
Manifest next update:     Sun 29 Sep 2024 04:02:40 +0000
Files and hashes:         1: 3SqeyhbLlyrdxkywMNau9EszbLc.roa (hash: q4tLbTqFnx7GPymLqFNKHbXx1nw5Ij5o1QAKQC0yLvQ=)
                          2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: 1oEH7etzP1A8ORQH5082GCBr524/jFOCZakOywMXTHA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 04:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:cb:86:a9:9c:db:5d:af:92:e2:dc:80:9c:25:7e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
        Validity
            Not Before: Sep 28 04:02:40 2024 GMT
            Not After : Sep 29 04:02:40 2024 GMT
        Subject: CN=a5e741b1670155afc172b4217e04eec94c1cdabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:25:49:6c:89:3d:e0:53:9e:66:7a:5c:e1:
                    67:b1:ab:65:f8:d7:8e:fa:ff:4e:57:8c:67:2e:48:
                    7c:93:fd:44:a5:e8:93:6f:4d:2e:41:0b:88:88:45:
                    74:69:06:ef:f3:59:7b:59:1d:12:3a:4c:93:74:0f:
                    38:db:79:33:f5:54:b6:f2:96:0f:fa:c5:d9:03:2f:
                    d8:4c:9d:4e:5f:6c:df:5a:ce:25:be:12:d1:ca:3f:
                    d8:22:a5:13:d0:0f:af:b6:cc:f0:04:fa:f5:9c:a7:
                    71:c4:b4:da:7b:73:bf:89:37:9e:b1:3a:12:10:94:
                    51:76:a8:32:40:ad:49:11:50:84:47:0f:03:8e:cd:
                    b7:59:38:65:aa:10:27:b6:03:b2:bc:16:87:c0:4c:
                    b8:06:97:38:26:2f:54:0f:a4:24:80:da:ae:de:8d:
                    fe:0d:4c:88:2d:71:43:76:48:97:4d:44:7c:31:0c:
                    28:c3:2c:35:52:3a:68:95:e7:4f:88:d4:83:1a:bd:
                    d6:44:23:cf:20:ba:af:95:c2:af:60:23:20:11:c4:
                    13:95:20:41:29:da:3e:af:09:a2:a1:e1:c9:44:a2:
                    d6:9f:d8:de:f1:6b:d7:12:ee:96:00:01:fa:d4:9f:
                    57:cd:97:4d:57:41:ff:54:5d:c5:88:5a:8d:76:16:
                    b8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E7:41:B1:67:01:55:AF:C1:72:B4:21:7E:04:EE:C9:4C:1C:DA:BD
            X509v3 Authority Key Identifier:
                keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:05:10:7d:6f:e7:76:1f:f3:96:99:cf:45:df:f8:97:5e:d0:
         3b:33:b8:5a:48:0b:46:d3:80:8f:13:b4:c1:a7:79:dd:20:e8:
         e7:74:23:ed:63:5c:3d:c2:76:22:88:ab:f6:dd:53:16:0f:fe:
         5f:0b:de:68:1b:60:0f:04:94:c4:2f:67:cf:2a:97:b3:02:df:
         e7:aa:23:00:15:b8:f4:77:a6:7e:ab:77:d4:75:26:31:a1:14:
         30:7a:f7:fc:e4:69:db:e3:e4:77:1f:4e:be:ff:40:c7:54:62:
         dc:d6:ec:08:e6:31:19:7f:70:de:5c:a4:c2:f1:3e:b1:8b:3c:
         8f:9f:f0:97:98:91:99:3d:54:8f:ed:47:93:8c:7b:bc:d6:9a:
         4d:75:1a:20:e3:a0:80:0b:8a:53:23:26:75:c5:5b:7a:13:9b:
         9a:c0:7f:94:e2:29:2f:9c:09:1e:4a:ce:af:59:c4:89:9f:ad:
         03:70:f8:54:d1:28:cc:4d:e1:e8:a4:66:77:0d:c4:37:3c:b0:
         16:86:6c:73:d3:9e:1f:78:3d:f4:bf:4c:c5:da:d5:7e:a3:33:
         10:4c:b6:fc:62:d3:19:69:70:e0:97:c5:ea:23:79:89:fc:bc:
         e1:47:24:35:52:f2:fc:68:88:d4:e9:d2:36:a6:71:90:22:bd:
         9f:3d:85:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:26:28 2024 by rpki-client on console-ams.rpki-client.org