Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File:                     _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier:          wHpRTfe0KqTVejWk8zvgm5NDqhB+E2iKzDoscsGIpFE=
Subject key identifier:   77:53:89:EE:03:F3:A8:B9:8F:6C:FD:27:D6:B8:8D:79:10:7C:96:23
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer:       /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial:       0192388144C578C96698113F97675DF02CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number:          12DE
Signing time:             Sat 28 Sep 2024 12:00:48 +0000
Manifest this update:     Sat 28 Sep 2024 12:00:48 +0000
Manifest next update:     Sun 29 Sep 2024 12:00:48 +0000
Files and hashes:         1: 8nhXvPi8uY3gOJD_Vvi_gkZJ4Yg.roa (hash: 7b4Xy0Ahyt8EU+ybAlfih5FwNzQogFLH8Ro8/B8jI8U=)
                          2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: O4+og7wOdsPFlf9a//HZuHwgotkFbBFGUsFZ6iCAlU4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:81:44:c5:78:c9:66:98:11:3f:97:67:5d:f0:2c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
        Validity
            Not Before: Sep 28 12:00:48 2024 GMT
            Not After : Sep 29 12:00:48 2024 GMT
        Subject: CN=775389ee03f3a8b98f6cfd27d6b88d79107c9623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4f:a1:9b:d5:72:55:0c:d1:0c:0a:6d:71:14:
                    bc:3c:7e:fa:3c:da:79:93:2a:b6:12:13:6b:70:95:
                    75:1c:05:e0:2d:6d:e8:5c:30:9f:fa:dd:e5:91:1c:
                    3d:97:90:4e:b8:a1:d2:ee:29:02:94:31:02:51:18:
                    cb:c0:7c:e8:be:83:9d:08:53:c0:e1:b0:f9:a2:0b:
                    f4:e2:9e:05:01:fd:4a:ab:f4:01:7b:b1:47:d6:ca:
                    53:76:1d:71:02:c8:87:05:f4:35:90:39:17:1a:f8:
                    f4:ff:54:85:3a:85:08:5c:7b:f0:d9:fc:ec:4d:94:
                    aa:2c:e6:2c:5f:1a:67:d5:fa:73:77:3e:a7:e3:e0:
                    5a:dd:58:d2:33:eb:f5:43:5d:5f:6e:74:a4:22:41:
                    b8:db:56:d3:e2:8e:31:e7:5d:8c:06:a2:e9:cf:f0:
                    67:f6:6e:59:0f:5c:95:b7:3d:59:b9:07:57:9d:20:
                    3e:a0:3a:91:9e:29:19:b0:c4:0b:ba:5c:20:65:97:
                    67:b9:12:47:fa:04:08:19:62:83:de:14:a4:d7:47:
                    8b:1b:ca:a7:e7:2a:aa:8b:46:68:b0:f8:17:6c:e2:
                    d0:56:3a:65:3f:59:4b:da:79:57:25:bc:1d:74:9e:
                    d1:56:9d:8b:ba:4c:16:af:e1:37:2a:22:63:ce:c4:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:53:89:EE:03:F3:A8:B9:8F:6C:FD:27:D6:B8:8D:79:10:7C:96:23
            X509v3 Authority Key Identifier:
                keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:27:af:dd:b2:7d:46:1e:b3:02:1c:f3:08:5e:5e:38:6b:e1:
         38:ad:0e:ed:a1:0b:5a:72:5c:70:91:68:ca:aa:b9:41:b9:14:
         ca:8a:8f:84:33:a3:08:c1:a6:c0:d8:b9:b1:27:01:e4:90:db:
         95:42:6b:de:a9:fb:2a:10:2d:2e:d0:88:96:14:6d:97:81:90:
         97:a4:87:96:eb:e4:75:a5:f0:da:a1:24:d2:fd:0b:a8:94:c0:
         bd:3f:42:95:2d:ca:92:28:7d:04:b5:4c:d8:16:c8:cc:82:13:
         74:6a:ea:a5:4d:3e:18:90:fd:37:88:11:9a:28:08:e0:59:28:
         29:0b:80:07:60:18:3d:a2:5a:ef:53:d8:e9:60:95:9a:6c:7d:
         9e:62:46:a7:d9:0a:4b:15:81:5d:b0:61:e7:44:23:e2:16:86:
         28:0f:c2:b6:5a:08:fe:b5:cf:8a:91:50:9f:a1:a1:8c:9e:23:
         62:58:b3:e1:5f:5e:e4:de:d8:37:51:b3:90:4f:8f:3b:64:0c:
         78:72:15:38:58:4d:1a:06:08:7d:9e:58:96:7a:87:91:6e:1c:
         07:21:4e:9a:1c:79:ef:cc:22:f5:59:16:f5:30:af:1d:33:76:
         d0:fa:b7:8d:ae:57:ee:b1:94:e4:e7:e4:14:40:c4:1d:23:f1:
         49:54:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:57:34 2024 by rpki-client on console-fra.rpki-client.org