Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
File:                     TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json)
Hash identifier:          3r0CXTmHGFANZKUx+Hz2A2xtDF/qVV/1SQRRGXgaH3s=
Subject key identifier:   95:B9:85:BE:35:61:E9:63:97:A3:2E:10:7A:64:06:68:26:E9:2A:D3
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Certificate issuer:       /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial:       0192373831E50B4D39B5949008ED90FFCC68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
Manifest number:          0C67
Signing time:             Sat 28 Sep 2024 06:01:22 +0000
Manifest this update:     Sat 28 Sep 2024 06:01:22 +0000
Manifest next update:     Sun 29 Sep 2024 06:01:22 +0000
Files and hashes:         1: CpUT5pZwZGUz-sEd19v2u6z7Ia4.roa (hash: ozm50eCW9GllA0047JaXtY6SJ31Gc5McKeSAUN4sqq4=)
                          2: G0sHtWoQZB2CuQ5i6rI6Dhp1RI8.roa (hash: KeO2vPezVAirRayhcUUm3x48Yi/dtV2GTJUsULa77SY=)
                          3: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: e18POVGT+6YM5vb0+YAK6l3QM908ISlO9yUzpFno9JA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:38:31:e5:0b:4d:39:b5:94:90:08:ed:90:ff:cc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
        Validity
            Not Before: Sep 28 06:01:22 2024 GMT
            Not After : Sep 29 06:01:22 2024 GMT
        Subject: CN=95b985be3561e96397a32e107a64066826e92ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:13:dc:f9:c3:fb:2d:01:49:9c:d4:4f:f1:
                    fc:38:f1:3b:5f:78:68:1f:98:ee:06:c8:44:be:ef:
                    1c:fd:01:a7:39:d2:eb:65:ee:15:73:2f:64:5e:a1:
                    a2:5f:ed:ab:62:8e:8e:60:58:b6:16:45:6c:d0:7a:
                    79:04:6a:91:de:03:50:0f:73:43:df:76:94:d6:1b:
                    4f:ab:1a:d3:9b:15:10:4a:4f:2f:15:85:d1:c7:63:
                    90:81:36:da:52:a4:59:c4:cb:32:d0:2d:dc:77:77:
                    f8:85:2b:3d:f1:85:96:2f:28:f4:ad:f2:56:f4:36:
                    7f:52:b5:7f:49:6c:5b:e3:98:c2:79:76:bc:4c:fb:
                    12:58:2c:ec:af:53:16:f5:7a:a8:bb:7e:bd:f0:2e:
                    69:b3:9d:c8:9c:f1:55:0e:68:a2:42:79:cf:38:d6:
                    85:37:bb:74:38:06:06:03:ad:7a:0e:81:da:3f:25:
                    54:13:35:0a:a4:63:9a:4f:01:0a:b3:f0:8b:00:a7:
                    73:3f:ef:89:ed:ef:11:67:e1:74:ce:9a:69:a3:e7:
                    3a:72:4c:be:bf:b4:e4:71:d9:78:ac:3e:40:de:aa:
                    a1:8e:be:24:26:cb:53:ed:45:43:73:b6:50:31:9a:
                    8e:5d:63:2c:14:ae:83:71:42:96:ad:c5:ee:0d:24:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B9:85:BE:35:61:E9:63:97:A3:2E:10:7A:64:06:68:26:E9:2A:D3
            X509v3 Authority Key Identifier:
                keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e7:fd:92:fd:af:e1:6f:8b:d5:13:3a:94:23:fc:68:18:53:
         35:b7:b0:87:a4:28:28:91:c4:78:58:98:5d:a4:65:97:f0:26:
         c4:3c:d8:74:87:22:cd:c5:39:b8:0b:f6:8a:3a:86:89:74:6f:
         91:1f:29:99:16:e7:f2:ea:49:85:a9:71:b8:a7:11:00:93:67:
         8b:a9:60:93:3b:d0:1c:a1:23:5c:bc:73:68:a8:eb:3f:7d:1d:
         ec:db:f9:80:6e:bb:f9:c9:70:3e:95:0a:8e:e8:6a:fb:e8:b1:
         d3:64:32:1d:22:28:a7:4c:d6:a1:0d:be:63:29:af:b3:02:e4:
         6b:14:92:4f:b7:99:f5:b5:cf:05:e5:53:05:77:68:e1:44:37:
         58:c7:9a:d2:a8:2e:7a:5c:1a:e3:22:97:5e:a0:d0:62:5f:8b:
         81:81:2f:ef:f9:85:11:10:8e:65:58:96:85:4f:a2:70:05:02:
         df:02:3e:f1:f7:de:f9:44:1f:d7:c6:a2:66:3a:af:b9:26:ac:
         38:13:15:2f:d8:28:28:47:62:8b:2f:00:77:3f:0f:40:d3:ac:
         d6:e2:d0:27:b5:b9:82:8a:80:49:08:38:68:b4:ec:0e:50:8c:
         1c:1e:37:4d:1f:ad:f5:d6:9a:8c:50:a6:2d:e2:35:b1:40:06:
         5a:a3:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 15:58:57 2024 by rpki-client on console-fra.rpki-client.org