Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
File:                     PComfc4HIjjpwEUV5n65kmcuNRs.mft (raw, json)
Hash identifier:          9SvAhmoKB6C4ULuB9rdWrtTUGxMe6xNWbXMCT3nuUIY=
Subject key identifier:   9B:80:9D:70:7E:E1:E2:09:62:07:91:F0:54:A6:81:E4:3E:DA:AA:0A
Authority key identifier: 3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B
Certificate issuer:       /CN=3c2a267dce072238e9c04515e67eb992672e351b
Certificate serial:       019238139D98756CF545270280628CD6F1F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
Manifest number:          12DD
Signing time:             Sat 28 Sep 2024 10:01:02 +0000
Manifest this update:     Sat 28 Sep 2024 10:01:02 +0000
Manifest next update:     Sun 29 Sep 2024 10:01:02 +0000
Files and hashes:         1: HICJ1m61XVT9LQCC6B28cyUo6vY.roa (hash: ZN6VAWiOzex5ztsZ45Ev6igvEny6iSb+RmMjw8+BLLs=)
                          2: PComfc4HIjjpwEUV5n65kmcuNRs.crl (hash: OmkDUHQRANQDw5eTsT6VV/QOEjMF/gYpMvxJZ/mpRRg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:13:9d:98:75:6c:f5:45:27:02:80:62:8c:d6:f1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2a267dce072238e9c04515e67eb992672e351b
        Validity
            Not Before: Sep 28 10:01:02 2024 GMT
            Not After : Sep 29 10:01:02 2024 GMT
        Subject: CN=9b809d707ee1e209620791f054a681e43edaaa0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f5:3d:bb:68:48:43:74:67:07:56:fa:c3:93:
                    42:41:05:41:ec:07:4c:1d:ee:22:6f:af:1b:d7:0b:
                    71:d9:a1:3e:59:7a:c1:5c:7e:a8:76:07:aa:29:8d:
                    aa:5a:99:08:f7:0b:78:3d:51:f5:24:a1:aa:33:c6:
                    f1:16:51:17:54:64:75:e6:d4:00:41:5a:b5:7e:0c:
                    13:cc:24:32:81:d1:55:a3:bd:22:c2:1a:da:85:c7:
                    f6:a8:0a:8d:44:8c:d8:b9:97:13:36:41:89:66:43:
                    77:fd:65:f3:1f:d0:64:31:bd:d8:0f:79:d4:ba:79:
                    82:33:d8:4c:2a:33:25:da:5d:70:9c:71:98:0d:a9:
                    fb:28:b2:b4:36:5f:9e:49:57:49:28:ba:06:d6:3f:
                    73:ff:ca:4c:b5:26:88:9f:71:fc:dc:14:0b:e3:2c:
                    c7:e5:2a:f5:6f:9b:6c:e6:8a:ea:ab:81:f0:dd:fd:
                    11:64:10:12:59:f7:86:2f:5f:91:a6:e7:f8:a6:36:
                    54:d9:45:5a:d8:95:d7:57:ee:7d:6b:ef:92:83:da:
                    10:7f:ff:65:ba:80:5a:39:f0:fd:3a:40:57:81:36:
                    11:37:36:9d:e5:52:b0:56:42:10:7f:5d:74:06:a1:
                    e8:1a:b4:17:c7:a4:da:aa:af:de:3b:8f:32:d0:58:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:80:9D:70:7E:E1:E2:09:62:07:91:F0:54:A6:81:E4:3E:DA:AA:0A
            X509v3 Authority Key Identifier:
                keyid:3C:2A:26:7D:CE:07:22:38:E9:C0:45:15:E6:7E:B9:92:67:2E:35:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PComfc4HIjjpwEUV5n65kmcuNRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/cd6a7b-1580-4102-9aa6-a4b6e3d0d830/1/PComfc4HIjjpwEUV5n65kmcuNRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:fe:af:62:78:7d:77:6a:71:ac:2b:c5:e1:9e:42:24:d7:36:
         f2:b7:d8:a2:3b:44:1c:57:bf:12:ca:91:e9:b7:c0:0c:b6:ec:
         12:22:0a:5f:0b:a7:84:e5:96:2b:59:ba:ab:bf:e9:55:35:2a:
         5f:91:3c:71:2e:2a:f3:78:fa:2d:69:cd:15:31:48:a4:99:33:
         a1:22:ca:db:3e:b1:a0:3e:93:2f:68:18:c4:1a:68:3f:6b:34:
         fc:c8:bf:5f:d0:56:80:de:a5:b6:7b:17:5d:63:77:f3:1d:d9:
         d5:59:8c:3d:87:2d:de:ab:b1:00:67:64:46:78:67:20:5c:45:
         26:50:71:64:ec:af:a8:3c:9c:c5:a8:36:43:cd:28:42:ac:d0:
         6a:47:2a:6a:04:f0:0a:ca:ee:d7:fd:90:95:0b:8e:61:5c:be:
         77:fe:62:a2:99:85:3f:69:cf:6f:97:7c:16:c8:c9:c9:5c:bc:
         44:4c:7b:01:cb:c9:2d:4e:b0:6f:6e:2e:97:f8:15:df:cd:69:
         fb:2f:fc:a0:8b:20:02:23:ab:09:98:d1:06:b8:75:9e:72:c5:
         f0:67:69:f8:8c:fb:e8:f3:5e:8c:fc:50:44:45:a4:10:86:88:
         5e:dd:41:c9:5c:79:c2:33:eb:a9:b9:ff:38:d5:2d:56:5c:d6:
         f0:fe:5d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:01:33 2024 by rpki-client on console-fra.rpki-client.org