Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
File:                     9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json)
Hash identifier:          mOejbzPSO/fZlXvsMvf00ifH8/7gc9vdyMG6aM2g/6Y=
Subject key identifier:   C6:49:5A:72:76:25:2B:A7:6F:20:44:FE:B6:D5:D8:58:9F:78:4A:B1
Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D
Certificate issuer:       /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
Certificate serial:       019238BAD941F05F42FF6A782FA6D2508605
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
Manifest number:          12DA
Signing time:             Sat 28 Sep 2024 13:03:42 +0000
Manifest this update:     Sat 28 Sep 2024 13:03:42 +0000
Manifest next update:     Sun 29 Sep 2024 13:03:42 +0000
Files and hashes:         1: 5GnMROvtMvHnENMDFdy5vdoMOOA.roa (hash: 4zi3FW233oTxgLBl8GGG602SX8yOG5u+ii2Pv/um0eg=)
                          2: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: itJifg0mSJMHYI8frG3D77YoGsZWOTHUXCB2FvpD1RI=)
                          3: RDu6oWvcquVZQbdeUPeQbL6S48g.roa (hash: +PLe74DeKjO6TwwgD3maWGmV/0vHr3TxtSIcpPvR118=)
                          4: izM1rOi_GZnNmtA2DQoewbCOrkw.roa (hash: c5WRxRQB47Jrl0S6gaSWb94bnoXn68di3nb/jsDE+as=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:ba:d9:41:f0:5f:42:ff:6a:78:2f:a6:d2:50:86:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d
        Validity
            Not Before: Sep 28 13:03:42 2024 GMT
            Not After : Sep 29 13:03:42 2024 GMT
        Subject: CN=c6495a7276252ba76f2044feb6d5d8589f784ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:d7:0f:37:76:21:51:c6:40:50:4b:76:2a:
                    04:6c:56:68:2e:a2:63:54:df:61:36:b9:3f:b3:4e:
                    ff:bb:bd:2a:8e:7c:3c:9a:f8:62:8b:33:91:09:a7:
                    19:fd:58:f1:f8:65:99:bd:87:54:09:05:2b:28:77:
                    0c:bb:07:cc:e8:96:48:eb:13:29:8e:29:1f:bb:01:
                    28:8e:63:8c:bf:eb:71:fb:c1:77:66:37:b2:e3:7a:
                    e8:4b:f7:04:3b:1a:13:ca:e4:ce:2a:7b:54:1e:31:
                    d8:3c:c1:46:13:87:79:32:cf:74:b1:e7:fc:e5:95:
                    5c:7f:2c:d2:b4:78:0e:91:f3:43:f2:64:d1:8f:1f:
                    80:af:33:f8:b9:4e:33:d2:c6:e9:69:8e:a5:e7:ca:
                    37:08:36:4c:ef:bf:43:f8:f0:68:45:8b:50:ed:9b:
                    7d:c6:50:f9:e9:6a:5f:10:f8:96:91:b8:d4:0c:37:
                    e8:2c:74:19:24:91:e5:4b:c5:eb:0d:b0:83:ec:31:
                    80:1e:64:32:ab:aa:a4:e1:7a:8d:1d:1c:00:ea:3f:
                    98:79:c0:19:21:b1:6a:95:26:a8:99:c9:72:e6:38:
                    09:4d:41:41:c5:bf:72:17:ca:47:d0:86:47:a0:25:
                    52:14:81:33:42:b4:f2:03:4f:61:25:cf:c5:e5:80:
                    0f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:49:5A:72:76:25:2B:A7:6F:20:44:FE:B6:D5:D8:58:9F:78:4A:B1
            X509v3 Authority Key Identifier:
                keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:8b:8e:26:47:70:76:dd:03:42:8f:ef:c0:46:46:5f:48:
         af:e5:69:be:2d:02:7d:4b:5c:1d:7e:a0:33:66:2e:87:d1:5d:
         46:e3:88:5a:8a:7e:5f:2f:45:fc:74:24:bf:e5:ce:a1:5b:29:
         ae:99:ce:2e:83:ed:ae:89:45:11:8e:b9:d7:15:cb:e2:4c:bf:
         30:91:15:d0:3f:d3:d6:f9:ba:a7:e1:b1:4a:b3:f0:14:4b:2a:
         71:e2:d2:f8:8e:64:d1:47:ad:e7:35:7c:01:71:2c:ce:d1:be:
         8b:8d:ad:19:58:83:59:4e:fc:2d:fd:6e:51:23:b8:f1:89:38:
         11:7b:ff:a1:6b:bf:29:f8:8e:fe:2c:73:d3:d9:19:1c:3d:09:
         ff:67:f5:9a:bd:4c:65:7a:a9:74:35:6b:17:d2:cf:0f:2f:ba:
         ef:2a:ae:03:9d:21:42:9f:21:a0:14:f6:c2:b7:c3:0e:dd:ff:
         9b:ef:50:63:43:40:79:69:83:f4:3c:08:f3:a0:05:b3:ea:b1:
         02:c8:13:05:1a:68:2d:a5:29:a7:d0:0a:e9:2a:ea:c8:a8:74:
         6a:89:09:0a:76:ab:39:f9:3a:54:c3:d1:b5:12:b3:f1:5f:b0:
         9a:77:6e:cf:4c:0c:36:fd:58:64:7b:35:ba:67:b0:ff:ea:e5:
         f9:e2:01:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:37:25 2024 by rpki-client on console-ams.rpki-client.org