Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File:                     MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier:          Zq0SV9FAQg3w2N4NSbEWg2MRscisP7d+2iT6AewjWuE=
Subject key identifier:   3D:1E:2B:10:EE:48:C1:8F:9B:DE:81:17:9D:75:BF:C4:B2:23:AF:9A
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer:       /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial:       0192395D340D88554743B776C4E9B3A79606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number:          0C71
Signing time:             Sat 28 Sep 2024 16:01:02 +0000
Manifest this update:     Sat 28 Sep 2024 16:01:02 +0000
Manifest next update:     Sun 29 Sep 2024 16:01:02 +0000
Files and hashes:         1: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: KOw+FgC0AIicyyhlRnPyRD2z9NI6lN14tqdWlIRLo/U=)
                          2: _9qcHln7zNVFTPIYF8M0x2dxbA8.roa (hash: lsyo5zjOlDDA2t7dNDp18HmTYG8irzmFER6lkY/uHsk=)
                          3: dEAg_qYACruqe5c3acx3PdbHQEc.roa (hash: /OoDpqLZPt1Kd4CPlYVRHNReWrOIZ9M/zG+CjVK+nTQ=)
                          4: o-t-EjM-KB0pgNLckexGLMKhgyg.roa (hash: 7FwRBBKJHgud5v2Fpl8brob+ali1Ddz3HCm/QiZ40rk=)
                          5: xjj9LJNIGgQGtNe8q92-ger1cUA.roa (hash: MLv1HgX6pVFu5RBHZEE+vSednURUAHRGPNkp67C+wko=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:5d:34:0d:88:55:47:43:b7:76:c4:e9:b3:a7:96:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
        Validity
            Not Before: Sep 28 16:01:02 2024 GMT
            Not After : Sep 29 16:01:02 2024 GMT
        Subject: CN=3d1e2b10ee48c18f9bde81179d75bfc4b223af9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d0:88:a6:8f:93:dd:39:f6:61:a1:e8:b2:30:
                    6c:9b:27:e5:cd:55:d8:00:22:2d:83:44:c1:40:e6:
                    2e:4f:c8:2e:69:84:16:6d:72:74:7c:1d:51:c7:13:
                    38:46:07:c2:88:fa:2b:c7:32:67:4d:c0:ba:7f:93:
                    34:c5:af:45:82:a7:0a:5e:e2:f6:d0:d1:e8:a5:21:
                    98:05:65:95:31:2c:b5:10:11:ad:06:d9:0c:01:ba:
                    a1:14:45:e0:c2:c1:e8:98:a1:ca:80:22:6c:26:10:
                    22:48:05:3d:1a:b9:50:48:7b:1c:fc:f7:6e:a4:fe:
                    11:52:da:87:53:1c:2f:52:44:60:8b:c7:dd:58:31:
                    ef:c2:fc:95:51:0f:10:90:af:49:f8:87:40:82:cb:
                    e0:21:f7:1e:f5:bc:a7:4d:84:16:b8:41:0e:c4:3a:
                    8a:b3:ad:12:fb:90:3f:c2:77:7d:22:c8:64:46:9d:
                    0e:76:d2:38:ad:46:c4:3f:28:2a:97:ff:1b:98:9a:
                    b0:4b:3d:9a:bd:30:f7:93:49:60:36:7d:d5:d3:de:
                    1f:d0:c8:75:73:37:48:ca:01:ec:6d:55:14:93:df:
                    5b:71:5a:59:c2:22:6c:8f:26:dd:89:13:a3:17:3a:
                    81:ec:f6:1c:d8:89:8d:ff:78:0e:30:71:8c:0b:18:
                    38:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1E:2B:10:EE:48:C1:8F:9B:DE:81:17:9D:75:BF:C4:B2:23:AF:9A
            X509v3 Authority Key Identifier:
                keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9a:59:59:37:f7:ac:d9:67:56:00:be:13:1f:d4:87:18:ba:
         26:28:2d:e6:a5:cd:45:37:af:3c:be:e7:15:d3:fe:37:f0:e2:
         50:c2:a9:fb:3d:e5:e9:92:be:99:bf:e9:32:70:1a:21:2e:f8:
         2a:ca:f3:17:35:77:74:e6:6d:6c:e3:96:0d:3e:77:06:9d:2d:
         9f:af:6f:ad:9b:65:10:95:72:b2:7e:a1:80:1f:19:2e:ea:47:
         5a:9a:fb:1d:66:5b:31:0a:8d:78:3c:ff:a4:e1:36:80:47:37:
         e7:09:59:5b:5a:e0:b9:ad:e4:22:a7:2e:c6:a2:64:f4:fd:85:
         51:e2:14:5d:23:7f:f3:e8:65:eb:37:1d:02:25:7e:f0:be:20:
         02:01:05:02:89:a0:d1:78:5f:29:53:11:a3:e6:c1:74:42:4d:
         b7:a7:e7:ce:1e:29:b2:e4:91:cd:1d:4e:02:c5:72:ed:7f:a3:
         f1:ae:e7:c2:6a:0e:7e:82:f4:2b:af:eb:37:41:20:11:b3:11:
         67:cd:9b:5d:19:e3:c2:04:a0:4b:73:11:01:7e:13:9c:24:fb:
         ee:ba:72:0c:45:cc:eb:04:c4:0e:19:ef:65:41:62:3d:3d:ea:
         d9:40:64:31:60:6e:13:37:aa:80:d5:8e:b4:48:ed:f4:13:99:
         b9:51:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:32:44 2024 by rpki-client on console-fra.rpki-client.org