Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File:                     bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier:          e2zdPSd/+JXjkaxhceH9fSRq8XoZqVVdidMOPMkENeY=
Subject key identifier:   27:8B:44:A8:BC:26:63:CE:A9:9C:2F:6E:0B:C5:8A:B3:DD:D9:8E:C8
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer:       /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial:       0192365C05D616E35EFE319586BE11C5D0EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number:          12E3
Signing time:             Sat 28 Sep 2024 02:00:53 +0000
Manifest this update:     Sat 28 Sep 2024 02:00:53 +0000
Manifest next update:     Sun 29 Sep 2024 02:00:53 +0000
Files and hashes:         1: 1et_D_h1FdZdTvzr1Ffen8Za7Go.roa (hash: hSFmzShXNiu5J4XNHgQiAfgv7wzFTkDZ0UpPYddeQPg=)
                          2: QfNfRY9LX0ho_KyQLFESyNaZaPU.roa (hash: 6PrCpdeOV4b9j/fbNQpcxAbnPc4BaVojVM2gDg+/eoA=)
                          3: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: YrM4fqmwclONhuLqE9ywILB3K6ZXxTAG4aPIcyx8KLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:5c:05:d6:16:e3:5e:fe:31:95:86:be:11:c5:d0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
        Validity
            Not Before: Sep 28 02:00:53 2024 GMT
            Not After : Sep 29 02:00:53 2024 GMT
        Subject: CN=278b44a8bc2663cea99c2f6e0bc58ab3ddd98ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:84:af:ec:76:e5:b8:23:41:0b:8d:71:a6:
                    9b:24:b0:7c:36:eb:6b:49:52:11:68:0f:45:47:17:
                    3a:00:48:ae:aa:54:b9:a7:ab:b3:c4:67:09:9c:88:
                    2a:7d:67:d0:1c:c1:79:31:2c:89:40:73:78:c3:78:
                    73:aa:7a:b6:f6:4a:41:c2:c0:4c:90:ec:14:54:64:
                    40:00:77:9b:b2:95:9f:d7:51:f2:86:fe:98:bb:68:
                    ce:01:d2:84:68:ab:70:46:8e:fb:4f:e3:28:04:a0:
                    8b:83:fd:b7:2a:cf:dd:00:ea:62:9d:49:99:ab:0e:
                    30:a7:96:4a:30:a9:4c:20:75:0c:2a:a6:2f:62:55:
                    df:da:17:e3:cd:59:27:62:c1:97:46:73:22:f6:fe:
                    72:34:59:34:c4:fd:64:ac:47:41:62:1e:81:df:a9:
                    1b:e4:36:9e:b8:54:7b:3d:38:41:79:c9:1e:04:1d:
                    67:7b:b5:55:29:52:36:8f:07:a7:31:8d:0c:9b:e3:
                    ff:1f:78:d8:f6:09:77:05:5e:6e:c0:e6:4e:1e:e1:
                    36:e8:50:66:19:90:da:fc:77:0b:a6:1e:f0:62:87:
                    d2:d3:42:04:a7:60:23:d4:e9:07:7d:d1:4a:59:4a:
                    b2:ab:87:92:39:2f:93:f4:cc:c8:ac:8d:05:78:e2:
                    45:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8B:44:A8:BC:26:63:CE:A9:9C:2F:6E:0B:C5:8A:B3:DD:D9:8E:C8
            X509v3 Authority Key Identifier:
                keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:52:95:b9:68:0a:fd:f3:4d:d9:0a:90:80:06:85:b9:01:d0:
         9f:84:3f:d7:14:70:6a:0e:1a:1c:54:b2:22:5c:be:eb:b0:06:
         be:b9:cb:63:4d:00:a6:11:60:9a:f3:1f:9f:38:4c:68:db:8a:
         4c:11:d3:d2:1d:28:a7:84:6f:a5:b1:76:85:1b:79:91:b8:28:
         0a:54:b5:50:14:1d:10:16:a6:8e:2f:b2:8b:fc:f8:59:a8:9d:
         4d:31:d2:60:01:5e:54:12:8c:04:36:52:8b:cf:3b:ff:9d:11:
         6b:d2:85:c8:aa:8e:ca:3d:16:83:67:e0:c0:be:da:e0:dd:04:
         e0:56:62:1b:33:8f:02:f7:b5:f1:48:81:35:51:8f:b7:68:18:
         ce:a3:d4:fe:5a:b3:2d:57:95:f2:db:72:6d:e0:72:e0:57:f4:
         ab:91:86:d6:6e:59:50:09:6d:fe:51:25:ed:0f:64:39:f7:89:
         82:99:25:62:7e:8d:06:c3:14:80:bd:8c:60:ab:f4:c4:48:88:
         5e:8c:8a:a8:c3:1f:ba:17:21:cd:46:62:81:eb:d7:01:6e:c5:
         15:54:11:2c:5d:20:4c:33:6d:82:18:bf:3c:9f:12:75:95:8d:
         f5:cd:e6:8e:7c:2a:3e:f4:d3:22:39:0f:40:9a:ca:45:c6:53:
         c2:f7:bb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:13:55 2024 by rpki-client on console-fra.rpki-client.org