Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
File:                     f6gWozONMnQc1P_49J3bLMg4_cU.mft (raw, json)
Hash identifier:          vlTFmvJPBEbdnihpYRFiELLG1u8NCwaXNgie2A1yjUg=
Subject key identifier:   EB:85:E3:4E:63:01:8B:C5:F4:CE:AA:C4:69:F8:15:B4:E0:BD:35:C1
Authority key identifier: 7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5
Certificate issuer:       /CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
Certificate serial:       01923813C6C9779A2C93DCE69E4188E46522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
Manifest number:          4C
Signing time:             Sat 28 Sep 2024 10:01:13 +0000
Manifest this update:     Sat 28 Sep 2024 10:01:13 +0000
Manifest next update:     Sun 29 Sep 2024 10:01:13 +0000
Files and hashes:         1: GE_0SNO0PvXhpbM0xoYJu-5KP4w.roa (hash: N2UdZ78bR9z8Vw2hIMxzaneK3jw62yi+PTf/CRihDnI=)
                          2: f6gWozONMnQc1P_49J3bLMg4_cU.crl (hash: 8snmuaLxo0ZnBgHYIlL6pWTSq+QAWELUsOSrLqO8UTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:13:c6:c9:77:9a:2c:93:dc:e6:9e:41:88:e4:65:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
        Validity
            Not Before: Sep 28 10:01:13 2024 GMT
            Not After : Sep 29 10:01:13 2024 GMT
        Subject: CN=eb85e34e63018bc5f4ceaac469f815b4e0bd35c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:8e:a1:ef:5e:35:7f:42:ca:6e:18:39:b5:
                    dc:2c:d7:82:6f:e7:9c:cc:ff:a0:37:ee:be:8c:89:
                    95:10:cc:2d:14:e1:0c:6a:3e:56:1b:94:7a:5f:88:
                    40:a8:38:72:97:8f:7c:bb:a8:46:d0:aa:b6:65:68:
                    f8:b1:a5:8d:56:bd:1c:9b:65:01:41:75:2a:b1:83:
                    68:f0:cb:b5:80:bc:46:a3:38:77:de:86:73:56:54:
                    68:df:25:99:e0:81:9a:6e:b1:3a:20:a8:05:44:24:
                    3f:12:0c:53:53:a3:65:0c:2c:a3:7a:62:b5:51:e6:
                    da:35:16:7c:08:13:0e:7c:91:fc:63:a7:6f:00:4e:
                    1d:ba:15:d1:7d:6f:ba:90:f7:97:dd:5c:6f:d5:f5:
                    32:a3:87:85:52:b9:c3:0f:57:ed:06:e9:68:60:f7:
                    06:55:c3:32:0c:ab:d4:38:82:24:24:16:c9:5b:c5:
                    72:bc:8b:66:6e:9e:ca:10:da:d6:9d:7d:9e:ee:05:
                    28:1a:25:a4:bb:06:fa:f1:19:7c:bd:b7:08:d9:09:
                    8c:69:dd:8f:f6:c6:92:1c:5a:ba:55:09:b1:30:f5:
                    3a:95:19:d1:be:90:8f:b7:90:b6:b8:b4:9f:89:41:
                    b1:06:c0:3b:83:6c:0b:db:54:da:6b:46:44:21:f3:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:85:E3:4E:63:01:8B:C5:F4:CE:AA:C4:69:F8:15:B4:E0:BD:35:C1
            X509v3 Authority Key Identifier:
                keyid:7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:41:30:f1:33:44:08:a1:56:52:5b:8c:46:68:2c:29:f5:d7:
         17:1c:e4:7e:44:88:fb:50:b2:a1:20:fc:b3:0b:98:75:47:5f:
         d5:cf:bf:85:a4:38:71:9e:95:4c:5d:e4:89:d6:42:1c:9f:81:
         d1:a8:d1:ba:24:37:f4:56:11:96:78:da:a5:3e:da:e7:69:64:
         40:82:ea:d1:d2:b5:d5:8d:31:b0:95:4e:7c:1a:68:9c:dd:3a:
         84:19:ea:0e:8f:7a:15:1e:39:db:f0:53:46:4c:f0:48:64:1c:
         e7:f2:db:51:7d:b8:35:32:8c:10:f1:5e:15:49:ee:80:e5:cb:
         c4:2e:4e:f1:fc:4b:88:aa:5d:33:dd:0e:7d:8f:bd:3c:a4:ec:
         7b:21:7d:eb:a2:38:b0:ea:48:ba:5d:eb:18:fc:3f:3a:a2:49:
         f1:15:d2:b2:5c:1b:84:45:e4:1c:c8:8c:df:11:31:54:c2:87:
         ec:6d:8f:4d:18:21:95:ac:bc:9e:70:98:f5:14:6e:6f:8d:a7:
         6a:27:91:a8:1e:97:4c:71:bd:d8:c3:44:f3:20:cd:32:6e:d4:
         a3:ce:a1:01:32:c1:f1:f4:5e:61:d3:b2:81:58:6c:46:8f:c2:
         0c:b0:0a:c0:cc:80:77:f1:56:20:5f:9c:9e:81:ee:41:59:34:
         04:b7:70:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:17:46 2024 by rpki-client on console-ams.rpki-client.org