Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File:                     sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier:          PXF8/LDkOpTirRnCODInMjGU5SQ4hZnJsAX0BsAbBL0=
Subject key identifier:   E8:29:23:9B:36:6E:83:3C:F1:14:08:F6:0E:F6:AF:CE:F1:B3:90:40
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer:       /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial:       019237DC8B369469A48DD5670DA258C0755A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number:          12DA
Signing time:             Sat 28 Sep 2024 09:00:53 +0000
Manifest this update:     Sat 28 Sep 2024 09:00:53 +0000
Manifest next update:     Sun 29 Sep 2024 09:00:53 +0000
Files and hashes:         1: 1_PwNdgw2m5gkQQycOlCRsimySg.roa (hash: AoV/wQYER2EXxp7XSczMU7meKEVVkmE5ZuG590Avt5s=)
                          2: rBonRejzrwLn_R9CsYbyPIMa1OI.roa (hash: rpBhHR1bnizZIpFzsPFD8HykAjrqfQn3/nBxkx14hX0=)
                          3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: ItSTH7UPtjAaX0BWL7XsJh9GrXo4VFKyuZcXwT70hm8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:dc:8b:36:94:69:a4:8d:d5:67:0d:a2:58:c0:75:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
        Validity
            Not Before: Sep 28 09:00:53 2024 GMT
            Not After : Sep 29 09:00:53 2024 GMT
        Subject: CN=e829239b366e833cf11408f60ef6afcef1b39040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:77:e6:f7:21:5e:60:37:cb:23:2d:ed:6b:
                    f3:34:2d:d0:a0:23:3f:53:c8:d5:bf:66:46:ef:e5:
                    da:1b:1a:c7:f8:14:e7:02:05:5d:53:1b:cb:96:b6:
                    a7:3a:cf:1a:60:6f:6b:25:cb:b0:37:ea:6d:cb:1f:
                    28:7f:ce:8f:e0:a7:ea:5f:01:12:89:1c:cc:29:68:
                    3d:57:23:a3:fd:e5:e2:aa:c1:a8:62:5a:53:05:51:
                    57:a3:d2:f0:3c:f6:d1:b6:11:e8:a0:83:ca:e8:09:
                    b4:29:73:b4:cb:ee:1e:eb:0a:c8:bf:1a:75:f2:11:
                    40:a0:33:38:dd:a4:b0:3c:c5:53:69:f8:b1:7c:8e:
                    fb:ac:f3:b7:89:c8:3a:4f:e5:fc:ad:67:58:dd:4f:
                    f3:3a:b7:9b:5b:1c:97:96:94:c8:b6:80:31:01:fd:
                    7b:65:bf:48:e6:a0:e9:4f:54:9c:e6:de:6f:ae:0f:
                    e4:af:29:22:ef:16:6d:df:5c:ff:43:6e:d2:f5:89:
                    60:09:a9:c6:b3:cb:60:92:f6:86:4d:9a:f3:7f:42:
                    92:74:b6:54:bc:62:9a:3d:be:bf:4b:47:87:b0:3a:
                    b8:89:74:a1:6b:98:cc:a3:b4:1d:a6:8c:30:40:2c:
                    31:a8:ab:4e:0c:4b:35:9b:de:14:1f:da:be:b0:bc:
                    a7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:29:23:9B:36:6E:83:3C:F1:14:08:F6:0E:F6:AF:CE:F1:B3:90:40
            X509v3 Authority Key Identifier:
                keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:80:87:ff:26:1c:d9:8c:4d:11:8a:cb:37:a7:78:d1:44:
         a8:29:ce:90:e5:38:76:10:00:f9:e6:49:94:29:16:de:38:d6:
         70:75:69:54:bc:3a:b7:c8:67:d2:94:f9:a4:f9:e0:8b:56:69:
         ea:50:03:ab:43:52:66:50:9f:4a:01:dd:91:22:77:ad:9e:ab:
         61:4d:76:0c:94:8e:ed:c3:ec:a1:d9:23:cb:52:8c:15:c5:c4:
         6a:11:4d:d2:b8:01:6a:bf:89:0f:39:56:fd:d6:f4:22:68:96:
         dd:64:e6:73:e6:a1:f0:8e:21:68:e9:34:b6:9b:e6:20:60:ee:
         0d:41:bf:89:b5:e3:bc:8d:a1:7d:8a:1f:d6:0d:47:ae:5d:0b:
         7d:3d:07:3e:a5:d1:7e:d7:0d:82:2c:9e:4a:d5:a2:20:1f:fc:
         e8:60:b7:92:22:fe:be:c6:2f:e4:f3:a5:c8:8a:fb:69:0d:10:
         01:8e:78:f3:c6:1b:ff:7e:dc:00:ae:e6:33:b9:d6:06:92:b7:
         10:86:c8:3a:50:24:56:c0:9f:2a:bd:f2:f9:b6:65:f0:b6:83:
         f9:e4:82:db:83:b7:d8:27:8f:98:0e:c2:67:bd:86:d2:f0:d4:
         99:d9:69:69:ce:2a:2c:a3:10:94:66:a4:3e:9e:9f:08:84:1b:
         5f:25:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 10:33:18 2024 by rpki-client on console-ams.rpki-client.org