Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File:                     I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier:          5pDeGynW6Bslp23Idap129NphCutruDhx9E2Kqvqj2g=
Subject key identifier:   BD:DE:16:07:DB:1B:4A:37:38:EB:61:98:A3:65:51:60:13:9B:8B:5E
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer:       /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial:       01921173E8AFF39C4751DCDD0FC405123A68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number:          0398
Signing time:             Fri 20 Sep 2024 22:01:01 +0000
Manifest this update:     Fri 20 Sep 2024 22:01:01 +0000
Manifest next update:     Sat 21 Sep 2024 22:01:01 +0000
Files and hashes:         1: 8ha6z8fZ4iwMHVwjvGBsuGb8EhE.roa (hash: /HFvgNjc0Ug+KFO7qYPYmWo+dKS1MEenUbXZymD2iUs=)
                          2: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: XwgTlx9Pr3fOPICvMLd9HRihU68jjk3flYyKwFMVoU0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:11:73:e8:af:f3:9c:47:51:dc:dd:0f:c4:05:12:3a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
        Validity
            Not Before: Sep 20 22:01:01 2024 GMT
            Not After : Sep 21 22:01:01 2024 GMT
        Subject: CN=bdde1607db1b4a3738eb6198a3655160139b8b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:04:33:36:59:d6:d8:df:ad:f2:9b:5f:2f:82:
                    92:c2:77:31:4c:00:4e:52:33:82:62:6b:6a:7f:52:
                    4e:ff:59:89:e8:7e:74:63:58:e5:56:fd:b5:86:65:
                    bb:22:8a:5c:27:82:2f:1f:a7:30:1f:29:e6:8f:1e:
                    b4:68:86:0b:f5:62:ab:3d:bd:d4:98:f1:2b:e3:b3:
                    cc:89:01:b2:48:0d:d9:72:ff:f5:fc:c1:dd:0c:cf:
                    b6:fb:6a:62:76:8b:0a:8d:5e:98:fd:42:fa:89:64:
                    4d:6d:4a:c2:5f:5e:bd:78:61:3b:f5:f9:dd:a4:5f:
                    a3:8d:03:ee:0b:2a:f8:dc:a9:88:f4:ea:52:d3:95:
                    48:01:91:b6:60:17:d2:2e:ee:70:5f:38:2b:4b:a1:
                    55:fa:48:87:ec:ef:18:c2:ed:bb:9b:4c:4b:5a:72:
                    44:ba:69:86:ae:55:37:92:77:e1:b4:9a:14:c2:c7:
                    d1:39:56:66:53:6c:83:b1:38:14:d7:43:07:c4:43:
                    3b:44:14:da:ae:e7:5b:b4:96:a0:dd:4c:c9:3b:e9:
                    93:e3:55:90:37:fb:10:81:a4:73:a7:ce:3c:8c:21:
                    41:2d:8f:cc:80:97:2d:05:46:16:ab:3f:9e:84:66:
                    1d:2d:4d:24:c2:fd:b0:93:85:c9:4c:29:5f:b0:6b:
                    5a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DE:16:07:DB:1B:4A:37:38:EB:61:98:A3:65:51:60:13:9B:8B:5E
            X509v3 Authority Key Identifier:
                keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0a:08:92:53:5d:df:40:f1:bd:f5:ec:74:4e:86:1d:3d:40:
         22:47:da:1e:5a:ef:f9:c1:f5:81:ff:b3:45:2d:20:03:7d:80:
         7d:db:3d:4d:8f:db:5a:7c:84:1b:65:4e:36:ab:ca:97:f7:d8:
         1f:94:25:d2:ab:fc:e6:12:34:35:45:1e:b5:a1:1a:8c:02:b8:
         90:83:c8:3b:de:ea:26:ad:e5:91:60:b5:36:80:67:ca:26:ca:
         5c:dd:0e:02:6c:2e:df:e8:3b:5b:9f:14:a9:6d:e5:e8:50:81:
         9b:e4:c1:c2:65:74:e5:f1:c4:18:56:0a:eb:1e:9d:40:ed:ae:
         0f:06:db:bf:53:3a:77:e8:c1:cf:ae:06:0e:41:a1:86:12:73:
         23:0e:64:3a:c1:e8:94:41:28:b6:11:ac:09:db:2b:15:ca:fd:
         14:21:0f:b7:99:66:0d:b8:de:d9:1f:92:b8:e0:d8:d2:af:12:
         0a:74:39:7c:68:e3:5e:ea:5e:10:12:ca:6b:38:06:a2:6a:cf:
         7d:cb:bd:84:e0:e9:f5:9b:a8:30:97:a7:b4:a0:e2:2c:65:9c:
         97:17:0b:2d:be:df:0d:f8:6b:48:b8:73:63:29:aa:2a:fd:29:
         5c:4e:d8:a1:86:48:37:16:b8:c6:7e:6c:ac:fe:90:d6:99:24:
         b0:1e:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 00:44:37 2024 by rpki-client on console-ams.rpki-client.org