Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File:                     cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier:          sKGImLaxvgTCPg0cuWSFI2hE+0bUjlPbsNxTYaSs3Vk=
Subject key identifier:   61:06:45:3F:44:C2:1C:4F:C5:DB:8E:BA:4C:90:60:BA:7B:11:C5:0D
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer:       /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial:       01923A023E871E987D453B861A851789F67D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number:          0287
Signing time:             Sat 28 Sep 2024 19:01:18 +0000
Manifest this update:     Sat 28 Sep 2024 19:01:18 +0000
Manifest next update:     Sun 29 Sep 2024 19:01:18 +0000
Files and hashes:         1: _CTtiKjQYHzlVcO-U7zpVQq42Ic.roa (hash: A5Fc1lVhonAbfXeh+B7QMfWWJa2Vh+v37IUPcwfiGn8=)
                          2: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: x14TUoI8Oyn4UTku0Wk+6W3fVOUaVie6zh0zZ5CbibM=)
                          3: svxU7F-l2xch0UxbkeKw7zlhVfM.roa (hash: Sm/Y/1fzHPwXq016jlaHXGyL/s2a1ANf6X1qcB4m0bc=)
                          4: tqYc2__uGlmSl9YzecDNT2fbj1c.roa (hash: /yByxoWsL/jk5rlA6JyGuw8Xedo7JE6rnAayeqqubBs=)
                          5: vHbCfyXSTRxyRGnfFKXvjIf7MJA.roa (hash: 4qVwbnAwQAIE3v3r1yXeiCQCYTK3eaHjNt3J9xyqv5Y=)
                          6: yBw8Wbas7-_tbRh6wsiDwd7vMkg.roa (hash: SdtOdBUOFhKTvC/us3uxfeRVUzJc0vZo8cO+pLbWrTU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:02:3e:87:1e:98:7d:45:3b:86:1a:85:17:89:f6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
        Validity
            Not Before: Sep 28 19:01:18 2024 GMT
            Not After : Sep 29 19:01:18 2024 GMT
        Subject: CN=6106453f44c21c4fc5db8eba4c9060ba7b11c50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:8f:98:aa:70:9d:3e:21:8a:57:2f:52:f2:
                    1d:cc:04:42:a0:3f:aa:de:d7:2d:0f:7c:30:6e:22:
                    97:df:7f:fa:ae:9c:9e:5d:a3:cd:c2:c0:26:56:3e:
                    1f:44:a8:fb:56:b5:f6:dc:ec:8b:e4:e1:67:12:15:
                    50:e1:66:36:83:19:67:5a:a3:26:b4:5b:dc:d0:ef:
                    b7:8c:de:94:db:a5:a0:50:81:d3:e9:3a:cf:db:c9:
                    bf:fe:aa:49:9b:22:ed:16:4e:ad:8a:df:13:a9:44:
                    7e:ac:ba:62:75:9b:81:b6:c2:aa:cb:19:a1:99:32:
                    ad:15:65:29:f4:92:9b:22:83:2d:db:e6:d4:ba:71:
                    92:f5:18:e0:2c:af:49:89:5c:58:6a:0b:7d:25:42:
                    5d:2e:d7:39:a8:3f:09:69:38:9e:1b:25:4c:68:ab:
                    e6:d8:d2:af:f3:c0:be:35:27:d6:c3:d0:f0:19:46:
                    8c:03:bc:ee:ce:ac:ac:2f:46:b9:89:1b:b3:f1:4c:
                    0e:49:43:35:4b:b7:25:11:ba:5d:1d:12:55:75:65:
                    8f:50:cb:c6:cb:a7:77:a6:7c:ec:fe:78:8a:40:1e:
                    5d:e9:e2:3a:7a:a2:d2:58:66:fe:ef:33:9f:39:59:
                    ae:bc:8b:60:3e:d0:d3:15:9b:1b:a0:7c:83:63:4e:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:06:45:3F:44:C2:1C:4F:C5:DB:8E:BA:4C:90:60:BA:7B:11:C5:0D
            X509v3 Authority Key Identifier:
                keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e5:d6:53:f3:2e:f7:d6:78:44:1e:e6:48:98:e2:c1:54:f1:
         06:ff:f7:5e:af:96:7b:b4:eb:f6:47:71:83:9f:5e:09:88:83:
         0a:42:e6:d2:4d:f0:bb:ef:61:56:1a:3b:61:f8:06:b4:c9:2a:
         c9:7b:3a:7a:34:55:4b:a8:e2:ba:e0:9f:26:4b:3d:5b:58:03:
         43:a9:2f:e3:62:2b:18:3f:39:0d:94:ec:2e:47:1f:d3:23:2f:
         66:e4:33:02:98:df:e7:20:55:20:66:14:86:e5:a1:ce:eb:7d:
         64:80:55:06:97:29:ea:a8:67:b1:8b:31:d1:51:41:02:dc:f8:
         69:59:8f:a3:09:35:58:10:99:ec:c0:c3:f9:3f:06:8b:29:bd:
         6d:80:98:ca:c0:ac:37:d0:5c:87:67:8b:d0:35:63:96:96:3e:
         21:22:aa:b7:62:ce:8e:00:43:25:71:84:59:2e:2a:21:c1:44:
         68:ee:cd:0d:99:ad:54:7c:83:11:58:de:fd:05:29:6d:a5:01:
         44:97:9f:17:37:44:a0:9d:29:cc:6e:6a:e9:56:73:f0:81:f8:
         04:fd:f7:2b:00:68:f1:75:6f:2b:a3:cd:bc:c5:e0:b4:35:1e:
         b1:fd:0a:e0:a7:db:29:f9:21:3f:30:18:3c:57:d9:3f:c8:bf:
         bb:74:3d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 21:05:28 2024 by rpki-client on console-ams.rpki-client.org