Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
File:                     rmjJUYwq1UwKy4IUaMhuRboWHBg.mft (raw, json)
Hash identifier:          yxVwWlXphIbg3wkbayuqyOIqj2rrEBSmR9ou0NFICiU=
Subject key identifier:   F1:FE:90:4B:62:68:0A:CA:D6:A6:DA:C0:9D:07:4A:05:68:87:09:98
Authority key identifier: AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18
Certificate issuer:       /CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
Certificate serial:       019238138B494FC1FE2CC3B6F05F2E70CA09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
Manifest number:          01A7
Signing time:             Sat 28 Sep 2024 10:00:57 +0000
Manifest this update:     Sat 28 Sep 2024 10:00:57 +0000
Manifest next update:     Sun 29 Sep 2024 10:00:57 +0000
Files and hashes:         1: coQ2brrjPUlgqBGPTcv7zHn6k0I.roa (hash: yezmZtobMvIGaxQ0e8YNra+xRilYDdv4PaoVCew4IV8=)
                          2: rmjJUYwq1UwKy4IUaMhuRboWHBg.crl (hash: EYLQb3bF4W4sSZt3sA/+Ju5HvuV50mbqEWikrSu/Zp8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:13:8b:49:4f:c1:fe:2c:c3:b6:f0:5f:2e:70:ca:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae68c9518c2ad54c0acb821468c86e45ba161c18
        Validity
            Not Before: Sep 28 10:00:57 2024 GMT
            Not After : Sep 29 10:00:57 2024 GMT
        Subject: CN=f1fe904b62680acad6a6dac09d074a0568870998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:bd:ba:36:67:01:39:de:5f:20:ee:88:d3:
                    1f:bc:c4:cf:0d:d9:5a:fc:c4:67:6d:18:23:83:3b:
                    2d:1f:54:78:c3:e8:4d:f9:73:94:2b:01:a0:38:d7:
                    3a:6c:ef:fa:9d:f1:76:26:c7:20:3d:af:07:a4:68:
                    df:d1:73:9f:05:fb:44:12:8f:cb:68:00:59:ef:5f:
                    11:50:8b:a8:31:32:7b:3f:c0:f1:b0:9f:91:57:e1:
                    e6:45:53:e2:a3:11:35:ee:92:fa:0b:9c:75:7c:31:
                    a9:df:93:82:f0:e3:ae:76:c5:e5:81:07:87:11:19:
                    88:00:07:bb:06:1f:ac:05:f8:c4:d7:03:05:27:a5:
                    68:02:07:74:27:eb:dd:54:b1:2f:b2:18:67:c8:81:
                    95:bc:d4:07:19:ed:c9:0f:3b:11:7b:ce:87:9b:37:
                    83:5e:b9:d8:32:b9:57:17:ac:1f:90:6b:f4:ae:f1:
                    12:43:e2:3e:97:e6:32:e1:fe:89:55:35:46:32:49:
                    da:30:44:bd:0f:52:16:a5:1f:47:33:6e:f0:71:c7:
                    c5:e0:2e:e4:d7:11:24:ab:53:a7:3a:9d:2e:2b:df:
                    67:7e:cc:bf:96:df:64:f2:05:38:98:63:14:73:84:
                    55:d8:09:3d:a4:cc:47:99:c9:94:56:9a:9c:de:ed:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FE:90:4B:62:68:0A:CA:D6:A6:DA:C0:9D:07:4A:05:68:87:09:98
            X509v3 Authority Key Identifier:
                keyid:AE:68:C9:51:8C:2A:D5:4C:0A:CB:82:14:68:C8:6E:45:BA:16:1C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmjJUYwq1UwKy4IUaMhuRboWHBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7b42b4-1d12-42cf-a8f0-16b6beda87d0/1/rmjJUYwq1UwKy4IUaMhuRboWHBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:81:3e:17:9d:ae:12:8b:29:26:d4:63:6d:24:c9:08:f7:3e:
         0d:98:c8:af:60:ee:d9:c5:54:b1:5c:d9:03:ae:91:fe:fa:28:
         87:5b:7a:ce:fa:72:43:d2:59:b9:b2:9c:7f:fe:b7:71:aa:51:
         9f:97:d4:61:80:89:c4:85:b7:63:9d:83:d3:e9:fe:11:36:0c:
         53:74:3b:c7:49:77:97:0d:91:be:10:da:34:09:dd:de:f4:5b:
         60:ac:4c:a4:21:ca:9d:e2:25:ef:ec:f3:b4:7a:14:8c:69:d6:
         4f:90:81:10:bb:be:f8:0b:7e:10:05:22:14:e1:6e:2e:02:bc:
         6b:56:1d:da:9e:be:ea:2e:b6:db:c5:94:87:9b:e0:68:b4:38:
         e4:58:cc:23:cd:53:31:ea:b2:d4:6b:c6:35:0b:b8:27:1c:db:
         29:28:34:1a:8c:ce:c3:29:be:04:49:72:dc:8e:3f:89:57:57:
         98:d5:16:ca:c9:47:8a:c1:cd:fa:9d:c7:3a:8e:af:b7:37:db:
         26:a7:be:57:8f:91:f3:c3:61:3d:37:84:c1:9a:23:04:64:17:
         bb:86:ef:c3:42:41:dd:12:10:42:f1:14:e2:76:f1:0e:48:f0:
         42:99:c0:df:d2:2a:a6:15:b8:b6:d6:8b:90:c6:43:0d:c6:fb:
         d0:79:3b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:43:21 2024 by rpki-client on console-ams.rpki-client.org