Manifest

$ rpki-client -vvf repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft
File:                     0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft (raw, json)
Hash identifier:          YKdRw/fp8hLRwjy53t895W0Zedpv4zGOlKJ9386vCNU=
Subject key identifier:   95:02:9B:5B:4E:8D:CA:33:39:E7:78:94:BD:F1:34:C9:6C:0D:44:B2
Authority key identifier: 0A:84:FE:2B:35:0F:74:84:3F:CD:98:AE:DE:0C:B4:FC:A2:2A:4C:D4
Certificate issuer:       /CN=0a84fe2b350f74843fcd98aede0cb4fca22a4cd4
Certificate serial:       750EDAFC35832615F240F9C71BCD95A12702E0A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CoT-KzUPdIQ_zZiu3gy0_KIqTNQ.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft
Manifest number:          89
Signing time:             Sat 07 Sep 2024 15:05:27 +0000
Manifest this update:     Sat 07 Sep 2024 15:00:27 +0000
Manifest next update:     Sun 08 Sep 2024 18:41:27 +0000
Files and hashes:         1: 0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.crl (hash: eSug9bDOBJbR5SJ5rRSegFJhrJw/pbdgGOjOKnQT1n8=)
                          2: AS60223.asa (hash: PWJYGM4JhvjsnviNywgiWxy11qFINV5kBOsXVgNrxD8=)

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.crl
                          rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CoT-KzUPdIQ_zZiu3gy0_KIqTNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0e:da:fc:35:83:26:15:f2:40:f9:c7:1b:cd:95:a1:27:02:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a84fe2b350f74843fcd98aede0cb4fca22a4cd4
        Validity
            Not Before: Sep  7 15:00:27 2024 GMT
            Not After : Sep  8 18:41:27 2024 GMT
        Subject: CN=95029B5B4E8DCA3339E77894BDF134C96C0D44B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:67:b7:4d:a9:29:64:ea:3e:79:e7:4e:c8:2e:
                    30:4d:9c:c1:6d:8e:f7:30:8d:dc:aa:37:a6:9f:32:
                    79:eb:56:d0:e5:a8:e6:db:bd:44:a8:bc:1a:07:50:
                    c0:f1:05:b4:87:69:a1:0c:f0:21:af:0b:e8:14:31:
                    b8:f7:de:1b:08:5a:11:21:dc:ae:92:02:a6:e9:4a:
                    b9:4f:97:60:79:64:d9:6f:df:b9:6d:f9:e5:16:57:
                    37:08:7c:e0:4e:74:28:7a:6f:03:c7:43:2f:06:c6:
                    dc:f4:53:3e:af:0d:60:3f:e8:e4:f2:59:bd:bb:89:
                    92:f6:fe:aa:7d:63:ef:1f:6c:52:b4:39:9d:7a:a5:
                    34:26:f4:5c:1f:cc:e6:96:c8:a3:c3:3b:bb:35:c4:
                    de:a2:48:94:fd:42:6e:75:59:96:dd:66:b1:9f:e7:
                    a1:a0:9e:42:d9:30:54:d5:60:22:f7:f4:93:2a:5a:
                    01:cb:97:0e:60:90:30:4c:d7:50:6d:0e:50:8c:ed:
                    4f:53:b1:37:9c:e9:4f:29:eb:58:06:86:c2:27:95:
                    37:5d:07:b3:5c:fe:5e:6f:dc:98:73:ae:e1:58:60:
                    45:05:5b:49:4a:2c:ce:6d:19:52:35:17:cf:c5:c8:
                    46:12:90:36:4b:3b:42:a1:ee:59:7b:1d:35:ea:69:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:02:9B:5B:4E:8D:CA:33:39:E7:78:94:BD:F1:34:C9:6C:0D:44:B2
            X509v3 Authority Key Identifier:
                keyid:0A:84:FE:2B:35:0F:74:84:3F:CD:98:AE:DE:0C:B4:FC:A2:2A:4C:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoT-KzUPdIQ_zZiu3gy0_KIqTNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/0/0A84FE2B350F74843FCD98AEDE0CB4FCA22A4CD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1a:91:91:17:23:72:2c:52:fb:88:60:bb:ff:66:5b:28:7d:
         b9:13:43:a4:3e:23:51:4d:cc:95:69:96:28:af:13:91:f3:6a:
         3d:c6:b9:69:de:3a:df:de:24:c1:3b:6a:5f:74:79:fd:5d:2e:
         07:9e:38:b5:37:f3:e7:bb:34:77:ff:41:26:f1:1f:bf:82:9f:
         87:2b:34:e8:7f:71:c5:00:e7:51:12:d8:32:9f:79:55:19:96:
         62:82:5b:11:fe:51:00:85:0b:f0:56:16:e2:7a:b1:bd:95:22:
         1d:7b:ed:f9:27:44:1d:19:2e:f5:f7:47:74:9d:4d:1e:a6:97:
         ff:23:32:59:72:f1:db:c7:f9:9f:d5:9c:3f:e0:c4:82:55:17:
         ee:6b:c4:27:4d:a4:28:07:88:e4:a7:ef:31:aa:31:22:cc:82:
         0d:15:79:18:49:e4:2e:68:a1:3f:4c:02:f0:db:c9:86:d7:6c:
         09:93:c7:16:e5:fc:36:74:c0:38:5d:3e:c8:ce:7d:86:1a:8d:
         12:0d:5f:1f:ee:95:90:c3:ec:e2:36:4c:aa:42:97:e5:89:cb:
         81:b7:e9:c0:7b:a7:21:d3:da:e5:7e:a4:9a:bc:14:0e:eb:35:
         3e:c9:f4:33:b0:88:ee:ab:77:30:2f:28:59:d2:ef:69:43:c9:
         39:3b:cc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 16:35:31 2024 by rpki-client on console-ams.rpki-client.org