Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File:                     d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier:          MgcxlmvitEIEMU70B9CgmrZFvZ2CpAQWkR4sgCOdCnI=
Subject key identifier:   38:08:BF:63:62:42:A9:C4:30:D2:7D:B9:0D:61:87:C1:2C:EB:33:42
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer:       /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial:       019234DD0108E0A79AE81734CB09E94835F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number:          09C0
Signing time:             Fri 27 Sep 2024 19:02:31 +0000
Manifest this update:     Fri 27 Sep 2024 19:02:31 +0000
Manifest next update:     Sat 28 Sep 2024 19:02:31 +0000
Files and hashes:         1: 7JT_uxvYidWkwd_AJE5hW3teeOo.roa (hash: C9Ow+EmSouj+IL+/H2aMyECcKArMAVdumoC/H0BW8YE=)
                          2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: QyMDj+xi0VmlCizZd55I4+V43UIbxAwyOz+sdivX4Pc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:dd:01:08:e0:a7:9a:e8:17:34:cb:09:e9:48:35:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
        Validity
            Not Before: Sep 27 19:02:31 2024 GMT
            Not After : Sep 28 19:02:31 2024 GMT
        Subject: CN=3808bf636242a9c430d27db90d6187c12ceb3342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c8:d4:ef:e1:49:4d:fb:ad:d5:43:0a:df:dd:
                    56:da:05:76:1b:c0:fa:47:2c:65:77:b9:1f:85:e4:
                    ae:8a:d2:0a:df:e5:f6:05:2e:cb:07:ee:c5:04:a9:
                    81:18:b6:1c:71:53:74:f2:13:e9:cc:6e:58:c2:d7:
                    98:b7:33:9a:fa:c1:0f:79:55:83:c9:1f:f9:c2:62:
                    7c:37:ef:bb:35:6a:d6:88:3d:ab:3b:98:6a:aa:4c:
                    1c:cd:76:a4:08:9c:ca:83:3f:e9:b9:8e:58:49:da:
                    cb:c4:a9:bc:37:13:0c:06:e6:80:92:3e:dc:3e:98:
                    4b:60:cb:4b:7b:f4:cf:07:85:7a:ac:eb:55:90:7d:
                    08:86:45:99:fd:7f:df:d3:d2:83:a4:df:6f:48:5e:
                    0d:94:a5:f1:93:b1:42:64:07:5c:61:48:a7:63:79:
                    e2:93:32:64:af:77:a8:f4:b3:d1:ce:a9:22:c1:11:
                    50:fb:2d:ab:df:3a:71:59:65:9b:e3:f8:72:14:78:
                    55:f5:c2:8d:19:8d:15:87:06:1e:15:4a:53:77:9a:
                    d8:49:a8:1b:61:d5:7d:fa:aa:8d:4e:ab:33:bb:a1:
                    c9:60:31:5b:2a:1b:aa:8c:35:79:ce:05:d0:8a:d2:
                    22:a5:50:c9:ae:df:e1:e5:41:f1:76:74:ea:68:b8:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:08:BF:63:62:42:A9:C4:30:D2:7D:B9:0D:61:87:C1:2C:EB:33:42
            X509v3 Authority Key Identifier:
                keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:70:fc:0e:ce:13:df:1c:5f:8d:b2:4e:f0:4e:7b:93:cc:d7:
         87:45:dc:00:95:c8:7a:e9:9b:88:26:b0:ba:09:46:f2:8b:82:
         82:83:02:57:51:26:bb:4f:2a:13:16:29:0a:f1:34:a0:52:ab:
         cf:c1:e2:9a:0a:9b:ea:ac:07:41:73:3a:61:ba:7b:69:ed:92:
         f5:5a:8c:7d:12:58:d4:a8:e6:ee:8b:71:7d:06:68:e4:d1:de:
         10:10:c0:7f:eb:2e:cd:02:df:ed:30:98:65:b2:3c:c0:a3:5c:
         a4:47:9f:c5:9a:58:00:39:a5:7f:34:b6:07:95:a3:dd:d5:6e:
         34:79:29:de:17:4d:7f:35:3f:c1:3f:6f:6f:c7:ad:36:99:21:
         1a:d0:5f:8b:ed:9b:a9:00:ac:f5:f4:2c:b8:85:99:3a:c4:3c:
         ba:fc:cb:f0:2c:56:61:db:72:e8:d8:b5:01:b7:90:25:78:3d:
         20:a2:7d:1f:1f:67:b1:22:f3:33:27:28:11:cb:7e:bf:8b:ff:
         b5:bf:80:17:4c:22:2b:8d:f7:b2:8d:a8:f9:c5:fc:91:64:2f:
         96:41:79:72:8b:02:84:2e:dd:ed:4e:5a:52:98:8f:55:41:f8:
         1c:07:09:51:0c:4a:fc:9d:11:2a:3b:3a:2a:4a:ae:14:0a:b6:
         eb:f9:c8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:48:59 2024 by rpki-client on console-ams.rpki-client.org