Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
File:                     IWRiyMAGWgps6vJDmFtpfPE1e_s.mft (raw, json)
Hash identifier:          27S+Xkgsx8zp2mPhO8JKyoqsLvCBugKUOn6cULZMLVc=
Subject key identifier:   CF:8E:BD:D5:29:60:8F:90:20:F6:14:48:01:D8:C0:61:38:67:C3:F8
Authority key identifier: 21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB
Certificate issuer:       /CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
Certificate serial:       0191FAEDE2833F7AFC10A1CA0DADF55DEB6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
Manifest number:          0FAB
Signing time:             Mon 16 Sep 2024 13:02:59 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:59 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:59 +0000
Files and hashes:         1: IWRiyMAGWgps6vJDmFtpfPE1e_s.crl (hash: vxzPi7u3yamhepDU3jpNZtYhrl7xONTChF7V8Ot8wug=)
                          2: ehRTpS4atm_gd1HH1CMPaf7twgo.roa (hash: XZGvpCL/0ip82EYuHaqJpoleqSP75ld/Q6nrk9baDgc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:e2:83:3f:7a:fc:10:a1:ca:0d:ad:f5:5d:eb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=216462c8c0065a0a6ceaf243985b697cf1357bfb
        Validity
            Not Before: Sep 16 13:02:59 2024 GMT
            Not After : Sep 17 13:02:59 2024 GMT
        Subject: CN=cf8ebdd529608f9020f6144801d8c0613867c3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:26:c7:cf:18:d6:e9:e7:45:71:c7:02:28:
                    6e:71:1f:44:11:50:31:1f:9c:e7:0e:b7:6b:68:bc:
                    4b:a8:b5:8a:bf:cb:9a:0b:4d:ea:af:cb:ce:cf:63:
                    d4:af:2a:10:ec:b3:c5:c2:7f:25:bb:6c:e5:7c:ab:
                    ad:a7:dc:5b:c0:d9:07:bf:13:2e:18:84:4a:89:79:
                    f2:b8:08:56:ad:42:7f:2e:7d:1b:e6:58:74:d7:a4:
                    03:fa:0b:56:b3:77:3b:90:e3:d0:c0:51:78:01:46:
                    1b:cf:7e:75:92:cf:4e:f4:74:8a:4f:60:fb:db:fc:
                    f4:2b:de:1a:67:bc:26:92:6e:3a:53:cf:61:ad:6f:
                    1e:ec:30:e5:fd:a1:2f:b6:ed:7f:16:a3:26:63:6d:
                    b2:0b:25:70:b5:74:7a:8a:ce:72:7a:93:a2:7e:8b:
                    02:bd:c7:f7:0e:19:03:24:89:ee:0d:d4:a3:60:06:
                    45:a8:5f:c3:7e:f7:9c:1e:ab:4a:40:5f:25:1f:d4:
                    6f:6a:b6:74:4c:11:39:b6:7a:6c:f0:ba:40:86:7b:
                    db:64:9b:80:b8:e3:2f:bb:01:cf:74:8c:7d:e5:33:
                    ff:f8:4d:a6:bd:e4:6a:3b:b1:a3:6a:c0:1d:30:36:
                    48:42:0d:4f:a8:c4:69:2d:db:49:f2:94:2f:fd:60:
                    fa:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8E:BD:D5:29:60:8F:90:20:F6:14:48:01:D8:C0:61:38:67:C3:F8
            X509v3 Authority Key Identifier:
                keyid:21:64:62:C8:C0:06:5A:0A:6C:EA:F2:43:98:5B:69:7C:F1:35:7B:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWRiyMAGWgps6vJDmFtpfPE1e_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/fd90c5-183c-4d69-92f1-56bc70967885/1/IWRiyMAGWgps6vJDmFtpfPE1e_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:80:e4:48:54:e0:26:e5:28:a0:75:42:b0:ef:6a:3e:2d:75:
         8d:2b:00:4a:f3:63:f0:11:98:b3:d5:a1:fb:8e:5b:2e:01:f3:
         06:a2:1d:79:7a:07:d5:19:23:be:7a:d2:f4:06:de:bc:6a:0b:
         9d:13:dd:78:76:e5:42:9a:31:df:5c:72:a0:65:51:e1:0b:78:
         0e:2f:f5:d1:31:73:19:e1:c4:8f:72:4c:27:6c:73:ab:30:ff:
         15:41:03:d4:8b:5f:12:84:3a:a2:cb:32:54:ed:26:8a:2f:9a:
         bf:9f:97:7b:72:24:3e:d5:bf:ef:1e:19:ef:94:21:a5:e9:d7:
         0c:01:65:c1:4e:2d:67:7e:91:3c:75:18:50:76:67:96:26:fa:
         f5:0f:a9:77:ae:db:36:98:93:25:ee:23:1a:6d:32:16:52:1b:
         a6:93:60:9e:36:bd:7b:8e:0d:d8:da:d7:72:f3:3f:85:69:50:
         68:94:2e:0b:5e:85:8b:98:96:fa:57:0b:8e:f6:b6:f3:19:39:
         04:2d:81:c7:8c:dd:f3:4d:bf:e8:75:bb:8d:6d:2a:89:78:84:
         eb:40:e3:a9:70:d0:fe:59:92:c6:c8:f8:e3:95:9b:7d:1c:d4:
         ee:61:c4:3e:41:61:08:75:29:5b:6b:b6:ff:55:df:22:1f:f4:
         d1:fa:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:09:30 2024 by rpki-client on console-ams.rpki-client.org