Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File:                     aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier:          gsf4CiwKuU+pYJfkaNn1XOxSLqEpxyNSqavNaFaIvMU=
Subject key identifier:   04:14:91:C1:56:4F:1A:16:7E:64:11:07:3D:BD:42:F1:47:09:C6:24
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer:       /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial:       01923926696D8FE9817CF1DCD5F6216D4E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number:          0D66
Signing time:             Sat 28 Sep 2024 15:01:11 +0000
Manifest this update:     Sat 28 Sep 2024 15:01:11 +0000
Manifest next update:     Sun 29 Sep 2024 15:01:11 +0000
Files and hashes:         1: EqngZ64bPI00K_pcV3rffRwinx4.roa (hash: 2Z88az6VuX4g/naBOCsWljRpCB9eQJARm3RyFzg/PxE=)
                          2: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: gQTXWuAK2jqEzXVCEm7zNlL3rLATh0WwC+3fECu0CiY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:26:69:6d:8f:e9:81:7c:f1:dc:d5:f6:21:6d:4e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
        Validity
            Not Before: Sep 28 15:01:11 2024 GMT
            Not After : Sep 29 15:01:11 2024 GMT
        Subject: CN=041491c1564f1a167e6411073dbd42f14709c624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e6:40:a7:70:44:f1:3d:c5:18:94:6d:ca:8c:
                    f2:2c:5e:77:ad:63:cd:37:ce:94:82:06:16:62:28:
                    2a:74:6a:f9:9f:5d:a4:d5:f6:e7:ca:c8:1b:37:05:
                    35:7d:56:50:c6:53:fe:59:f8:79:16:78:fe:3d:ab:
                    fe:b3:92:e6:cf:1e:37:cb:1a:06:89:cf:86:d1:90:
                    9f:0a:6f:13:df:f3:eb:49:15:7f:f8:ac:b0:d2:14:
                    5c:dd:06:fe:bb:6f:c9:bf:19:01:dc:7b:fd:ae:24:
                    c1:23:48:17:d2:e8:12:8c:b0:9f:78:f5:28:a3:50:
                    2e:69:ef:92:7f:03:6d:e0:a6:48:9c:ec:79:2f:30:
                    de:c9:04:3d:05:df:c9:dc:6c:35:57:86:b4:a6:d5:
                    1c:ab:96:6c:35:5e:34:1a:5d:89:3e:64:2c:1b:f0:
                    20:a0:0a:02:85:11:af:79:ee:1e:ea:18:f6:3e:2c:
                    31:70:e8:e9:13:7d:97:76:f6:19:a3:a7:22:d8:25:
                    2e:4a:e9:73:45:4c:43:a6:66:76:4e:28:8d:0a:fa:
                    e9:fc:3c:31:87:87:89:ed:c2:c3:29:5a:b8:96:56:
                    df:39:c0:6c:5e:88:2f:25:98:46:2d:93:fd:71:18:
                    76:cc:2d:72:03:bb:03:b7:7d:a5:b9:89:34:35:07:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:14:91:C1:56:4F:1A:16:7E:64:11:07:3D:BD:42:F1:47:09:C6:24
            X509v3 Authority Key Identifier:
                keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ac:65:40:e2:b2:e6:7a:22:58:50:e4:33:c9:74:f0:e1:ca:
         2b:67:57:1c:93:1f:56:3a:08:8f:01:6c:3a:45:1c:58:38:78:
         5b:94:55:91:ea:95:4f:db:e7:4d:7a:29:8d:33:79:6f:dc:a2:
         6a:0f:18:cd:be:2d:74:ea:d1:c6:5b:60:00:cb:7f:27:e3:ca:
         30:cd:40:bc:76:42:f9:8f:f4:29:61:40:51:bf:ff:71:ba:c3:
         e8:43:a6:b4:f8:cc:6d:4b:23:01:57:db:a6:09:95:d5:67:92:
         8e:28:b3:83:8d:b9:af:b2:9b:c0:c6:12:af:5f:40:8e:59:50:
         42:a2:f1:ab:cc:72:34:4a:26:68:d7:3b:b8:dc:7d:7c:3f:e4:
         d7:e6:55:9d:7e:b0:bc:4f:56:f8:ae:fd:62:fa:a3:f5:67:0a:
         f3:d8:cb:44:69:c4:88:f5:91:11:84:49:d1:fb:92:fb:e0:fa:
         dc:c3:cf:82:86:74:6b:43:5b:7a:85:14:d0:66:72:96:cd:70:
         44:03:34:c7:dc:41:cf:6a:e4:b0:1d:20:ae:05:4f:21:87:a9:
         ea:94:4d:0a:5c:f8:f9:39:50:8d:ba:75:6a:1b:90:d4:0a:d6:
         00:77:c2:38:af:13:4d:9a:59:d0:07:2a:08:2c:2c:e3:2f:d6:
         ab:89:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:12:56 2024 by rpki-client on console-ams.rpki-client.org