Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
File:                     jphwObPzstubKYrg2NDrNIlprWI.mft (raw, json)
Hash identifier:          BPd3do/R14zI1N0d2oVU4iALZcnKB8u0/jCeMuXHEPs=
Subject key identifier:   77:35:93:62:FD:36:90:61:D2:0F:9F:2D:1A:B4:B0:C9:51:1A:2D:5F
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Certificate issuer:       /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial:       0192B4F55DDCB77F4AB125B7BAF6733E27C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
Manifest number:          09EB
Signing time:             Tue 22 Oct 2024 16:00:32 +0000
Manifest this update:     Tue 22 Oct 2024 16:00:32 +0000
Manifest next update:     Wed 23 Oct 2024 16:00:32 +0000
Files and hashes:         1: 9jMjkUsitPAofuoHvVZ0AhQMOcY.roa (hash: EV4rPb9B/IggawB/zr5ukH0xI9fJgfxYyWFtYPyW588=)
                          2: HKUNS1ZmSUzVgcBvWTUNtbl8LQk.roa (hash: +WF16fvwKzrGpHcqiGmVxA1OW6dBBcacDJHy9jPTdyI=)
                          3: TMCe_d-FMDkIg_5-F2UoLGvSykY.roa (hash: N+Kw7QeOr+gGqW9r+M/Wjs5lUqkxXkpPXGDC/uq6BVY=)
                          4: Wu5SlgEQbv_1kAvYZKCoeTY_h2E.roa (hash: WWKcLjG5dP3AvCwBZc8lg1x45PWPHYn36x5N4G/Yh0U=)
                          5: gCTiZMfao7qb3ujlwjRlW3mOTxE.roa (hash: csXsQgOfwgb28ugfpyYeeH0/o2ESbCPDPB9+DjzRADg=)
                          6: jphwObPzstubKYrg2NDrNIlprWI.crl (hash: 4l5zUJelxWrq7GdTvDZSuHgaK1Rtyct6QWjxzdluTXQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 14:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b4:f5:5d:dc:b7:7f:4a:b1:25:b7:ba:f6:73:3e:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
        Validity
            Not Before: Oct 22 16:00:32 2024 GMT
            Not After : Oct 23 16:00:32 2024 GMT
        Subject: CN=77359362fd369061d20f9f2d1ab4b0c9511a2d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:28:1f:ca:b0:62:b6:53:ea:f7:9f:3e:bc:
                    79:94:f4:73:8d:7e:8e:c5:30:e7:74:e8:d2:e6:9d:
                    a2:18:ff:c1:45:84:8c:88:ef:ce:e9:e5:f3:13:dd:
                    ee:3d:e4:ab:83:26:67:c9:bc:55:dd:11:1a:a5:e9:
                    69:38:58:e8:12:2e:34:4a:db:f0:8a:ba:8e:65:ab:
                    5a:3c:11:a4:e8:49:f3:15:49:29:93:e8:2f:f3:db:
                    e6:bc:17:0c:25:3d:a5:4f:0f:95:0e:72:d1:2c:52:
                    ab:bb:b1:e5:61:a2:a6:95:43:6c:55:cd:46:07:3c:
                    99:bc:f1:ae:6e:3e:bb:83:09:fb:5a:34:76:22:44:
                    f5:98:b0:4d:d1:47:1b:33:82:c8:29:2d:59:60:5d:
                    27:e2:79:e3:a7:a7:33:e9:1b:60:fe:7e:be:a8:64:
                    5b:3f:c7:8c:3b:7a:2a:20:ad:44:4a:39:4b:2b:9f:
                    f0:11:44:fc:88:22:62:1c:d6:b8:31:89:a4:b9:50:
                    d6:c6:17:ea:a2:0c:84:93:68:8f:96:75:77:71:f6:
                    91:d7:e2:65:3c:e2:2c:d5:f1:d6:90:ac:e8:96:e8:
                    d2:a1:e3:15:80:c4:cf:bb:13:9d:d2:a3:c5:bc:b7:
                    fa:86:4c:22:0a:33:c2:40:43:2a:f1:97:2a:1d:b5:
                    68:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:35:93:62:FD:36:90:61:D2:0F:9F:2D:1A:B4:B0:C9:51:1A:2D:5F
            X509v3 Authority Key Identifier:
                keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:6b:d5:d3:b7:6b:8b:19:4a:46:2b:cd:c5:51:0b:75:bb:6e:
         63:f6:f0:fe:c2:c8:7a:82:7c:3c:1a:42:ca:7c:70:89:62:e5:
         7b:d1:7b:b4:27:3d:59:b5:d8:0b:a5:c6:d1:dc:a4:57:39:9c:
         b7:da:77:12:5b:76:cf:31:62:26:75:7b:86:c5:9e:9a:e7:47:
         80:9f:f3:a4:ff:ff:b5:3e:0c:d6:8e:f6:e4:a6:9b:ad:01:a0:
         db:05:63:93:d3:a2:d6:ca:91:2a:84:d0:26:5b:d9:c1:66:06:
         c5:1c:8a:93:a4:c0:3d:dd:d5:ca:c1:69:08:76:75:03:44:45:
         24:e2:78:c6:4d:17:3e:9d:20:a7:03:71:a4:ec:21:41:cd:7f:
         3e:84:d8:ff:86:f9:61:4a:6c:11:91:09:e6:bc:1a:d8:49:28:
         61:66:ff:17:9e:ef:16:e4:c0:2b:28:a9:f0:b2:b4:f8:02:04:
         d7:7c:eb:de:cd:3c:25:dc:86:ac:53:4c:82:a8:d7:e2:62:35:
         6a:df:02:35:71:15:5e:64:e5:dd:96:7f:de:1e:38:89:7a:18:
         06:43:bc:af:fe:8d:72:d6:e0:10:75:53:d5:68:ba:9d:fb:56:
         48:5c:a9:4e:35:83:c7:75:96:f7:89:a5:1b:3a:3e:c4:f4:4d:
         08:44:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 23:08:20 2024 by rpki-client on console-fra.rpki-client.org