Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
File:                     _nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft (raw, json)
Hash identifier:          j1BpsKhPLZZ36Rgq+fOybshI1JKrqFld26bDXzyK7H4=
Subject key identifier:   D0:3A:4B:E0:DA:AB:A3:69:AE:5A:A3:BD:04:F1:36:D7:FF:17:34:55
Authority key identifier: FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22
Certificate issuer:       /CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
Certificate serial:       0192343710758B1929F3751121F31707BE05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
Manifest number:          126C
Signing time:             Fri 27 Sep 2024 16:01:16 +0000
Manifest this update:     Fri 27 Sep 2024 16:01:16 +0000
Manifest next update:     Sat 28 Sep 2024 16:01:16 +0000
Files and hashes:         1: Tkvu0udPIozi8Vzbnw8JVpR8Mgo.roa (hash: RcGdbjXBN/i9lN3fWQeKzhYDCO8w3v1F4GyUyTZAs8A=)
                          2: _nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl (hash: oQG3XYmsXN1wqPrDfOo5Mc3JhRXLzFWkdJuVBuKfPtk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:37:10:75:8b:19:29:f3:75:11:21:f3:17:07:be:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe7a8d7db32a40d4e1d0028a7cfd0814b650f422
        Validity
            Not Before: Sep 27 16:01:16 2024 GMT
            Not After : Sep 28 16:01:16 2024 GMT
        Subject: CN=d03a4be0daaba369ae5aa3bd04f136d7ff173455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:32:87:97:33:4f:2c:7c:fe:52:52:10:6b:77:
                    68:2b:c5:d2:03:90:e3:ae:70:01:98:10:fd:1b:03:
                    54:5f:37:b3:fc:4e:4c:e2:31:97:95:38:db:1b:02:
                    df:dd:5a:c8:84:62:ec:02:ce:25:2f:c2:22:7f:55:
                    8f:4e:98:0b:6e:37:93:2d:34:d8:32:9d:d2:7c:f2:
                    91:93:a1:e6:5c:f9:40:ec:9a:00:1d:0f:36:53:70:
                    24:e3:94:ae:69:35:b8:0b:72:27:f6:c9:53:36:5d:
                    0e:5b:7d:10:43:61:a6:03:69:60:24:f7:d2:7f:e6:
                    ca:79:bc:e6:9e:d8:0f:4d:9f:83:50:bb:51:29:0d:
                    a4:99:6e:79:51:de:32:14:46:f1:be:90:cc:1e:b4:
                    ce:57:5b:8c:8a:60:25:8d:60:f3:89:de:71:79:94:
                    38:72:5b:06:ce:0e:ef:7d:46:9f:a8:d8:7f:dc:4f:
                    33:b2:90:0d:a7:58:c8:b6:3b:44:7e:34:53:62:ba:
                    da:3c:e0:35:43:51:7b:54:c5:12:d9:86:5d:32:46:
                    33:ff:c2:9f:f2:ad:7a:45:85:a2:6e:56:99:3d:6c:
                    dc:58:02:5b:db:f9:f3:20:37:7e:26:ec:61:d0:d5:
                    1b:04:b0:19:75:df:2f:58:d5:27:e8:95:ac:31:a2:
                    e4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3A:4B:E0:DA:AB:A3:69:AE:5A:A3:BD:04:F1:36:D7:FF:17:34:55
            X509v3 Authority Key Identifier:
                keyid:FE:7A:8D:7D:B3:2A:40:D4:E1:D0:02:8A:7C:FD:08:14:B6:50:F4:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/71e948-691e-4dea-b02b-b12a6933f829/1/_nqNfbMqQNTh0AKKfP0IFLZQ9CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:fd:0c:9c:68:e3:e3:05:58:c0:9c:c6:41:60:0c:69:24:
         91:44:06:8f:d0:4e:34:e7:3b:6f:14:e1:57:34:ab:5e:52:02:
         3f:3d:9e:ba:73:14:f2:26:c2:35:7c:1a:5a:86:a6:44:d1:9c:
         ef:48:d2:ee:4d:57:4c:73:e6:d6:af:86:8f:d8:11:78:de:e7:
         7f:70:1d:29:e1:29:a4:9d:4c:dd:e2:64:4a:7b:ee:a3:2c:f4:
         26:08:4d:0e:c3:4b:4a:c7:21:44:83:a9:fc:96:b8:a0:b0:d5:
         42:c8:d6:d9:d1:70:95:3e:b5:7d:60:ca:ca:d3:c9:ac:0d:40:
         41:94:f7:b1:78:94:7a:2f:95:4b:ab:4b:ff:da:00:8d:49:30:
         7e:4f:3f:4c:38:32:84:6d:ab:05:f0:cb:61:8e:eb:78:49:4f:
         a9:5c:5d:de:fe:5f:99:32:af:83:02:0e:17:91:74:73:ac:35:
         a4:a2:7f:1a:94:84:c6:1e:ea:c8:f7:a3:d6:56:32:fd:82:c0:
         82:76:e0:b7:9f:25:30:34:59:20:54:e7:29:5f:29:49:6a:2d:
         da:5c:ca:ee:04:09:4b:7d:64:cb:b0:c9:8e:90:27:d4:69:09:
         4e:0f:85:9f:db:eb:93:61:1a:37:43:1a:a1:88:af:5f:27:78:
         fc:22:87:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:01:57 2024 by rpki-client on console-fra.rpki-client.org