Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File:                     FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier:          3/Pjmt4XsBoamy6XlIr8gb6vBDZVmWcqMsyWER7ziCc=
Subject key identifier:   DF:4E:8B:75:71:32:4B:56:B9:A9:34:98:92:10:D8:F4:CC:0F:9A:0D
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer:       /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial:       0191F9A2618CDC5894D3A3138DF968718905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number:          014A
Signing time:             Mon 16 Sep 2024 07:00:54 +0000
Manifest this update:     Mon 16 Sep 2024 07:00:54 +0000
Manifest next update:     Tue 17 Sep 2024 07:00:54 +0000
Files and hashes:         1: 1-Xx7f8pI7qnIoGOlxdEOkFBRebk.roa (hash: ksH1Kre+AqbgtCzRRcWqBpv0Q9RMY6D73LPi59DhMas=)
                          2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: f3lwaRYveAoKTFMk5ho1YvE4SgLmLG3CEdNpGHIuUk0=)
                          3: TfQskO7R5LVZ9axeYujrjREBNWM.roa (hash: pbxpqwc59sRWN78cvuuLW14xb0Fxzm58dyk/xlLwi6o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:61:8c:dc:58:94:d3:a3:13:8d:f9:68:71:89:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
        Validity
            Not Before: Sep 16 07:00:54 2024 GMT
            Not After : Sep 17 07:00:54 2024 GMT
        Subject: CN=df4e8b7571324b56b9a934989210d8f4cc0f9a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:a6:be:70:18:99:5f:44:27:21:52:eb:1f:
                    c3:f9:99:0b:5a:44:02:97:ca:64:74:30:2b:89:f1:
                    04:2c:f3:c3:78:e1:c7:a6:a5:67:c0:9b:bd:5c:3d:
                    df:34:3a:4f:dd:2a:9f:e2:63:05:bb:bc:77:9b:b5:
                    74:b4:17:b6:1e:90:13:57:0b:b7:eb:13:d5:f3:87:
                    39:2b:67:52:6e:c4:9c:8a:0b:19:4a:55:2f:57:12:
                    f1:fd:88:c7:16:cf:a6:f3:bf:6f:cf:80:72:f9:ca:
                    e5:9a:bd:de:a0:c5:3a:d1:fd:06:f5:5b:f3:28:43:
                    7c:1c:99:1f:b8:cf:4f:3f:61:d9:2e:20:62:a1:ad:
                    36:1a:11:41:97:8d:91:d9:48:01:aa:1a:e3:18:a9:
                    b6:97:26:c1:cf:2b:39:52:57:9e:54:89:7b:7d:86:
                    f5:dd:42:3b:05:e8:bd:73:88:78:34:6e:44:45:ff:
                    52:de:04:19:aa:05:c9:3c:e8:65:ee:fc:cd:c7:09:
                    8e:cd:28:3b:cd:92:f8:93:7f:a4:6b:f8:bc:b7:59:
                    ab:90:93:f1:9c:89:75:21:c8:2c:a3:45:97:9d:29:
                    06:54:e5:33:c4:fe:51:b2:a1:49:47:bd:d9:b2:37:
                    5f:aa:39:50:d6:f7:ae:27:15:53:cd:bb:62:e9:7e:
                    3c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4E:8B:75:71:32:4B:56:B9:A9:34:98:92:10:D8:F4:CC:0F:9A:0D
            X509v3 Authority Key Identifier:
                keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1a:b2:c5:5a:4a:41:2b:22:f4:b1:c2:4e:2c:50:55:03:dd:
         56:8d:40:83:0a:ab:b3:4a:8a:82:4f:50:19:c3:2a:6a:d6:08:
         60:9c:67:bf:01:47:b2:2f:86:69:ef:99:f5:c8:84:d8:f8:6a:
         6a:30:2d:91:6c:c5:3c:cf:14:96:c8:a5:21:da:0d:35:5d:ea:
         7d:c0:d9:6c:02:c0:35:19:de:1a:df:fa:10:8a:d2:3e:35:cc:
         34:9a:6e:69:42:72:8c:59:37:20:2c:8c:b6:a3:fe:86:fa:76:
         5e:e3:a9:2d:41:9f:99:4d:54:74:8a:bd:f3:2d:32:08:d8:46:
         58:ce:32:9c:ef:9c:7b:d8:2f:86:4a:ce:01:2a:82:b5:23:3e:
         c7:14:42:e5:58:fa:b4:d2:16:26:e2:f0:f6:22:3d:f1:dd:7a:
         c4:f3:06:e4:e8:ab:a0:61:53:73:4a:ca:aa:38:6a:a5:89:54:
         86:73:d4:44:af:0d:0d:22:4e:7a:28:89:07:80:67:de:ed:cc:
         4d:2a:1f:68:47:54:ef:43:5d:81:e0:31:ab:62:cb:1f:74:ae:
         dd:34:34:34:85:30:0f:6d:19:a2:d0:d3:42:a0:00:2c:6c:51:
         85:b9:13:f9:d5:b3:24:7d:43:ce:e7:af:d0:4e:25:ae:ce:c7:
         3e:11:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:15:20 2024 by rpki-client on console-ams.rpki-client.org