Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          HIPbdNhx40+Oz+ioL0TNqGyE8V9li4vhgKOAaBJmvI0=
Subject key identifier:   BD:34:D7:12:D2:B4:CC:D8:76:47:61:0B:56:96:D4:AD:6F:31:46:8C
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       0191FA47D4F4F43855E56D3D6489872C3841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          014C
Signing time:             Mon 16 Sep 2024 10:01:37 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:37 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:37 +0000
Files and hashes:         1: 56u9DaVBFRifNCwM6TBFPNa8wBY.roa (hash: J+HX3s34aq+tkfWDVNAnSUmJ7sHELSBA7NcfzrA8ovk=)
                          2: D5sPXTxAF7C_4o7Bt4vlbo_P5TU.roa (hash: GSuj11Nqcti2Syrflxs5dx/e6LdTXErsN65n+JcCoME=)
                          3: Dufyk__ztvQ_zIYPO4_dTXTdsu0.roa (hash: 1Cmm/CrQovMHQ4KqKsNZRNP784G7x+x/rs8KACQl8+s=)
                          4: sTjvOTbsn_PO8aEAx09eJEQOKno.roa (hash: BRe1wHr61fjpNtHnYMgo7vBeCstu67YcnAMUbd0U0bk=)
                          5: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: QkhMFUj/fAoA1tUCgYPD1DZONYVuOZVu6OPYNpRbFEY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:d4:f4:f4:38:55:e5:6d:3d:64:89:87:2c:38:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Sep 16 10:01:37 2024 GMT
            Not After : Sep 17 10:01:37 2024 GMT
        Subject: CN=bd34d712d2b4ccd87647610b5696d4ad6f31468c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:42:ec:64:93:87:13:08:1b:b3:ae:84:c4:
                    e2:05:9b:0d:4d:af:4a:ba:6f:08:24:3a:98:a7:48:
                    fa:9b:26:8d:af:23:72:6f:f6:4d:a9:cb:7a:a3:a6:
                    f0:9a:be:77:df:3f:19:d5:07:7b:6c:8c:0c:3f:8c:
                    3b:23:33:b6:e9:59:35:c3:3e:5f:3a:d5:30:fe:19:
                    f8:8d:25:6d:03:c5:06:9b:98:56:34:21:94:32:a1:
                    f7:9b:a4:68:bb:bb:7e:f8:42:0c:5d:fa:24:c2:c9:
                    7b:27:f7:95:48:d5:fc:97:ac:d1:70:12:98:a3:0c:
                    6b:7f:a2:11:60:c3:4a:9a:7f:51:af:35:5d:8b:6d:
                    68:b5:e9:6a:aa:5e:e7:5c:29:35:0e:f8:e5:35:82:
                    ee:83:33:a9:dc:8c:9c:bc:7f:7c:25:78:7b:53:81:
                    a7:35:80:6a:5a:da:22:e5:54:fc:84:ea:c9:16:44:
                    85:3e:6a:21:5a:c0:a9:be:4f:57:e7:af:32:b2:30:
                    68:d5:de:ad:af:b1:cc:82:f9:6a:68:28:5f:a5:f6:
                    7c:7e:db:cc:f4:7a:39:55:b1:98:d1:5d:84:e8:8d:
                    f6:79:83:38:50:5d:e9:b0:bf:17:a7:a2:13:da:93:
                    64:52:74:6b:70:3c:07:1e:b7:8c:7b:f4:8d:cf:34:
                    dc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:34:D7:12:D2:B4:CC:D8:76:47:61:0B:56:96:D4:AD:6F:31:46:8C
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:3d:05:a7:d6:e8:84:de:4c:4b:da:ea:5b:3c:a4:84:d9:0f:
         25:4b:69:b4:d2:79:61:60:b8:37:e0:17:50:40:b6:57:50:52:
         a2:6d:97:08:15:bf:70:2b:80:57:0d:e3:04:3c:45:7d:8c:78:
         fd:37:38:f0:b7:ec:be:77:e4:07:1b:d4:e2:b3:5c:48:5e:ac:
         79:f1:eb:91:a6:c9:80:27:9e:c9:a0:fe:3e:5c:a8:d1:66:c5:
         10:bc:d3:e2:89:60:22:16:25:58:cd:7f:8e:b2:ba:fa:61:71:
         77:bc:d0:59:8f:bc:00:82:ab:97:a7:ec:46:03:3a:26:25:1c:
         48:0b:b6:ab:9a:9d:45:ea:9d:cd:3f:76:5a:19:0b:1e:a7:9d:
         e9:45:13:50:8a:31:09:5f:9f:59:02:a1:52:b8:93:2f:4e:ff:
         a1:6b:02:d1:6f:6e:f6:5e:2e:8d:7a:af:86:58:c1:e7:82:bd:
         80:b9:92:76:3b:4a:8e:4a:c8:e5:0e:66:4f:8b:09:d6:f0:96:
         ea:20:54:04:2f:f6:59:b8:23:2c:82:0e:a9:4b:e4:ed:d8:ab:
         a9:4e:57:61:48:d5:04:2c:e4:f3:f2:7a:e8:0b:37:6d:f3:59:
         57:6a:72:0b:53:eb:8f:af:e6:e5:4b:71:50:cd:cd:79:b3:51:
         2f:8b:52:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:15:24 2024 by rpki-client on console-ams.rpki-client.org