Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File:                     8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier:          IX1s0mYDcsTTEDcYhyAGlf7TYWZFevDkuvQR0sdrAEU=
Subject key identifier:   2F:5B:9D:2E:2B:8E:EF:E5:FF:5C:CC:CC:BA:4B:B8:2E:94:60:B8:5A
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer:       /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial:       0192395DD182476D746319153BCD6D30C82C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number:          12DF
Signing time:             Sat 28 Sep 2024 16:01:42 +0000
Manifest this update:     Sat 28 Sep 2024 16:01:42 +0000
Manifest next update:     Sun 29 Sep 2024 16:01:42 +0000
Files and hashes:         1: 1G-n2HriGdK8DVRt5tto0QlD1WE.roa (hash: AhgqwBGfEntxffnAqfhjJZ8RuM43VAbjnNCbM3v8xek=)
                          2: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: eOVzwKe3JMbIIPfUl7foLY6S7gq++5zu2E+oiX9m83E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:5d:d1:82:47:6d:74:63:19:15:3b:cd:6d:30:c8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
        Validity
            Not Before: Sep 28 16:01:42 2024 GMT
            Not After : Sep 29 16:01:42 2024 GMT
        Subject: CN=2f5b9d2e2b8eefe5ff5cccccba4bb82e9460b85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:df:73:60:95:d4:61:fd:45:47:51:57:bb:ba:
                    ac:1e:ae:72:10:f3:48:76:81:6a:d3:95:b6:bd:84:
                    5b:de:bd:3f:5e:47:50:98:9d:26:52:df:83:cf:7b:
                    e5:86:da:bd:7f:8e:fa:81:ef:a6:27:3e:86:a3:92:
                    ba:ef:13:eb:15:09:df:7d:9c:59:ab:74:c2:15:3b:
                    46:c2:70:32:26:4f:fa:e1:b3:8a:4e:a5:47:28:b1:
                    7f:45:ff:77:2b:01:09:6e:ac:ec:3e:d7:ee:59:30:
                    bd:13:d8:03:18:a8:2d:ff:61:c9:8e:32:56:48:e5:
                    1b:d3:19:af:44:f2:63:99:5a:13:92:4b:e3:d2:d1:
                    c5:b9:d3:28:8e:97:cb:53:22:f8:2d:e5:e2:dc:dc:
                    f9:da:de:9a:55:b4:ac:d2:94:50:4b:c6:16:f5:b8:
                    17:48:af:0e:8f:79:2c:e1:59:a4:5a:64:6a:e6:36:
                    60:11:85:22:ed:35:f7:ff:7f:8a:52:48:63:08:77:
                    85:82:ae:7c:7f:29:14:63:03:d2:3c:c3:c4:0b:83:
                    d8:ee:c9:4b:5e:fb:d5:6f:31:72:74:c4:67:ae:b1:
                    e6:67:34:30:c8:48:a0:6f:0e:a5:b7:46:45:ca:cb:
                    3f:d3:81:53:24:62:df:c0:3a:be:7e:69:5d:15:9f:
                    f8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5B:9D:2E:2B:8E:EF:E5:FF:5C:CC:CC:BA:4B:B8:2E:94:60:B8:5A
            X509v3 Authority Key Identifier:
                keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:ba:dd:ef:4d:9c:eb:60:10:88:27:0a:c9:2e:1f:f4:8e:
         e6:86:8f:a8:cb:9e:2f:5b:1e:ae:57:89:43:56:6b:1d:fe:98:
         02:b2:ac:58:7e:49:70:eb:2b:45:8d:aa:5e:cc:5a:db:66:f3:
         f9:cd:08:e5:fa:83:4d:70:eb:65:02:f9:20:d8:ee:d2:22:bb:
         85:a4:c3:3b:44:0e:a3:c8:ab:c7:6e:a4:22:93:55:7b:be:97:
         4f:45:a8:5c:7f:d8:c0:3b:21:a3:11:ee:21:86:88:5f:b6:c1:
         f3:b2:14:2d:90:98:cb:99:5c:cc:64:21:f0:11:56:b0:b9:a3:
         d5:da:4b:8b:89:15:fb:dd:10:8f:d4:70:80:6d:27:8a:87:89:
         7b:87:df:74:ef:2f:ab:f8:51:78:f5:fd:95:1e:d2:ba:30:21:
         7f:2a:ba:70:72:81:06:87:84:8c:d7:76:e4:f2:cc:bd:59:9f:
         40:e1:c7:d4:7b:dc:51:3d:92:1e:e6:91:66:77:0a:e0:61:c7:
         92:40:90:84:10:a2:fd:55:11:62:5a:52:a8:78:2d:b7:50:0f:
         ac:8e:d0:ca:9d:36:0c:df:a3:4c:56:42:d5:bb:ba:e9:30:05:
         85:f3:b7:0d:ea:00:69:90:44:6a:cc:68:50:8d:d4:4c:f1:05:
         e3:9e:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:16:00 2024 by rpki-client on console-fra.rpki-client.org