Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File:                     rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier:          rHRcnGSgDoSmLOO8/M8zyk7joteqoMntKmlLfjbkTvE=
Subject key identifier:   E0:15:8B:6E:93:3E:E3:A0:97:78:B5:9E:47:23:B7:89:AB:2A:04:B3
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer:       /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial:       0191F9D94A63A6985447FD6AB2C103A7DF95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number:          F2
Signing time:             Mon 16 Sep 2024 08:00:52 +0000
Manifest this update:     Mon 16 Sep 2024 08:00:52 +0000
Manifest next update:     Tue 17 Sep 2024 08:00:52 +0000
Files and hashes:         1: JsJLg7dcsL33mvU1lpZSdfdT8-c.roa (hash: uYz87DEzors7nUYkby4SnluU3HvRHfYw4DP9xdpmcCE=)
                          2: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: kHdXtglgjfqs6aCznZ98DtNnchgHJHI1rgsl0Si9wmU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:4a:63:a6:98:54:47:fd:6a:b2:c1:03:a7:df:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
        Validity
            Not Before: Sep 16 08:00:52 2024 GMT
            Not After : Sep 17 08:00:52 2024 GMT
        Subject: CN=e0158b6e933ee3a09778b59e4723b789ab2a04b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:12:b5:bf:7a:49:05:f8:b9:9c:67:06:a0:
                    67:e0:88:76:42:ae:68:74:59:48:52:03:33:be:eb:
                    21:d3:35:4a:0a:39:9b:71:9f:e0:e2:7e:1f:f6:22:
                    bf:1e:c0:03:73:f6:6a:d3:91:b8:45:bf:de:9c:6f:
                    fa:e3:d0:5f:f1:48:f9:c6:73:4c:5b:99:97:68:af:
                    91:4c:36:35:5d:59:d1:de:ac:6b:dd:20:ca:22:08:
                    9c:0d:2e:53:77:72:29:d2:0b:51:d3:04:30:70:93:
                    9b:9c:5b:e3:a5:ff:88:10:14:93:2d:ad:ef:36:7b:
                    9f:23:4c:a7:11:56:ce:b7:f4:99:ab:ee:d4:c9:94:
                    f6:5a:45:6d:e5:85:cc:b4:f3:06:f7:31:2c:e0:27:
                    f4:8a:87:e8:a3:c3:ae:74:8a:21:0b:f0:3b:59:79:
                    bc:61:5a:00:36:38:81:24:fb:1c:86:09:6a:55:65:
                    78:f8:d7:ad:3a:3f:31:eb:c3:ee:86:a9:67:17:cd:
                    fa:ee:9c:7b:ed:a7:15:f2:d9:66:9a:6c:56:1f:b5:
                    60:0e:06:db:4a:73:e6:b1:b4:99:1b:a5:4d:85:8c:
                    2f:65:53:89:81:db:0a:93:4f:1a:50:19:d9:77:8e:
                    b8:c5:5e:93:52:bd:ae:2a:3c:da:bb:fb:a4:aa:64:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:15:8B:6E:93:3E:E3:A0:97:78:B5:9E:47:23:B7:89:AB:2A:04:B3
            X509v3 Authority Key Identifier:
                keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:42:b0:de:a3:0e:a8:ee:f4:2e:76:67:cd:2e:20:fa:ab:28:
         ba:f8:3e:40:08:e9:1d:90:14:a1:59:09:fb:93:c7:03:24:2e:
         15:59:76:16:1d:03:d3:33:8a:2a:0a:26:f7:c8:75:2d:63:1f:
         80:90:27:94:06:33:40:5e:5a:12:2d:05:b2:0c:9b:f5:32:0b:
         19:04:25:a3:a0:92:1e:bb:9f:bd:03:56:66:03:e9:7a:6e:1a:
         1f:28:3a:86:b4:18:be:44:0a:45:dd:20:22:c2:62:0f:2a:fa:
         33:63:91:ab:ff:67:fe:16:dd:de:fa:fe:e2:1b:6e:3e:81:b1:
         ec:d7:a9:ef:a9:38:14:64:3b:be:a4:2b:b4:e5:4c:11:d8:35:
         e5:03:4c:83:7e:f2:77:5e:4d:6f:bd:b1:ea:a8:cd:85:45:4a:
         38:90:fe:ff:d5:37:6c:d6:aa:e2:60:6e:dc:1b:1a:4a:cc:59:
         9a:83:07:b0:36:c4:69:d8:13:55:f0:ef:1e:93:ef:28:6a:9d:
         80:1b:ff:3f:81:51:85:d4:4e:8d:23:ac:ff:4a:fd:bb:aa:24:
         0d:48:5a:32:f2:6d:19:35:e0:d4:21:39:9f:42:4c:a2:4a:a6:
         50:05:7b:1b:09:72:96:a6:65:46:24:27:81:6b:ab:44:6b:07:
         c7:41:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:17:54 2024 by rpki-client on console-ams.rpki-client.org