Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
File:                     p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json)
Hash identifier:          qfKm8jKq38h0hpV4HeP3mQwDX6/bHM05vX38O6u1fV4=
Subject key identifier:   A1:D3:C9:8C:41:08:17:92:FF:76:B2:4A:4C:0F:74:22:11:14:C3:8C
Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
Certificate issuer:       /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Certificate serial:       0191F9349F4496CAD5B8E28506AEBE808C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
Manifest number:          D3
Signing time:             Mon 16 Sep 2024 05:01:01 +0000
Manifest this update:     Mon 16 Sep 2024 05:01:01 +0000
Manifest next update:     Tue 17 Sep 2024 05:01:01 +0000
Files and hashes:         1: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: o+jjDvp+UFSkXVL8LtgneAn9JQ7Bb+rs+JiDlXcQgRM=)
                          2: ynamKDho6r95ir3pGxFIhgXqr7k.roa (hash: zHyFt+YZDbGRAnhXnfxM1PBMIlXxioxo2M3MejVgI9A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:34:9f:44:96:ca:d5:b8:e2:85:06:ae:be:80:8c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
        Validity
            Not Before: Sep 16 05:01:01 2024 GMT
            Not After : Sep 17 05:01:01 2024 GMT
        Subject: CN=a1d3c98c41081792ff76b24a4c0f74221114c38c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:15:8c:3a:ef:28:1a:5f:1e:5d:30:ac:f7:38:
                    6e:92:d2:23:b2:0b:2e:3d:e0:95:8a:31:55:90:eb:
                    0c:a9:97:0f:00:c8:d4:99:71:80:6e:59:a1:a5:76:
                    4a:bc:f5:73:a3:c5:4d:9b:ca:37:c1:f2:0d:ba:66:
                    e9:c9:e2:90:34:38:2f:af:3b:9b:2c:99:05:0d:09:
                    ca:b0:19:fc:31:c9:4f:87:54:de:6b:03:54:b2:8d:
                    47:55:77:ae:7d:81:6a:5e:50:70:1e:14:68:01:a2:
                    3e:5e:bf:bb:57:65:ee:c7:fe:8c:00:67:2e:7d:69:
                    8c:12:f8:67:9d:99:77:f4:ae:e8:3e:2d:d7:c6:94:
                    57:24:fa:44:05:a2:8d:fe:37:a3:1f:9b:bb:50:5c:
                    79:85:59:de:83:15:5e:3a:d5:17:4e:ae:a5:ca:5a:
                    43:ea:c1:38:fc:fb:32:c8:78:a2:6a:cf:04:4d:86:
                    b6:9d:c5:12:f9:ab:85:62:62:b3:0b:1e:1b:65:df:
                    05:2f:c4:25:c7:2a:f7:97:05:5f:ff:95:51:85:b9:
                    dd:d9:35:58:8d:9e:55:58:48:c3:e3:63:3b:12:b7:
                    aa:9e:0d:4c:d3:bc:70:3d:30:08:c5:49:1d:27:80:
                    40:23:cd:dd:c1:bb:b7:db:07:24:08:78:10:8c:56:
                    ac:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D3:C9:8C:41:08:17:92:FF:76:B2:4A:4C:0F:74:22:11:14:C3:8C
            X509v3 Authority Key Identifier:
                keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:cb:28:df:d6:4f:8a:a6:e4:30:b2:ab:91:26:d5:f3:2b:fe:
         d1:ad:f5:31:d8:0f:0c:0c:c6:9e:dc:55:20:85:10:e5:3f:45:
         54:3c:34:8c:14:10:f9:33:15:da:45:e9:0d:5e:2b:11:44:28:
         34:29:2e:0f:81:15:bf:4d:db:50:a8:5f:ae:a8:63:2e:1f:33:
         df:68:49:e5:b8:d7:67:8f:ab:b3:46:4a:23:e8:b6:4a:81:d0:
         85:f3:36:4b:70:fa:a2:51:bb:97:bc:7a:ea:c2:cc:58:5d:04:
         99:3e:6e:30:42:c9:79:76:b7:e8:e1:8a:fc:eb:10:fb:99:5e:
         03:f8:bc:92:1f:be:ff:bf:3a:d5:f0:40:07:c2:27:3d:63:3f:
         5f:cd:67:1b:c6:2e:06:2e:7d:99:da:b7:34:05:ee:c0:da:fe:
         69:56:8b:1c:04:18:fa:3b:56:64:41:a1:71:21:b8:b0:cd:37:
         40:00:a3:4d:6c:74:8c:c6:dc:ef:e0:3b:a7:e7:07:6e:5f:4b:
         52:0e:db:28:cd:d2:78:da:36:6d:db:17:f1:e2:b4:26:9f:85:
         fc:60:4e:61:da:95:1d:e9:9d:14:c4:76:c8:8f:e1:59:56:52:
         2a:5d:29:0b:f3:e2:f8:9e:c1:ff:f6:63:25:f0:13:8f:4e:40:
         02:a6:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:17:08 2024 by rpki-client on console-fra.rpki-client.org