Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File:                     hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier:          bA7wwUaTjd40yCSpPhU8roP/TSJ5Tz2QMStrrmJTGrw=
Subject key identifier:   DE:49:20:34:36:82:3E:F9:74:AC:8F:D4:AF:77:8B:C6:C1:4A:0B:38
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer:       /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial:       0191FA104A15AC497B29E36FA0825345F113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number:          0138
Signing time:             Mon 16 Sep 2024 09:00:56 +0000
Manifest this update:     Mon 16 Sep 2024 09:00:56 +0000
Manifest next update:     Tue 17 Sep 2024 09:00:56 +0000
Files and hashes:         1: 9lGpwcRF-5EWGMrp7ZvSBa3-wu4.roa (hash: hjw/1FiEoW7qHOujBzPyRjjST88PM9T/ugNurCueUKQ=)
                          2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: rhrk3N5NYTra9KRK6RFgsEPzp7Azq77nrndwbnjMM3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:4a:15:ac:49:7b:29:e3:6f:a0:82:53:45:f1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
        Validity
            Not Before: Sep 16 09:00:56 2024 GMT
            Not After : Sep 17 09:00:56 2024 GMT
        Subject: CN=de49203436823ef974ac8fd4af778bc6c14a0b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7a:99:aa:d9:88:2a:37:54:57:7e:83:76:00:
                    24:b9:ee:db:94:4b:23:99:be:93:3a:a1:89:57:2b:
                    3a:fc:b0:98:5b:fa:83:d0:55:16:0f:89:4c:ce:65:
                    84:97:e0:41:d8:94:0d:d5:0d:b3:ba:02:a4:28:5e:
                    d0:df:0f:29:f5:bd:e7:a7:f4:28:cb:06:28:4b:b1:
                    f9:a0:61:e0:d6:67:62:af:25:c0:aa:47:27:4f:70:
                    19:20:bb:8c:00:ca:59:0b:32:ea:f4:70:4f:5e:4b:
                    99:0e:42:53:b2:56:35:3a:e7:ec:5c:91:5d:5d:4d:
                    73:6a:39:64:d8:14:3c:c3:96:dc:9b:94:15:ef:a3:
                    01:f8:5b:26:16:55:a2:69:ef:cc:2c:24:44:4a:24:
                    dd:dd:d4:55:f0:d1:af:84:87:54:4a:39:d9:97:5f:
                    82:75:0a:f7:82:ae:da:ab:c7:93:5e:c6:f2:63:a2:
                    ae:59:d5:06:4f:52:ef:85:04:5e:f3:2f:10:9d:7f:
                    7c:55:7e:42:32:43:22:be:f3:7c:81:d8:8f:b7:37:
                    ce:70:3f:4b:b0:9b:79:f1:a0:ac:c7:a5:aa:6d:fb:
                    f6:6b:33:d1:3b:58:5b:5a:9d:9a:e2:c4:1c:a5:4b:
                    8e:79:13:30:09:b4:b2:81:32:91:8e:b7:e2:aa:d3:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:49:20:34:36:82:3E:F9:74:AC:8F:D4:AF:77:8B:C6:C1:4A:0B:38
            X509v3 Authority Key Identifier:
                keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1c:94:19:df:96:fb:87:2f:cb:40:78:f3:b6:ad:69:80:83:
         39:34:93:53:18:c3:e5:4d:2b:5c:b5:1b:04:8b:6a:a2:13:2b:
         96:7a:a5:ab:a5:51:05:88:ef:f7:12:c7:59:d2:40:1f:e3:5d:
         fe:fb:88:4f:c2:dd:9f:5e:85:a6:f3:2b:75:27:71:d4:93:04:
         76:c3:e6:e1:82:7e:b0:cd:58:13:ae:82:01:53:1b:73:cb:e0:
         3c:a9:be:f0:be:f8:84:7f:45:d1:d5:b8:c2:c1:01:ff:ca:c9:
         19:98:18:bc:1d:b8:0b:6f:b2:ac:ec:7b:46:0a:8a:0b:9e:f8:
         f0:a0:4e:f1:32:08:e7:dc:39:80:78:38:1f:bb:0b:dd:b4:0a:
         c3:1b:58:e9:ea:40:79:b8:56:b4:c1:48:24:9f:0c:ab:83:78:
         a1:9a:ca:0d:d4:1b:83:44:30:c9:31:c5:20:07:35:8e:99:99:
         62:5f:65:51:38:49:03:54:41:ed:87:aa:01:45:b3:6d:00:99:
         4e:92:06:77:40:15:f9:49:65:f9:94:8c:9c:ef:38:b3:85:bd:
         1b:83:7b:13:8d:cc:65:26:5c:ad:c4:d3:ad:00:aa:3d:95:54:
         6c:62:a8:06:54:45:2d:37:72:86:0b:07:98:45:2e:f8:e3:3f:
         e1:e0:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:18:06 2024 by rpki-client on console-ams.rpki-client.org