Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File:                     tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier:          WH2rIF2oya+8oVEeesaxjAu66vFEFbeAgwMjGyM59/8=
Subject key identifier:   08:50:9A:56:5A:41:4E:AC:51:A0:E4:4C:2F:C3:0A:71:B6:71:C7:F9
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer:       /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial:       0192388146C5AF80613B92FA8D23951ACC28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number:          050A
Signing time:             Sat 28 Sep 2024 12:00:49 +0000
Manifest this update:     Sat 28 Sep 2024 12:00:49 +0000
Manifest next update:     Sun 29 Sep 2024 12:00:49 +0000
Files and hashes:         1: H0KwMbX473i3EyvOXh1BK6Zo4vA.roa (hash: clMQLU7ZJpy8vg6s4Zah+c95OC+5f48ZB0kYTiUKiXg=)
                          2: PwUZ7n4yuTlqmWo9-cYjo4aGngw.roa (hash: P4sTLh1bsmJSU9Mo+JJ1w6TCxPWXENK9YTu3l198pcg=)
                          3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: dIom9rHk4+uhHbiK4WL9kTy9NSfBD0LYoYHyyoThh4o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:81:46:c5:af:80:61:3b:92:fa:8d:23:95:1a:cc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
        Validity
            Not Before: Sep 28 12:00:49 2024 GMT
            Not After : Sep 29 12:00:49 2024 GMT
        Subject: CN=08509a565a414eac51a0e44c2fc30a71b671c7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:af:93:c9:7f:07:1f:7e:ff:2d:37:5d:17:
                    43:02:aa:e8:f0:fa:44:c0:94:64:e8:3a:6c:9f:38:
                    6e:46:b4:7f:45:91:83:11:6f:9e:69:a1:38:a7:ec:
                    26:0e:ae:6a:ba:9f:5b:16:51:f0:94:7c:4b:96:9a:
                    d4:a9:7f:12:67:09:92:62:4a:8b:8a:7c:5c:a0:3a:
                    bb:ba:28:21:c4:8e:8a:56:27:00:dc:b8:8e:3c:15:
                    74:2c:3b:a1:fe:b1:cb:5e:a9:06:6c:b6:c5:8e:b5:
                    0d:6d:75:7b:c4:ef:6c:ba:49:61:ab:43:1d:0b:b4:
                    92:06:e6:6d:54:2c:94:ca:7c:23:4b:15:46:81:52:
                    38:6e:5a:e2:53:06:69:5e:10:85:4f:f4:00:0a:c4:
                    be:68:49:93:46:bd:1b:93:58:8c:db:e8:a6:ea:bb:
                    46:ff:86:db:7e:38:41:08:68:03:13:79:39:08:57:
                    e7:f0:ae:0a:da:74:ac:da:ec:8a:0c:cd:5a:9a:e5:
                    de:2c:72:9c:5b:f5:20:79:62:26:68:bc:7c:29:6d:
                    fe:ac:09:b3:50:0e:35:1c:70:00:e3:b9:de:a1:b6:
                    86:4f:90:07:dc:23:6d:90:7f:60:ab:25:d2:17:29:
                    00:9e:0e:ad:19:0e:ed:20:84:76:4b:d6:ab:4e:ee:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:50:9A:56:5A:41:4E:AC:51:A0:E4:4C:2F:C3:0A:71:B6:71:C7:F9
            X509v3 Authority Key Identifier:
                keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1e:7e:3b:e2:6e:2c:21:cc:0f:b7:d0:3d:b5:a1:62:c9:d4:
         ea:95:5b:89:38:c3:a0:4d:25:e4:06:e5:0b:39:5e:25:86:c7:
         c2:bb:36:e8:b6:84:39:ed:f4:f0:3a:3a:a2:a0:de:19:dd:0f:
         62:b7:9c:21:66:87:c3:d4:f9:57:00:c5:40:f6:42:98:81:a6:
         f1:9b:c7:94:f0:82:54:90:1c:fb:d4:c2:cf:d4:26:6c:68:9d:
         7a:d5:ff:fa:bf:79:b0:15:7e:77:04:4e:81:b3:74:12:52:2b:
         3d:36:0c:77:29:8e:63:0e:22:98:41:78:b0:b3:45:5b:f2:b4:
         6e:b5:a9:8b:84:85:39:20:8b:38:43:99:23:55:b0:68:b2:d1:
         aa:a6:56:39:3c:7f:de:29:e5:a0:72:e2:95:60:54:a3:30:3f:
         e2:72:9b:2b:b8:99:ed:2d:4e:62:06:15:91:03:64:ae:80:0f:
         81:4a:df:33:58:51:31:0a:b8:14:a2:56:2e:6b:d9:a2:2d:e1:
         1c:30:db:5a:cb:3a:fc:81:1f:9a:83:82:57:b8:4a:8c:51:31:
         16:ce:13:91:a5:fd:f7:5d:45:65:83:fe:3b:38:96:c7:97:f3:
         f1:bb:dc:5c:e9:32:b6:71:ef:f2:de:c5:78:50:29:d4:aa:a4:
         7a:6f:39:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 13:04:37 2024 by rpki-client on console-fra.rpki-client.org