Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File:                     0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier:          2RY6fJv3rgzudnSpzqXsnfim35EuxpVOj02VfR9zc7I=
Subject key identifier:   98:D9:5D:C6:0B:78:63:A8:C3:BD:85:FB:5C:9E:D2:DC:45:AC:DC:F9
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer:       /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial:       0191FA102C09147244F8160D614D813374FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number:          ED
Signing time:             Mon 16 Sep 2024 09:00:49 +0000
Manifest this update:     Mon 16 Sep 2024 09:00:49 +0000
Manifest next update:     Tue 17 Sep 2024 09:00:49 +0000
Files and hashes:         1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: RdOkRJ8rRrNpFW6SXE+oJnRl7cgGPMSO24++auJrkak=)
                          2: uBxSYdLlrVVHCrzYzBx942IWui8.roa (hash: TY7S4lZ4y5kO+H6Pc8+dyYg0dU0DgYMGvA5tYosNbxk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:2c:09:14:72:44:f8:16:0d:61:4d:81:33:74:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
        Validity
            Not Before: Sep 16 09:00:49 2024 GMT
            Not After : Sep 17 09:00:49 2024 GMT
        Subject: CN=98d95dc60b7863a8c3bd85fb5c9ed2dc45acdcf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:a3:5a:02:fb:02:03:2f:13:7f:15:ca:89:
                    1c:b8:04:01:59:78:1e:f6:e6:a8:3b:9f:6a:16:2e:
                    1c:b2:29:6e:0a:d6:ec:ea:9f:36:b2:45:96:20:b6:
                    47:ee:21:0e:9d:4a:e9:f3:81:f1:ba:88:db:7e:17:
                    61:36:01:66:98:77:df:b3:6f:30:2d:bd:ca:d2:11:
                    f2:63:4c:f2:3c:8e:21:a1:81:e7:17:c0:66:fd:d2:
                    dc:f3:08:2e:33:d0:b5:b1:bd:6d:a0:2f:85:93:b1:
                    fb:35:4d:47:49:3d:08:a1:fd:8d:25:44:0b:b9:2b:
                    cc:df:b5:95:de:20:23:00:ec:39:1e:ac:fc:d0:1b:
                    5e:79:41:8f:db:29:4c:bf:3c:83:db:df:54:90:c3:
                    70:c5:6c:71:6f:b7:71:b5:8d:ac:55:a7:0b:75:9d:
                    4c:6a:53:c6:9d:d4:22:05:4e:cc:30:8f:e3:d1:cf:
                    27:37:6b:21:03:80:a6:e5:cc:28:be:e9:3d:b9:9d:
                    72:a3:a1:bd:db:eb:f5:cb:d6:03:e8:f5:6a:ae:7a:
                    c2:d5:b0:c6:36:22:37:7b:e2:5f:a1:31:be:78:7a:
                    0b:40:f6:f6:96:5a:eb:41:3e:e4:29:d6:52:03:31:
                    9b:cd:29:3c:34:8c:cd:3e:42:84:f2:7c:f4:de:14:
                    ad:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D9:5D:C6:0B:78:63:A8:C3:BD:85:FB:5C:9E:D2:DC:45:AC:DC:F9
            X509v3 Authority Key Identifier:
                keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2c:e4:ac:46:a9:05:5b:82:ad:e2:01:4a:c3:ae:15:c3:97:
         26:19:a5:43:d8:c7:91:44:96:8d:a3:19:3e:04:04:c0:57:1a:
         a9:6e:b9:bf:26:c2:7a:e5:e0:9d:7d:35:20:bc:5b:31:2e:3a:
         2d:a6:12:7c:86:f6:8a:59:20:9a:35:16:0e:2f:db:74:cc:7f:
         0e:60:ab:51:5a:99:41:01:7e:d5:3a:4b:94:27:02:84:a0:75:
         f7:7c:1c:56:56:90:ca:9d:4d:b4:95:73:7e:45:ff:62:26:1b:
         2d:fd:22:1e:87:1e:d4:a4:bd:6a:1a:96:d2:19:59:00:00:0a:
         08:59:67:90:5a:88:41:a8:95:fa:3f:da:32:c7:25:36:0f:8f:
         a1:de:7b:9b:e1:71:20:0c:eb:fb:32:42:60:a2:f6:7e:e3:e7:
         21:78:75:cb:5d:72:2d:ec:52:37:66:11:70:ab:24:fc:fd:bb:
         f5:74:99:64:53:37:2c:bc:69:b3:7b:ff:e7:95:b4:ac:d4:49:
         7f:3a:1f:2d:88:8e:42:28:0a:9c:80:b7:20:53:f6:7e:3a:84:
         b1:4c:49:65:4b:04:b0:9c:d3:b9:e0:1b:fe:6c:6d:45:c1:06:
         11:dd:75:2d:60:48:e6:b1:9b:21:4c:00:81:13:3c:fd:62:9e:
         69:c1:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:17:38 2024 by rpki-client on console-fra.rpki-client.org