Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
File:                     Ko09O9sG8A5rtEX02y2X-bfEvro.mft (raw, json)
Hash identifier:          KgIMJkUurS8wr35CU4LD2do34uqFyTuon5u0FZi7U9g=
Subject key identifier:   75:0D:85:2E:65:3E:48:FD:A7:8C:D5:EC:58:D9:31:CD:5E:B5:6D:A8
Authority key identifier: 2A:8D:3D:3B:DB:06:F0:0E:6B:B4:45:F4:DB:2D:97:F9:B7:C4:BE:BA
Certificate issuer:       /CN=2a8d3d3bdb06f00e6bb445f4db2d97f9b7c4beba
Certificate serial:       0191F9D9D982E698ACB6D6C2A272A3DE3F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ko09O9sG8A5rtEX02y2X-bfEvro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
Manifest number:          0116
Signing time:             Mon 16 Sep 2024 08:01:29 +0000
Manifest this update:     Mon 16 Sep 2024 08:01:29 +0000
Manifest next update:     Tue 17 Sep 2024 08:01:29 +0000
Files and hashes:         1: 33gnBpH0C9HBydNwmORPQljFqOs.roa (hash: hIM4M5xZf5eTHBdYMjfQeT35s9vSAe+7pUOsTdNdrnc=)
                          2: Ko09O9sG8A5rtEX02y2X-bfEvro.crl (hash: c+3e4GWniy+JtH+QoVAlidUG5sHmlDmR1unclXXkX4Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ko09O9sG8A5rtEX02y2X-bfEvro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:d9:82:e6:98:ac:b6:d6:c2:a2:72:a3:de:3f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a8d3d3bdb06f00e6bb445f4db2d97f9b7c4beba
        Validity
            Not Before: Sep 16 08:01:29 2024 GMT
            Not After : Sep 17 08:01:29 2024 GMT
        Subject: CN=750d852e653e48fda78cd5ec58d931cd5eb56da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:81:04:8e:ef:7d:73:ba:42:3b:44:a1:76:09:
                    cb:df:a5:01:d7:7d:34:74:fd:bf:3c:2d:59:4b:e3:
                    81:be:de:3f:41:77:ed:22:0e:e5:4f:9e:a8:ee:dc:
                    94:d4:19:81:45:3f:0e:38:61:45:92:52:d1:31:e8:
                    24:6f:03:36:c7:fe:8d:a1:0a:7b:88:49:ab:e0:50:
                    04:d4:90:97:85:fe:99:45:21:2a:47:45:6a:db:aa:
                    a1:5f:c8:b5:21:3e:74:2c:dd:25:7f:00:da:ab:08:
                    92:6c:7b:80:d1:3a:15:08:52:61:9b:1e:a4:38:69:
                    01:51:40:26:00:09:ea:bb:43:8d:60:21:03:e8:d9:
                    01:e9:39:9e:c0:24:8c:02:93:61:03:8e:a2:c4:af:
                    f5:12:21:33:03:4e:19:9d:15:80:fe:b6:ad:ab:b9:
                    c9:f7:01:81:be:63:dc:38:ff:a9:fe:91:95:a3:43:
                    d6:23:b6:d2:57:68:16:0f:15:69:e8:44:6b:62:39:
                    60:3e:57:c6:fe:e7:93:e3:af:4e:f8:13:64:15:0a:
                    77:fe:0a:3b:5d:a4:37:66:fa:1a:bc:bf:2c:bf:3a:
                    a1:c0:5b:2c:4b:4e:17:7f:e3:18:a7:fa:77:d8:0c:
                    7c:88:3d:28:cb:af:2d:69:94:19:ce:ba:36:44:6e:
                    3d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0D:85:2E:65:3E:48:FD:A7:8C:D5:EC:58:D9:31:CD:5E:B5:6D:A8
            X509v3 Authority Key Identifier:
                keyid:2A:8D:3D:3B:DB:06:F0:0E:6B:B4:45:F4:DB:2D:97:F9:B7:C4:BE:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ko09O9sG8A5rtEX02y2X-bfEvro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3c:8d:45:3c:ef:47:da:2c:14:49:75:83:31:9b:72:2e:7a:
         4f:6e:b5:d7:6f:22:00:3d:a1:23:2e:9d:71:25:99:14:79:5a:
         ef:cc:fd:fd:7b:c0:7c:f1:d1:01:5d:7b:b2:41:a5:d8:b4:c1:
         2f:ff:6d:f2:c3:b0:b2:f1:ac:bb:94:5e:d9:cd:f8:13:d6:12:
         f7:15:05:1d:2f:6d:57:95:d6:36:de:8d:6e:98:c7:02:33:4e:
         a3:37:cb:6f:f9:3f:1e:57:c3:dc:ba:d8:d8:61:a7:28:f9:e7:
         7e:a6:11:73:df:70:03:c6:73:75:e7:2a:7c:6d:65:2c:20:bc:
         38:7e:a4:be:da:33:8a:a7:54:a9:8c:f0:17:56:57:f4:da:ea:
         8c:e1:6c:92:40:84:69:88:6e:93:62:79:27:dd:dd:6d:65:1c:
         b7:8e:af:98:cd:56:af:77:3c:f5:85:58:76:c4:e7:69:12:3e:
         eb:96:99:5e:bf:f1:11:55:ff:31:21:6f:0b:f3:e7:80:ef:af:
         ad:85:3b:91:ea:f5:1b:a1:08:34:fb:d3:52:9b:72:2b:d8:f1:
         11:64:ee:ab:5c:28:36:5c:9c:d5:48:be:0e:1d:1e:d0:2a:1a:
         b4:0d:ec:6d:f1:91:96:d0:67:97:94:10:2f:7b:2d:d0:63:4e:
         ea:c7:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:18:52 2024 by rpki-client on console-ams.rpki-client.org