Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File:                     8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier:          BDL6qDVu6EWr8YXs3BRBOkmOjRI9J3bEbmwF1ClyQ4E=
Subject key identifier:   98:71:EF:CB:FF:CD:B1:13:CB:3A:E6:BB:FF:99:56:34:DB:59:9D:21
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer:       /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial:       0191FA47805207F3695ED13F5714DB146423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number:          BD
Signing time:             Mon 16 Sep 2024 10:01:15 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:15 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:15 +0000
Files and hashes:         1: 6Cn-7iARET44vV1rmBYX6TZt99U.roa (hash: 1sfGyDwFCSHR7jmUMngNSftS11joE4Vw/SE5ILaNL3g=)
                          2: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: Q21lPvZIOQTeaZpwJp5CqMx3VcjsECXEugKmwIc0eUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:80:52:07:f3:69:5e:d1:3f:57:14:db:14:64:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
        Validity
            Not Before: Sep 16 10:01:15 2024 GMT
            Not After : Sep 17 10:01:15 2024 GMT
        Subject: CN=9871efcbffcdb113cb3ae6bbff995634db599d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:cb:21:eb:bf:03:98:05:12:f9:ed:2f:e8:
                    d1:d8:de:26:fa:ca:2b:b8:3a:67:6e:08:a2:51:a4:
                    c4:da:a1:ec:83:b7:3c:39:23:5d:3c:62:8b:b1:a2:
                    f2:0f:08:41:9f:d4:03:5c:fe:65:9a:81:25:27:1f:
                    ed:5b:3d:fd:d9:5a:88:51:7d:7d:1d:79:fe:6a:12:
                    8c:f0:17:e7:c8:b6:28:43:97:71:8c:70:0a:47:b9:
                    9e:39:07:d2:e5:e9:89:8f:d6:d2:c8:b4:ed:28:2e:
                    81:89:29:b4:13:3d:09:2e:02:aa:25:d3:d5:1c:e2:
                    06:5f:4e:9d:e8:1b:30:f8:dd:57:a6:93:44:31:5f:
                    f4:b3:d6:3f:47:f5:ef:ea:20:93:12:84:b5:ac:ed:
                    8e:ef:97:31:eb:86:82:1f:b7:85:43:a3:33:a1:7c:
                    e2:c6:f1:36:2c:0b:10:d4:ac:7c:22:1f:57:14:4e:
                    7b:16:ad:b0:5e:7c:68:a9:48:89:06:4b:8d:58:53:
                    23:c2:bb:1d:dc:c2:2d:dd:ad:f1:bd:10:40:5d:bd:
                    fc:36:4e:80:87:0d:ea:8d:0d:2b:ce:b6:d0:15:15:
                    69:05:20:14:31:03:39:1a:c7:b1:e0:0b:18:7e:1a:
                    fa:76:8e:c4:c4:0f:2f:1d:c2:60:3c:3b:a4:01:60:
                    61:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:71:EF:CB:FF:CD:B1:13:CB:3A:E6:BB:FF:99:56:34:DB:59:9D:21
            X509v3 Authority Key Identifier:
                keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:84:0c:c2:9c:ff:81:90:99:af:08:e3:c2:21:e2:4a:dc:cd:
         d9:17:45:5f:41:9e:8b:34:4e:fc:ee:83:ae:da:3b:4f:d6:26:
         15:f7:5d:76:8e:84:2c:8c:44:26:b6:bc:09:4c:b9:97:31:0f:
         df:ba:09:cb:9d:c0:4c:bd:16:76:5c:08:e8:99:69:8f:cd:38:
         a4:08:dc:26:28:88:b6:89:55:16:f3:6f:d4:2c:be:a2:f7:7b:
         3a:94:e2:97:79:11:24:4b:59:dd:8e:3b:fe:0b:0a:b4:b0:09:
         74:75:e8:93:d4:16:d6:ed:6e:9d:d7:ba:05:be:db:b0:5e:22:
         aa:e1:1b:c6:31:95:b8:a1:5c:c0:d2:79:bb:a9:d8:a4:b4:b1:
         69:65:75:a6:d0:48:23:ec:da:e3:4b:4f:d1:1b:3f:e9:a7:15:
         42:db:9d:32:c1:1b:49:35:6f:e5:a1:1a:2b:57:59:49:57:b8:
         22:5f:fc:24:d8:09:ec:d7:28:d5:c1:ce:a7:54:ad:50:cb:e0:
         36:b5:dc:ae:65:7a:ed:59:c0:a0:5c:f8:a3:b9:30:3f:14:95:
         86:2f:cd:ad:5d:ab:c4:6f:42:96:e5:fa:2b:10:85:21:14:8d:
         44:73:3c:fc:a4:08:9a:9a:b0:0a:dc:4b:5c:7c:c5:cf:43:4e:
         d1:9f:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:19:11 2024 by rpki-client on console-ams.rpki-client.org