Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File:                     SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier:          9viNCqmP6y1NjinzxnYi+kol4Xzg9H/UAF3lq+FokDk=
Subject key identifier:   F4:5D:DF:33:55:6E:A6:E4:16:33:92:7F:74:4B:8A:A0:E0:B3:8A:54
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer:       /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial:       0191FA473B1AC1DCD8653AA833D23CB90B27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number:          0114
Signing time:             Mon 16 Sep 2024 10:00:57 +0000
Manifest this update:     Mon 16 Sep 2024 10:00:57 +0000
Manifest next update:     Tue 17 Sep 2024 10:00:57 +0000
Files and hashes:         1: CGaa6tvEVSBTPsSE3fL8x2gdBXA.roa (hash: 3mGj3ygN8Ht6WmGCXdzDXzId8rip6qJ5ynnvfFyhopw=)
                          2: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: 2zvjmtSEPjb2tnlIYlaFIPyUgzcijuJLD5cD8we+YZU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:3b:1a:c1:dc:d8:65:3a:a8:33:d2:3c:b9:0b:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
        Validity
            Not Before: Sep 16 10:00:57 2024 GMT
            Not After : Sep 17 10:00:57 2024 GMT
        Subject: CN=f45ddf33556ea6e41633927f744b8aa0e0b38a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:56:a9:e7:ba:c4:2f:f9:4c:e7:fe:82:70:
                    04:94:48:d6:49:14:d7:2f:00:fd:32:77:0a:db:7d:
                    d8:1f:df:6f:cd:9c:a3:2b:a6:78:f7:76:cb:e6:1b:
                    eb:eb:26:90:bc:9c:ce:89:e4:3e:d7:b3:c1:a8:bc:
                    05:02:a2:24:3b:01:9f:25:94:d4:73:3b:61:fd:15:
                    35:33:86:d7:18:72:cc:45:35:07:7e:7f:f0:10:d9:
                    ea:8d:23:bb:30:0e:96:5a:a5:af:db:13:3f:57:28:
                    fa:1f:57:f2:b5:13:37:58:cd:48:0e:45:5d:f0:07:
                    b9:4c:dc:78:c1:49:ae:d4:77:e9:8e:8f:ed:a6:72:
                    e2:82:fc:1f:6b:57:7b:ea:d3:a6:6a:91:a5:77:49:
                    ba:2b:f5:da:58:a6:18:07:c6:fa:73:40:81:b4:c7:
                    c2:90:8f:d3:5a:f3:b8:f1:6b:92:74:40:fc:0c:79:
                    55:1d:ba:42:67:83:cf:a5:e8:c7:31:c1:af:6e:34:
                    fc:95:a1:2d:d7:64:7f:cd:d8:94:d0:34:5a:35:13:
                    93:79:9d:d2:40:5a:b4:e4:83:c6:3a:cd:10:13:54:
                    5e:39:cf:08:82:95:47:04:3b:a9:6f:1b:32:18:d9:
                    62:6b:3f:d7:a0:d6:3b:3c:59:75:80:d9:c8:2f:15:
                    15:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5D:DF:33:55:6E:A6:E4:16:33:92:7F:74:4B:8A:A0:E0:B3:8A:54
            X509v3 Authority Key Identifier:
                keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:2a:1c:f6:e5:02:c5:a8:ad:77:65:43:5b:66:6e:fb:df:f9:
         70:14:bb:28:a3:91:78:02:0d:44:f8:ce:ff:b2:61:eb:24:bc:
         23:3c:bd:e6:0e:59:18:2a:ec:b7:b6:51:67:14:ab:50:a6:e9:
         61:54:7c:07:8a:68:b0:16:16:c2:0b:2f:79:1b:47:8a:c1:79:
         40:90:7c:b6:25:d1:59:ba:c1:14:90:83:3c:96:79:96:3f:58:
         69:3a:e1:c9:9e:ac:fd:5f:14:df:24:72:2d:23:93:ef:5c:d4:
         a0:95:7d:d6:41:d1:e6:e1:9a:20:a7:bf:13:07:f4:ed:ea:4d:
         4a:d1:64:bd:8d:32:06:ed:30:b5:6e:5d:25:a5:38:e7:b6:53:
         3e:46:0d:06:0f:e8:c2:4d:14:35:28:86:99:8d:a9:93:0a:4a:
         cc:6a:6f:c7:18:04:f2:51:75:1d:4d:c5:cc:41:31:d5:4e:9f:
         87:57:c5:78:b2:49:8c:0d:b6:ef:25:6d:46:fd:20:55:39:a9:
         0d:43:37:98:df:79:3d:99:55:09:fe:8c:dd:35:b8:ce:b2:7e:
         60:d3:cf:b3:49:e2:4b:fc:c2:48:72:9a:b7:c1:20:11:39:df:
         c6:df:82:90:62:4c:2d:b8:6a:cb:f0:25:9e:b6:fd:77:64:ee:
         ac:fc:4d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:19:44 2024 by rpki-client on console-ams.rpki-client.org