Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File:                     z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier:          UQIpAnSmyejXCkl/A9lIPNWNeRMpNF2J6YBHj2oGU8Q=
Subject key identifier:   65:02:6C:BC:59:64:4B:F8:D1:AE:EB:46:68:E5:8A:DF:1B:28:85:31
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer:       /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial:       019235B749BADA3A76A604C78DFF50AAB033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number:          12DB
Signing time:             Fri 27 Sep 2024 23:00:57 +0000
Manifest this update:     Fri 27 Sep 2024 23:00:57 +0000
Manifest next update:     Sat 28 Sep 2024 23:00:57 +0000
Files and hashes:         1: hMLZsMP0mCFYSbg_SWPJD5KtUOw.roa (hash: Xt+fjgZ6o1ArGnkOE+NirbQvi6woh8S78/lTIi2NfLk=)
                          2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: D1VcR/ew7lIba7Q9F9G+dbKOaXBLKRFst58dAXbTvqU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:b7:49:ba:da:3a:76:a6:04:c7:8d:ff:50:aa:b0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
        Validity
            Not Before: Sep 27 23:00:57 2024 GMT
            Not After : Sep 28 23:00:57 2024 GMT
        Subject: CN=65026cbc59644bf8d1aeeb4668e58adf1b288531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:73:e8:18:31:6f:38:30:b2:fc:b8:51:9d:
                    e9:b7:d9:e6:23:68:11:fd:9e:57:c8:90:94:b4:9c:
                    b4:79:04:52:b5:94:d1:4c:aa:96:60:bd:61:dc:47:
                    55:4a:21:12:30:0a:af:42:8b:5d:e3:47:df:87:e1:
                    b5:66:23:f9:aa:ff:1d:35:c2:c1:f0:ad:58:a4:a9:
                    fb:e1:31:5f:2b:f9:29:f4:f7:9f:af:1a:a8:ba:f1:
                    8a:2a:81:d4:a3:8c:39:12:f8:f0:e2:90:b5:1f:7a:
                    ef:d0:5f:87:30:a0:2a:4c:b7:a5:40:1a:29:6c:27:
                    07:1e:28:d9:1a:21:c6:55:93:3c:b6:71:ff:af:5c:
                    98:7e:0c:1d:3b:b1:7c:df:58:98:5c:35:62:3c:57:
                    58:0b:08:55:b3:17:40:bc:0f:e9:63:cf:c2:20:d8:
                    3a:e9:bf:a3:c9:73:f3:fb:66:37:99:be:d3:11:15:
                    73:dc:ab:e0:c8:51:ec:5a:17:4a:8a:f8:f1:c3:13:
                    0a:88:73:58:36:59:ec:7b:c3:42:34:0c:cc:99:5f:
                    47:2a:db:76:02:e5:92:fd:74:bd:04:c3:39:61:f4:
                    19:1e:fd:b3:3f:a2:5f:75:0c:1d:cd:10:c9:d4:0b:
                    5c:58:61:9e:f0:6d:4a:f1:96:98:e4:ce:37:e4:7d:
                    59:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:02:6C:BC:59:64:4B:F8:D1:AE:EB:46:68:E5:8A:DF:1B:28:85:31
            X509v3 Authority Key Identifier:
                keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:02:df:a2:fe:29:f1:ac:c8:de:6f:6a:96:15:2e:98:8d:81:
         5b:7d:c3:20:da:11:7d:9f:54:34:13:82:fc:8f:0b:ef:37:cb:
         f5:c8:0e:60:bb:19:e6:88:a1:9c:48:f5:f4:84:5d:c9:0e:ee:
         81:44:29:49:25:ff:7e:dd:f5:cf:10:ab:34:b1:0c:2d:ae:cb:
         0e:77:37:39:10:31:60:0e:e4:c8:fc:d9:64:5f:9d:b6:b2:d2:
         ad:6a:37:c1:d9:be:1e:42:4a:5d:02:9a:d9:9e:e3:de:3e:58:
         da:22:07:5b:8d:49:a6:ce:20:30:46:1f:7e:a7:ce:54:55:98:
         11:78:87:07:07:71:0f:73:21:18:13:ff:b8:5b:a7:92:b3:74:
         7e:6d:03:2b:d3:d9:64:65:59:27:8c:5d:f3:3b:17:88:42:ee:
         e9:ed:b5:80:bd:32:1e:b3:71:b9:40:a6:e4:1e:e8:ca:25:3c:
         b1:e5:27:07:4a:8f:c6:23:77:75:7d:52:9b:92:bc:c2:67:a0:
         f8:f8:69:30:50:86:43:40:07:e9:95:0f:c3:13:ea:e2:79:2e:
         5e:8c:38:a1:74:8f:69:73:92:68:73:94:37:b8:95:bd:ec:0f:
         0c:ee:75:ae:12:34:ff:d2:c7:23:46:88:11:08:e7:5a:30:95:
         84:a3:6f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 01:52:54 2024 by rpki-client on console-ams.rpki-client.org