Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
File:                     86GUB-2m2whjzcnxhXNILWrRIJg.mft (raw, json)
Hash identifier:          hjBtH6H1pw2uWkJ8Wn32BqMMFgt65maqYUHlq4OynHA=
Subject key identifier:   75:F8:FB:61:98:EA:3A:70:46:95:AE:32:CE:78:E3:B5:C1:9A:7D:31
Authority key identifier: F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98
Certificate issuer:       /CN=f3a19407eda6db0863cdc9f18573482d6ad12098
Certificate serial:       0191FA102F087C017AC60188B279E3558D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
Manifest number:          0112
Signing time:             Mon 16 Sep 2024 09:00:50 +0000
Manifest this update:     Mon 16 Sep 2024 09:00:50 +0000
Manifest next update:     Tue 17 Sep 2024 09:00:50 +0000
Files and hashes:         1: 86GUB-2m2whjzcnxhXNILWrRIJg.crl (hash: ilqYQeBb6ecIPc3HYdBBaGCe/d+IDQKhaGeLsO29j3U=)
                          2: UMxWZSn3OY95xUbXnPzBNy-Ggho.roa (hash: n+gwc/mKuCvQZFCDuAK8gMzAjCLO9fA+GBLecA8z+Ek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:2f:08:7c:01:7a:c6:01:88:b2:79:e3:55:8d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a19407eda6db0863cdc9f18573482d6ad12098
        Validity
            Not Before: Sep 16 09:00:50 2024 GMT
            Not After : Sep 17 09:00:50 2024 GMT
        Subject: CN=75f8fb6198ea3a704695ae32ce78e3b5c19a7d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:a1:42:89:f6:a0:cf:c0:fc:b0:61:47:e2:
                    bf:c7:83:fa:c6:1d:60:86:19:06:07:2d:65:2a:a5:
                    e0:1c:a5:da:02:43:e4:a3:42:86:e6:af:69:d2:85:
                    c8:1c:b8:06:05:fe:00:e5:96:15:3e:53:62:a0:4a:
                    bd:c9:e7:26:16:3f:41:e0:21:f5:a2:0c:f3:00:f8:
                    49:01:15:e2:1f:20:49:ca:ca:f1:ec:f5:77:02:37:
                    b1:8b:c6:cc:fa:be:24:cc:df:ed:47:48:42:6f:b1:
                    fa:f9:03:87:60:f1:d0:f9:94:a2:8a:14:19:7d:88:
                    f5:77:f7:ce:e8:e0:fc:6c:dc:c4:c0:eb:43:ae:ba:
                    f5:b9:31:9f:07:4c:82:1e:33:b3:75:63:0e:47:3e:
                    4a:d6:36:36:30:f4:11:09:57:2d:d6:6a:1f:4d:d2:
                    a9:f0:ce:f9:e7:64:c6:49:82:e5:d9:f5:01:29:10:
                    3b:9b:4e:82:94:92:35:50:df:bc:b2:93:3b:53:49:
                    b1:ee:af:74:22:7d:3f:6a:e7:3f:2a:9b:ef:21:3f:
                    1e:7c:67:3e:07:62:dc:bf:16:4a:12:b4:75:2d:25:
                    b9:a0:97:0c:7c:1b:b5:a6:1f:1a:2e:f9:ae:8e:cb:
                    2f:53:5b:3b:a1:ae:1b:32:d1:9c:84:36:c8:99:a9:
                    cc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F8:FB:61:98:EA:3A:70:46:95:AE:32:CE:78:E3:B5:C1:9A:7D:31
            X509v3 Authority Key Identifier:
                keyid:F3:A1:94:07:ED:A6:DB:08:63:CD:C9:F1:85:73:48:2D:6A:D1:20:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86GUB-2m2whjzcnxhXNILWrRIJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9dfd11-aa51-47af-a1c8-fac904a4aab5/1/86GUB-2m2whjzcnxhXNILWrRIJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:12:83:83:88:b2:07:77:04:dd:e6:36:91:b2:dc:79:fb:93:
         01:de:39:4e:69:24:31:18:6f:8c:4e:01:0d:ab:da:05:be:ba:
         65:ae:6f:53:18:ff:58:9f:3c:16:62:39:95:ee:44:8d:ce:ab:
         01:a3:76:78:68:75:f8:49:6c:14:09:32:a7:76:49:46:31:25:
         77:5f:99:fe:90:0d:ef:a3:fd:3e:36:c9:51:fa:e3:54:09:67:
         a3:1a:84:50:e9:7a:e2:15:79:ee:1b:ab:e7:a4:c4:b5:4d:2c:
         ea:a7:f6:a3:ef:d0:24:bb:20:98:52:ab:79:4a:8f:a7:75:84:
         1a:ac:9e:4c:13:6e:7e:2b:a2:9a:63:f3:17:2d:40:ea:1c:80:
         94:67:39:3a:e8:34:6e:5a:21:95:01:d2:8b:c8:9e:e4:be:83:
         38:ff:72:62:b6:3a:db:b0:ac:bc:af:52:b8:cf:d7:26:6f:d1:
         fb:86:d7:fc:75:3e:e2:f8:9e:ac:4f:94:fd:8f:83:b5:02:77:
         2c:15:ae:c5:54:7b:f4:90:94:a0:50:f7:63:36:2c:0d:f8:e0:
         bb:17:cf:29:4f:c7:20:06:90:c4:7c:be:1e:3a:88:a8:ec:4c:
         47:87:7d:cd:02:7e:7d:cb:8e:96:3c:33:84:f1:40:3d:f2:5f:
         64:07:df:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:19:53 2024 by rpki-client on console-ams.rpki-client.org