Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
File:                     cfXp6ogwX30xahKh1J2w6fuJbOE.mft (raw, json)
Hash identifier:          uCTE8PdxbRO0nCfPd+qQyp1KsiA5nS1mUiTynI0skC4=
Subject key identifier:   EC:CE:0C:10:A0:9D:8F:46:18:48:CA:A6:18:CE:C9:97:A8:FA:5E:32
Authority key identifier: 71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1
Certificate issuer:       /CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
Certificate serial:       0191F96B881E68B82802AFCA68D5A5B06D98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
Manifest number:          0101
Signing time:             Mon 16 Sep 2024 06:00:59 +0000
Manifest this update:     Mon 16 Sep 2024 06:00:59 +0000
Manifest next update:     Tue 17 Sep 2024 06:00:59 +0000
Files and hashes:         1: C33BZCX_X-mzpFdxsMcXGwD_-ks.roa (hash: nqs+WqN2Bv6LbuITmyRTtZQmI/Kyd3p+GZvTyBfFYQQ=)
                          2: cfXp6ogwX30xahKh1J2w6fuJbOE.crl (hash: qLd9fKgEPCTY1GFYEM4vM6j/vZB4TeIw5hBF039yOHQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:6b:88:1e:68:b8:28:02:af:ca:68:d5:a5:b0:6d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71f5e9ea88305f7d316a12a1d49db0e9fb896ce1
        Validity
            Not Before: Sep 16 06:00:59 2024 GMT
            Not After : Sep 17 06:00:59 2024 GMT
        Subject: CN=ecce0c10a09d8f461848caa618cec997a8fa5e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:93:85:62:89:65:f4:71:05:c0:df:d4:5e:ec:
                    ea:ae:fe:d6:e8:80:4c:4b:df:9e:2b:41:f4:84:7b:
                    0d:ee:fa:ff:60:d2:c9:f2:a6:48:f4:33:bd:9e:16:
                    b5:0a:77:84:2c:b0:90:ad:e7:15:ff:49:64:0f:f0:
                    38:55:95:1a:46:a1:98:20:df:04:35:2c:af:d9:19:
                    cf:e5:ad:63:17:9d:53:4c:84:42:31:ca:94:76:74:
                    3f:3d:b4:80:d0:3f:97:e6:18:89:a4:55:1f:a3:dc:
                    3e:37:97:66:6e:7b:8d:38:92:cc:66:d1:6f:78:a2:
                    6b:4a:86:78:92:02:9f:5d:cd:73:e7:27:7c:99:d2:
                    cd:e3:08:03:f3:1e:b8:91:59:24:90:ff:fb:3d:cc:
                    6b:4f:ff:88:f5:58:e0:80:52:08:78:02:b0:e1:22:
                    e6:2a:a8:27:06:bc:6d:77:21:c4:60:ea:52:0b:3b:
                    ab:f1:4f:c8:aa:e7:5b:a5:42:2f:48:db:a2:d9:3c:
                    44:aa:04:aa:b0:82:58:95:6f:3a:d8:9d:ea:d4:a5:
                    42:17:ad:e5:3c:15:f6:53:4c:d9:b1:d1:68:52:8b:
                    b4:6d:cc:e3:ef:c3:5a:7a:6a:d5:e2:4b:2e:50:a7:
                    33:c7:4a:0b:80:e1:f5:98:67:5c:f9:5c:35:46:97:
                    3a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CE:0C:10:A0:9D:8F:46:18:48:CA:A6:18:CE:C9:97:A8:FA:5E:32
            X509v3 Authority Key Identifier:
                keyid:71:F5:E9:EA:88:30:5F:7D:31:6A:12:A1:D4:9D:B0:E9:FB:89:6C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cfXp6ogwX30xahKh1J2w6fuJbOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/749346-b08f-4931-8d4a-0538a3a14dfd/1/cfXp6ogwX30xahKh1J2w6fuJbOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e4:d0:b7:d3:1a:43:a3:65:f9:8f:0b:f7:53:bf:e0:d7:f1:
         70:90:bd:9f:fa:6f:96:81:e8:02:7f:ce:41:73:ab:fa:e5:dc:
         44:13:e5:f2:86:5d:3a:0e:26:c2:04:68:75:ea:7e:f8:e1:68:
         e8:08:f8:0f:cc:3a:95:ac:35:96:35:e9:8c:2a:c2:f1:62:f8:
         f6:5d:39:cc:84:f7:08:fd:20:0d:68:da:3e:fc:de:0f:58:92:
         47:06:f4:4b:c8:98:91:0a:0a:d8:55:f7:1f:15:aa:ea:72:60:
         ae:a9:04:0c:37:21:19:09:b0:a8:2d:1b:75:2e:12:bc:19:72:
         5d:22:e5:d4:ae:03:10:6e:65:75:cb:ae:7b:b4:af:d8:e3:12:
         12:af:6c:84:e2:6a:22:46:db:b3:70:23:a5:5e:85:66:50:ef:
         24:cd:c5:7c:fa:16:52:dd:4e:a0:a4:24:39:b1:2e:18:de:49:
         4a:3a:08:2c:36:d8:0f:d8:4f:36:57:3a:4d:be:01:36:20:6b:
         21:6b:7e:0f:3f:58:af:a6:b0:08:89:b1:3a:c9:b4:a9:70:bf:
         d9:03:91:ee:97:98:fc:1e:51:c2:41:93:10:77:1e:e6:6b:be:
         5d:c9:70:21:d3:a0:0c:be:b3:00:6c:ad:c5:4b:bd:88:1a:de:
         4c:3e:57:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:19:31 2024 by rpki-client on console-fra.rpki-client.org