Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
File:                     t8jfPaM5OL8bJF8cRHn9JN2flPA.mft (raw, json)
Hash identifier:          cDkros4kJskr0VTrX3hZ41VZMynAKluRUVmg2KcOo+c=
Subject key identifier:   5B:43:17:F4:54:1E:DE:F9:6D:9A:F5:21:34:3B:8C:B4:09:5F:C9:04
Authority key identifier: B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
Certificate issuer:       /CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Certificate serial:       019238B8BFB1ADA4AA8920278D018B27092C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
Manifest number:          12A9
Signing time:             Sat 28 Sep 2024 13:01:24 +0000
Manifest this update:     Sat 28 Sep 2024 13:01:24 +0000
Manifest next update:     Sun 29 Sep 2024 13:01:24 +0000
Files and hashes:         1: 8spWKqqpV4pNPmFRud_LmnKKGRo.roa (hash: v8ngDzcQjwPNEBA1YpUPuwYa1P2Q9nZhxuuGNXMbvbA=)
                          2: t8jfPaM5OL8bJF8cRHn9JN2flPA.crl (hash: W+pciho9jnyJe/tDhMvsBbzrwt8TRdSqcn2k1K+NCG0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:b8:bf:b1:ad:a4:aa:89:20:27:8d:01:8b:27:09:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
        Validity
            Not Before: Sep 28 13:01:24 2024 GMT
            Not After : Sep 29 13:01:24 2024 GMT
        Subject: CN=5b4317f4541edef96d9af521343b8cb4095fc904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:a4:7f:5d:16:b8:7f:6a:85:b6:21:a9:a6:
                    fd:6f:16:ca:6f:7e:81:a4:0f:c0:4d:23:7a:76:fc:
                    76:a4:00:e7:2d:8a:ca:67:3d:37:dd:e4:69:d5:ec:
                    5c:84:50:91:33:4b:9e:07:ef:af:cb:8a:4b:47:50:
                    31:e1:8c:ff:a3:d2:6b:fa:3e:5e:f4:98:ca:fa:d4:
                    cc:0d:84:8e:c6:38:29:86:9f:54:b8:37:1a:d0:eb:
                    a8:23:41:35:dc:d3:4d:0d:20:f0:96:4c:f7:db:54:
                    0c:08:28:43:d8:93:37:60:2f:c6:00:ee:10:1a:f1:
                    e3:cd:6e:ee:f9:dd:55:59:14:ff:4b:50:c0:85:47:
                    50:00:bd:87:04:8c:bf:ac:b7:50:93:81:e9:cc:4d:
                    a0:5d:a6:f0:4a:45:a9:51:cb:14:c6:85:1f:a5:1d:
                    bd:7d:0d:78:b2:dd:cd:ba:e6:6e:0d:43:06:1d:09:
                    c5:ae:19:fb:22:e9:e6:ac:b9:ac:b9:ec:f5:1d:bb:
                    79:9a:5d:22:82:7f:2e:70:bf:cd:5f:7f:dd:f9:7c:
                    11:1a:bf:f4:be:51:0f:ac:49:8b:9e:58:60:f4:80:
                    33:55:0a:2a:05:31:d3:4c:6f:ee:0b:f9:a2:60:bf:
                    37:1f:12:c0:9a:bb:ad:2d:cc:41:4e:16:7c:41:5d:
                    92:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:43:17:F4:54:1E:DE:F9:6D:9A:F5:21:34:3B:8C:B4:09:5F:C9:04
            X509v3 Authority Key Identifier:
                keyid:B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a6:76:d6:a6:b6:35:72:36:68:ec:3a:24:b8:f9:60:e3:aa:
         80:51:8b:8a:45:bf:1e:77:61:6c:d7:c8:cb:5b:dc:ea:d0:55:
         54:92:89:6d:6a:cd:9e:65:16:d7:11:7c:f8:47:ed:a8:1d:ae:
         37:04:93:bc:19:3f:18:5f:4a:bb:1c:53:cc:91:24:7b:1f:05:
         2a:44:bb:ab:8f:41:ad:8f:64:94:24:42:4e:ea:fc:07:2d:5f:
         2c:88:c6:46:54:73:22:ad:b5:db:21:43:ce:8a:fa:31:bc:51:
         04:9d:89:e4:64:fe:3d:60:95:a2:e7:f3:54:a5:b3:76:bf:ff:
         3a:b3:5c:80:08:25:45:4a:a0:1c:a0:94:87:14:70:4b:c8:42:
         5b:e0:5d:ae:38:3b:d1:4f:32:00:e0:15:65:07:cb:92:91:54:
         50:91:f6:80:f7:13:d6:1e:8a:88:1a:8d:3d:80:67:81:49:b0:
         98:9f:8b:af:1c:da:e5:4a:3e:60:c0:cf:7f:da:da:a1:6e:b9:
         87:07:e7:99:45:58:98:56:e9:26:49:1c:bd:4d:9d:1f:bd:c3:
         1f:6f:b4:d8:e0:17:03:82:d9:9b:89:99:f1:1f:0e:4d:66:ec:
         d6:51:d2:01:77:de:3f:a4:32:b6:b0:51:c1:7e:3c:3f:81:fd:
         66:49:f6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:22:37 2024 by rpki-client on console-ams.rpki-client.org