Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
File:                     DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json)
Hash identifier:          r7ofrA06CUm3ZZPig5ORj7SIom+hmDWC0XK54+MBjNg=
Subject key identifier:   98:EE:1B:F9:3B:D0:6C:7E:AF:03:A7:0D:8D:A3:1B:85:E5:CD:E0:2E
Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Certificate issuer:       /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Certificate serial:       01920BDFA28539A9B4DE1B3CAA98EE9A2CA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
Manifest number:          05
Signing time:             Thu 19 Sep 2024 20:00:58 +0000
Manifest this update:     Thu 19 Sep 2024 20:00:58 +0000
Manifest next update:     Fri 20 Sep 2024 20:00:58 +0000
Files and hashes:         1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: qRjQY32G+185RYn/Rde7mD3tlBStaDtCabl24D/yUlc=)
                          2: YqTBPGWE7my6xrFdjlnMwjx73W0.roa (hash: ygDwnIulQTCmyOpgymHy96hM3BYjEAYfoRqgJxbjz+g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0b:df:a2:85:39:a9:b4:de:1b:3c:aa:98:ee:9a:2c:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
        Validity
            Not Before: Sep 19 20:00:58 2024 GMT
            Not After : Sep 20 20:00:58 2024 GMT
        Subject: CN=98ee1bf93bd06c7eaf03a70d8da31b85e5cde02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:f0:24:1a:6d:87:43:91:ac:0d:a4:5f:58:
                    2e:97:55:dd:a8:b7:93:49:9d:79:e5:6b:a8:62:7e:
                    4d:96:d0:36:2c:fa:3f:97:cf:20:9c:8e:74:05:52:
                    be:14:42:1f:01:e5:8c:5a:ff:1d:9b:d8:52:f3:fe:
                    dc:8d:20:55:01:86:7b:9f:d1:50:d0:f9:aa:98:ff:
                    d6:35:1e:c6:1a:b7:3d:03:e2:1b:ad:83:d6:a2:3b:
                    28:32:f2:6d:e9:8f:f2:75:d4:53:3d:36:07:c0:5e:
                    f3:04:83:22:41:f2:3e:9a:15:b6:42:10:7b:8c:4a:
                    c0:d8:25:c8:f6:e6:85:f1:1b:ea:c2:71:55:7c:81:
                    9b:ba:06:7b:d4:8e:56:c1:a9:93:77:5f:8a:fa:88:
                    71:82:c3:16:85:23:5a:3c:db:bd:50:68:84:64:94:
                    6e:d5:e5:b4:36:d4:bb:90:74:a8:2b:cf:f2:79:32:
                    59:73:24:44:10:be:c7:b2:8b:e9:a3:f4:e7:9f:24:
                    a3:ec:b7:60:ef:7d:ac:01:fc:fb:a9:82:86:07:4a:
                    9d:a4:02:f1:f7:73:84:0b:6a:f1:fe:4a:ae:85:3f:
                    0c:19:64:f5:5e:ad:9a:78:9f:7b:84:7f:f6:a6:2d:
                    05:43:9f:11:7e:6f:b9:7f:58:90:11:ef:0d:ae:df:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EE:1B:F9:3B:D0:6C:7E:AF:03:A7:0D:8D:A3:1B:85:E5:CD:E0:2E
            X509v3 Authority Key Identifier:
                keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:bb:0b:a5:ef:18:70:42:0b:cd:0f:bd:0c:d8:39:12:9a:bd:
         a7:92:6f:71:8f:02:a1:64:23:4f:49:a0:9d:d0:41:ff:80:c8:
         9c:3e:2f:df:e1:b6:5f:56:f7:45:28:61:8c:f4:a0:90:c6:8a:
         e0:7a:20:69:43:bc:3d:fa:27:54:82:12:b2:d4:90:d5:06:37:
         7f:07:d8:cf:6f:f6:35:c7:a3:b7:3f:4d:33:2d:e0:bd:69:15:
         37:4a:6e:c0:da:38:5e:a3:60:2b:f5:8b:98:1d:15:83:e3:d3:
         10:8e:ae:24:11:9a:ba:01:29:d4:a2:af:7e:89:6a:2d:a4:0a:
         3e:64:80:7b:44:e0:2f:82:7a:ac:e2:2c:02:42:4f:1c:25:83:
         0c:64:c3:62:91:16:bb:81:bc:63:f9:50:6c:95:76:f4:35:b5:
         07:ff:79:3a:fd:9e:65:27:e9:40:43:49:7b:58:e5:ed:31:e4:
         5f:03:03:0a:57:1d:23:49:c7:63:0e:64:0e:c1:05:59:c9:e6:
         d1:0c:de:38:02:b8:2b:73:78:22:e5:d3:d9:db:4b:9f:4e:26:
         01:5c:11:ce:f9:69:de:35:9f:58:c2:6b:6d:8c:91:29:68:e4:
         c3:f8:30:4c:8c:34:80:ac:fe:c6:ae:2b:eb:60:9a:b2:3d:05:
         19:1c:16:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:56:23 2024 by rpki-client on console-fra.rpki-client.org