Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
File:                     mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft (raw, json)
Hash identifier:          qmhW/zn2zg2+zpSbhI/9GxZ297kSuDVNDZ6V30wx+6g=
Subject key identifier:   0D:CF:A0:BB:F1:B4:83:0F:BD:56:F5:D3:B7:91:37:86:22:20:82:9E
Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00
Certificate issuer:       /CN=987b6812cf7a074580f5942be762f477f67c9500
Certificate serial:       01920BDF9D30E3617989AF93828EC73837E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
Manifest number:          12C7
Signing time:             Thu 19 Sep 2024 20:00:57 +0000
Manifest this update:     Thu 19 Sep 2024 20:00:57 +0000
Manifest next update:     Fri 20 Sep 2024 20:00:57 +0000
Files and hashes:         1: KEp3BWMAnYNpJeH_AdeH2KdzO3c.roa (hash: cDq1nMiQH6dNUaWtWMpzNgvoOyMfoFDX+HBBN20VovQ=)
                          2: mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl (hash: yjvfnZ/gqQBSjqRZXKLiCVEc1PuI/wBEetKRSwj91Ao=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 13:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0b:df:9d:30:e3:61:79:89:af:93:82:8e:c7:38:37:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500
        Validity
            Not Before: Sep 19 20:00:57 2024 GMT
            Not After : Sep 20 20:00:57 2024 GMT
        Subject: CN=0dcfa0bbf1b4830fbd56f5d3b79137862220829e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:ed:fb:a1:52:94:b2:7c:3f:18:b5:9c:e9:
                    66:59:70:04:b2:97:7e:a1:f2:89:07:54:8a:06:43:
                    ec:4a:e8:87:9e:98:4e:87:82:dc:f7:f8:c9:5f:43:
                    db:c8:fc:e2:b7:a2:d3:cb:c4:26:2f:c7:f8:c2:ce:
                    52:a6:6c:88:d6:43:60:88:06:3e:86:51:cf:2f:1f:
                    08:a8:56:fa:35:ea:82:de:b8:e3:ae:d5:74:25:bf:
                    8e:27:85:23:d0:bb:ae:46:ed:93:f4:45:7b:35:ac:
                    75:b7:29:3b:a1:8f:c5:e6:fd:91:06:bf:24:05:de:
                    76:fa:45:cb:ab:0f:31:c8:30:b6:92:be:71:a9:2d:
                    ff:37:01:dd:c8:96:bf:eb:0d:e6:37:cd:69:ea:09:
                    ce:13:24:43:a7:ae:55:a0:2b:c0:e7:9a:fa:59:9a:
                    e3:64:d7:d5:a8:2e:9f:bd:31:cd:f3:d0:46:9b:f1:
                    7d:09:c5:00:58:1d:04:fe:e4:b8:6a:65:0f:76:b7:
                    22:60:9b:92:e1:4f:01:6c:de:e7:1e:ce:26:7f:70:
                    4c:fb:c7:14:28:5b:22:5a:de:04:bf:fc:cc:94:03:
                    56:56:eb:b2:ae:a6:2f:fc:28:f1:ad:dc:67:55:b0:
                    a5:54:33:3b:5a:61:e7:5c:c5:80:a7:b6:4e:67:0c:
                    6e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CF:A0:BB:F1:B4:83:0F:BD:56:F5:D3:B7:91:37:86:22:20:82:9E
            X509v3 Authority Key Identifier:
                keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:24:b7:60:fd:52:00:ff:5c:f1:dd:40:5c:b9:ba:b9:f0:db:
         29:90:8f:79:27:77:94:0f:87:f4:9f:52:cd:b8:c3:e5:f0:95:
         64:ee:99:2c:9b:9e:2a:7e:ae:23:12:ce:8f:77:c7:2c:3a:42:
         44:4f:b4:ea:e2:99:6a:65:3f:fa:17:43:bf:07:1a:44:e0:89:
         62:27:5c:d1:44:35:90:a3:45:de:66:8f:6c:ff:8c:d3:bd:8e:
         a5:25:1e:7f:b5:49:cd:3d:7c:6d:88:41:9f:f3:2c:eb:dd:6b:
         a9:6f:38:6c:82:ee:db:64:3b:e9:ea:f7:59:3c:89:50:6b:f2:
         f4:1c:87:3d:6b:05:1e:b8:15:34:7f:c5:f7:0d:c4:46:a5:65:
         67:3c:f0:28:13:4c:3a:36:3d:b9:db:e4:48:db:6b:79:25:f2:
         2a:be:ca:f8:46:82:a5:0f:cf:31:8e:51:22:af:92:84:5d:a9:
         08:d1:2b:39:71:03:72:0a:d5:a1:65:3a:77:1c:59:1f:7a:a2:
         ee:e7:c6:72:4b:a2:b0:ee:de:a4:fa:1d:f5:0d:9c:b9:99:d2:
         64:75:ae:c1:24:7f:cd:12:d5:22:ea:b9:09:26:59:40:2f:48:
         de:3a:c2:53:ff:2f:3e:b0:09:ed:8c:b0:4e:d8:3e:88:33:a6:
         75:2e:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 23:43:58 2024 by rpki-client on console-ams.rpki-client.org