Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
File:                     F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json)
Hash identifier:          ga4WTGIW+iVoxKncyRR/R+FdInq5W+gViM07uOanqXg=
Subject key identifier:   9C:48:28:E5:BA:85:3E:CA:37:C7:3E:6D:07:11:48:65:E4:3B:24:4D
Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6
Certificate issuer:       /CN=177e11f5233e933999a2a0c68903fc275ae459e6
Certificate serial:       0191FAECFEF2842B07BD17AA2C9B9892D32A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
Manifest number:          08ED
Signing time:             Mon 16 Sep 2024 13:02:01 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:01 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:01 +0000
Files and hashes:         1: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: VqqVMbus3hgxAWp/mLHHlGIIYNwz4qvjNf9JxLWaH8o=)
                          2: oFbJbYcc6gdpEGAqxFN_CO5NGtg.roa (hash: 8SJGBpKrbrQeCbjG0qEZPHrYb5oSUWBNsnVX4isR9/0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:fe:f2:84:2b:07:bd:17:aa:2c:9b:98:92:d3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6
        Validity
            Not Before: Sep 16 13:02:01 2024 GMT
            Not After : Sep 17 13:02:01 2024 GMT
        Subject: CN=9c4828e5ba853eca37c73e6d07114865e43b244d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:e3:81:76:03:7e:9e:19:5e:3f:75:89:25:
                    53:0c:93:c8:0f:42:c6:1c:cd:6b:05:ee:bf:a9:86:
                    7e:87:09:24:fd:26:1e:6b:85:16:d7:80:8f:48:c0:
                    e0:b7:e0:33:62:e9:73:6c:ef:05:f8:80:47:ea:7e:
                    c4:6f:2c:90:e1:23:99:34:b9:6a:15:28:dd:6b:4e:
                    4a:dc:f2:cd:81:6f:11:b7:4c:d4:07:fd:e1:fc:fc:
                    84:09:82:dd:db:a5:3e:ae:6a:30:c5:04:cd:3f:14:
                    a8:d2:da:a0:10:a0:70:36:9a:6e:30:ea:92:a4:62:
                    82:35:3a:56:50:70:f8:77:37:a9:10:7e:82:6d:a4:
                    75:52:95:30:c5:98:57:83:7f:9f:37:79:c3:ce:d6:
                    46:62:70:82:07:7b:15:b6:0a:e8:c0:6d:cd:49:76:
                    fa:2e:6e:60:6d:61:fa:0a:ad:be:f2:bf:5e:29:0f:
                    a7:9b:a4:47:11:09:1a:f5:68:01:4a:4a:c2:b0:0b:
                    fb:a3:e2:4c:d1:ec:45:d0:36:6e:46:4a:62:33:d0:
                    bb:eb:81:d4:fb:cf:3a:bc:44:1b:18:cb:53:5d:ac:
                    be:67:34:a9:1f:5c:64:5b:6a:72:21:e3:64:09:c2:
                    ec:88:4b:25:8e:c4:af:3b:a5:79:6e:90:d2:6d:7b:
                    7a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:48:28:E5:BA:85:3E:CA:37:C7:3E:6D:07:11:48:65:E4:3B:24:4D
            X509v3 Authority Key Identifier:
                keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c4:89:d7:11:e7:a6:e9:ce:e5:d6:2d:d5:7f:d7:f1:42:4d:
         64:74:89:7d:02:8b:fc:35:0c:8e:1a:f8:3a:42:36:35:da:e6:
         e4:9e:a8:7e:7f:aa:ea:d7:b5:a9:5d:9d:9a:6a:8c:46:3a:27:
         1f:11:4d:ee:0a:6a:58:48:eb:fe:cd:63:78:fd:ca:f6:42:04:
         d1:67:5e:91:8d:4e:a0:24:61:61:6a:23:25:6f:cb:d6:9a:b2:
         c2:03:4e:7f:12:8a:4f:90:5b:d8:1a:b6:fa:75:0a:d2:00:71:
         87:7e:3a:24:4c:c2:85:6c:aa:25:25:9a:cd:aa:93:2c:66:05:
         74:70:b3:d6:5d:94:99:62:6c:0a:e6:bd:18:13:fa:c8:a6:a2:
         a5:06:6c:9d:92:5d:bb:fa:c3:69:19:09:70:6a:06:01:b8:76:
         b5:1b:4f:88:24:bc:e0:8f:24:e7:d9:af:5f:0e:7d:cb:e9:11:
         b4:86:95:e0:ff:58:73:29:2c:10:78:79:03:a0:be:77:58:0c:
         1a:4f:2b:73:b6:51:29:47:4c:15:de:37:a2:38:88:7a:50:6d:
         77:ee:19:27:2a:75:5c:09:37:33:24:3a:ea:f7:c1:91:69:e3:
         fe:a1:10:d0:25:6f:01:e8:cf:82:54:bb:49:e6:c3:96:3c:1a:
         3f:33:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----