Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
File:                     iyH_rekwvR_S4XiM_0B9nTQTThc.mft (raw, json)
Hash identifier:          7qKR+Otxjp+4VO9zAZZVatEa99UB5xU7X91tz5PCJlo=
Subject key identifier:   99:E3:FE:A9:CC:67:9A:45:FF:AF:F7:0B:D8:B6:B6:CB:AB:26:1D:14
Authority key identifier: 8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17
Certificate issuer:       /CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
Certificate serial:       01923580664240AECA427EF5F3A5C3D909AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
Manifest number:          0F0F
Signing time:             Fri 27 Sep 2024 22:00:59 +0000
Manifest this update:     Fri 27 Sep 2024 22:00:59 +0000
Manifest next update:     Sat 28 Sep 2024 22:00:59 +0000
Files and hashes:         1: 0NUMWy_NR9r5aMfnYJoau7vLeoY.roa (hash: FJP/9zLYhLfa1of3o49um6b82q4o42A/6rPboeHAUgs=)
                          2: iyH_rekwvR_S4XiM_0B9nTQTThc.crl (hash: oJLnRXcmdxjKFYGBaIAWnS4gLhDNNK4hv2pY80IrPaI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:80:66:42:40:ae:ca:42:7e:f5:f3:a5:c3:d9:09:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b21ffade930bd1fd2e1788cff407d9d34134e17
        Validity
            Not Before: Sep 27 22:00:59 2024 GMT
            Not After : Sep 28 22:00:59 2024 GMT
        Subject: CN=99e3fea9cc679a45ffaff70bd8b6b6cbab261d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:be:0a:3d:5a:0e:ef:8e:d5:ab:ca:df:f7:ac:
                    8d:c7:9f:6e:67:2e:15:77:76:f5:e4:f8:6d:b2:b0:
                    ed:7d:66:f2:5b:f5:f2:d6:5c:3c:c2:94:3f:6b:e0:
                    e9:a9:92:01:9e:3e:84:23:c5:4e:b6:17:7f:0f:90:
                    43:ef:2c:bf:9f:f9:06:35:0a:d9:d8:0e:70:b5:aa:
                    d7:4e:ee:45:fb:6c:97:d8:8d:d8:67:39:ac:c6:58:
                    82:fb:b1:ac:d1:e3:eb:f8:08:16:ec:12:53:40:5a:
                    e1:f9:7f:68:7b:8f:c5:8b:fc:fc:6d:bf:97:36:3c:
                    c8:a3:39:cd:50:6a:2e:0f:07:d8:18:b9:10:b6:b2:
                    a6:d0:b3:70:78:00:19:a7:2b:62:60:75:84:7a:aa:
                    4f:3e:38:bc:ca:bc:0f:63:31:37:62:73:c0:71:44:
                    b8:1d:45:11:75:34:4e:97:64:34:d2:cc:9d:41:ff:
                    81:7b:26:5d:4c:ae:86:2b:9d:14:b1:f5:b3:b8:d7:
                    ff:93:c2:58:ca:48:92:05:4f:c1:ec:ec:6b:37:85:
                    75:b2:45:dc:33:8a:72:e9:36:0c:5a:f0:72:c2:c5:
                    08:6f:b9:58:6b:a8:d4:6f:25:db:79:99:28:60:66:
                    64:91:90:8f:6f:73:69:6c:ce:08:eb:80:86:06:0d:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E3:FE:A9:CC:67:9A:45:FF:AF:F7:0B:D8:B6:B6:CB:AB:26:1D:14
            X509v3 Authority Key Identifier:
                keyid:8B:21:FF:AD:E9:30:BD:1F:D2:E1:78:8C:FF:40:7D:9D:34:13:4E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyH_rekwvR_S4XiM_0B9nTQTThc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ce0eb-3aba-4b36-b7c4-425c51d7888b/1/iyH_rekwvR_S4XiM_0B9nTQTThc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a4:7b:22:ad:2a:25:69:e6:5f:8f:16:fd:2f:c0:99:45:d3:
         e5:3b:bc:84:fa:7d:00:e2:f9:5c:35:39:d6:e6:90:f2:d1:88:
         dd:ce:c8:41:c4:aa:b9:fd:3e:f2:a4:af:d9:dc:10:4a:4d:65:
         ec:b6:62:31:04:c2:74:a8:8e:cb:69:6f:71:8a:dd:5b:94:0e:
         3a:79:98:33:41:be:26:c1:2c:b6:ae:47:f4:fd:4b:08:b9:8c:
         96:da:65:6b:41:77:6d:e5:28:a4:c1:76:79:0b:11:9b:e7:f4:
         5a:91:37:6a:79:6d:6b:e2:7d:aa:16:85:31:98:76:09:80:ba:
         89:e0:f6:e5:81:bf:9e:dd:93:61:95:61:67:bc:7b:a6:ee:64:
         e4:6d:af:fe:79:f8:35:ef:3f:c4:af:4b:9a:f0:64:f3:92:80:
         cc:5c:81:6e:65:60:c3:25:20:06:4b:fe:6e:2d:d5:d1:46:a2:
         d3:35:84:43:62:0a:13:7d:73:e2:7c:b6:f1:c7:a8:38:b4:85:
         46:7c:b8:92:37:21:0c:49:55:d1:c4:ca:f4:02:24:f5:77:18:
         bd:36:1d:b7:ea:7f:fe:5c:27:aa:82:b4:0b:fb:dd:46:9d:97:
         bd:b2:d7:d6:83:5e:b1:7a:13:ba:e7:ae:39:40:6c:0f:d4:bf:
         20:d7:99:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:35:26 2024 by rpki-client on console-fra.rpki-client.org