Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
File:                     thvJe5gnbrO6vZ56pn4nBa4R5lg.mft (raw, json)
Hash identifier:          Pw2LhDOxRUgtTO/7WrtUsY8yLnOceIk9IfegvJBjXLQ=
Subject key identifier:   36:B5:F4:B9:08:4F:B3:9E:82:AA:15:59:43:2E:FB:E9:1D:01:42:87
Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
Certificate issuer:       /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Certificate serial:       0191F9A27D26F8D420DFF5A4D950158293E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
Manifest number:          0150
Signing time:             Mon 16 Sep 2024 07:01:00 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:00 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:00 +0000
Files and hashes:         1: H-VwsQe9_LITnYFHb4bMvhWPO5M.roa (hash: 5TEdHcuoet6Wh7j/PoMrQaH76LlChl2l0xr8tUkP3BQ=)
                          2: thvJe5gnbrO6vZ56pn4nBa4R5lg.crl (hash: iX3IRc8AWQ2mQd5oeXEiK/UPIA2PtH0VOdqJ1B+J+Z4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:7d:26:f8:d4:20:df:f5:a4:d9:50:15:82:93:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
        Validity
            Not Before: Sep 16 07:01:00 2024 GMT
            Not After : Sep 17 07:01:00 2024 GMT
        Subject: CN=36b5f4b9084fb39e82aa1559432efbe91d014287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:f2:81:b8:72:56:b5:d7:e2:fe:4a:9e:79:
                    30:27:c5:a5:3b:8c:9c:73:01:bc:6e:a1:63:95:49:
                    19:c1:ee:a1:2c:c9:75:b8:5e:bf:ff:71:9a:d5:c2:
                    f1:3e:8c:d4:2e:44:8d:5a:c6:29:3a:fe:44:4d:ac:
                    74:21:66:d6:26:e5:01:be:c3:90:40:bd:83:29:35:
                    d8:cb:88:03:85:5f:b7:7c:35:b5:c1:0b:fa:ec:c4:
                    14:d3:c8:a1:0b:b8:41:66:61:02:4e:f0:39:4a:79:
                    48:8b:51:81:cc:1d:8d:cf:da:0a:90:54:64:02:a6:
                    aa:ac:0b:28:9d:96:ee:0e:f1:0d:9e:ad:68:37:32:
                    24:11:5c:2f:55:71:ed:d8:f5:af:14:25:4f:c9:de:
                    d3:f2:0d:1c:e7:ec:ce:e6:e5:5e:63:34:70:99:8a:
                    e6:ce:82:02:e4:89:9f:98:57:bb:f1:1f:30:ee:1f:
                    b6:2b:af:12:9b:c5:6c:0f:d9:52:9b:f0:f3:66:dd:
                    52:b3:ed:97:32:94:97:6b:48:54:e9:36:03:7b:a3:
                    a3:ec:1e:a5:6d:e2:37:ee:f0:b7:4a:a1:ed:5a:a9:
                    05:c0:71:b3:86:d3:35:22:96:27:e8:24:67:98:03:
                    dd:0b:88:72:90:8c:3c:a1:f4:d0:f6:35:94:15:6a:
                    f1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B5:F4:B9:08:4F:B3:9E:82:AA:15:59:43:2E:FB:E9:1D:01:42:87
            X509v3 Authority Key Identifier:
                keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:16:b9:87:ad:ff:22:6d:85:11:56:68:86:cc:0a:f8:88:b6:
         49:b5:4d:f0:e3:33:9f:2c:bd:ce:49:90:19:8c:9c:59:27:6a:
         7b:a5:f7:ab:a9:de:2d:95:59:16:e4:d6:51:1f:28:51:2f:15:
         6a:97:37:03:a0:a8:bb:3c:e7:cc:ca:2c:dd:3f:71:da:e0:42:
         7c:26:92:be:ee:c0:24:19:91:ea:97:cf:60:c4:f2:42:1b:90:
         cc:f9:07:be:03:bc:15:84:14:02:f7:bd:b7:84:72:c0:70:da:
         2b:e7:ec:42:e3:02:7b:e5:9d:d7:7f:06:0a:f0:d2:6f:75:6d:
         20:db:d5:70:42:37:9b:03:bf:f5:de:67:38:14:b7:55:6f:ca:
         c0:c4:c5:c4:f6:80:a6:d6:db:cd:a7:48:42:c4:5d:8d:b2:b8:
         7a:71:be:2a:0e:02:2e:7f:8f:a7:49:5e:bd:1c:16:a8:98:d9:
         a1:2a:c9:0a:cb:3f:14:a4:de:84:2e:dd:89:28:e7:45:45:7b:
         61:49:b9:ac:c2:40:36:b5:35:04:6f:ba:ca:16:01:11:fe:55:
         85:ef:7e:ac:b4:b9:89:f5:e6:cb:97:ce:56:f4:18:22:32:43:
         cc:4d:90:c3:a1:d4:b4:8b:65:ed:f1:a6:1f:9c:4c:f7:90:87:
         95:d7:3f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:24:55 2024 by rpki-client on console-ams.rpki-client.org