Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
File:                     r3NBCHBalXluhXcSXdMAx1Hf2ag.mft (raw, json)
Hash identifier:          djp4Uy1Yxsbncf2iVM4Q8FHOIxR1NktVpzcV0hzYKdk=
Subject key identifier:   FD:F7:C7:3A:89:3C:C6:FA:10:8C:20:75:69:8A:CC:60:58:A7:E7:FD
Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8
Certificate issuer:       /CN=af734108705a95796e8577125dd300c751dfd9a8
Certificate serial:       0192346DC559AE0078C2A48F1B5DABD0D9BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
Manifest number:          0FC2
Signing time:             Fri 27 Sep 2024 17:01:02 +0000
Manifest this update:     Fri 27 Sep 2024 17:01:02 +0000
Manifest next update:     Sat 28 Sep 2024 17:01:02 +0000
Files and hashes:         1: Eo85_szlvs9BCr4dFEc_6KVbMFA.roa (hash: YFpqOHPn9Ji5UMDZcLq6BeyfO4UpIdTvkQ4rOK1sw+E=)
                          2: IMwYnosne_EovQk3HMkbslZO0ZQ.roa (hash: 4ccFeNpYqJCimvDFBuehK3UGlqwI/cJsi10t3ZcfXX4=)
                          3: KvE1Fg6lCgwC3_Q9JJDjlg4fuK4.roa (hash: JkrgBWQTjNjMsXoOxS8CgI9GUloU0F8OY8bVHjKSgMQ=)
                          4: YIHAmsItjloj1TrEuaeW0SMaGyY.roa (hash: aoDv3AuLgw9RMQOXIdreiEHqLPt5TTOhQF6zF4gJo7o=)
                          5: YJUZ9PSEu2qV7CTNV6D35RDbPP8.roa (hash: mwRZJ1eVxcP4S3pphzkwfpvMWwtYo7aserrrfj3BB6s=)
                          6: pNCa5J9tGq60ph-rdyiwzdaH4eM.roa (hash: AjAsuwelgG02zMxKjyxvBMi1MAFfbV4qbCyj0QsfmgQ=)
                          7: r3NBCHBalXluhXcSXdMAx1Hf2ag.crl (hash: n8m7XXK4IDW3cMYHwhX0jfe0xaBG+SOyCkan6FAb+ho=)
                          8: vQw-lV0hSly6ycTTUk4BNxw7wOk.roa (hash: kcxnRCJ6oH1rp8moIlikwGIKYP2bKIRelCBjjbrO7gQ=)
                          9: w5ovayYg3rIhCzBuXDoKovgBtdA.roa (hash: NmKeRzOspSJZ+25Z4EwswZHsuF0t7zduuaqfLAHqLm8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:6d:c5:59:ae:00:78:c2:a4:8f:1b:5d:ab:d0:d9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8
        Validity
            Not Before: Sep 27 17:01:02 2024 GMT
            Not After : Sep 28 17:01:02 2024 GMT
        Subject: CN=fdf7c73a893cc6fa108c2075698acc6058a7e7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:27:61:fb:94:da:47:2c:bb:15:61:c7:59:
                    95:fb:85:29:2e:4a:0c:86:37:e7:7a:19:b8:a9:34:
                    8f:a8:de:45:22:38:84:0f:35:7d:12:31:5b:cf:cf:
                    5d:76:08:0f:45:ad:4f:7c:d9:25:49:b8:88:32:ac:
                    4d:be:a8:cf:28:99:30:5a:79:3a:c1:bc:11:fc:07:
                    fe:3c:01:30:25:b0:73:37:71:39:28:47:f3:7c:15:
                    6a:95:30:a9:20:3f:1a:d2:d5:83:bd:9c:ac:af:f7:
                    b9:3e:72:b2:66:b4:55:f1:39:28:00:76:aa:cd:6b:
                    fe:87:3c:c9:56:07:eb:80:a9:51:dc:81:7c:fa:46:
                    2c:4b:6c:63:7d:fd:fd:60:9d:88:5b:c4:c2:c7:e0:
                    59:5d:d8:74:25:2a:15:b4:b7:52:d2:02:64:87:64:
                    85:c0:55:0b:56:57:a6:9e:33:70:db:06:d9:02:ee:
                    01:dd:10:65:a4:38:30:42:2e:b8:da:aa:c7:0e:10:
                    ed:ba:87:05:26:74:d5:79:75:89:f1:76:fc:38:14:
                    32:8d:87:09:a1:81:11:73:57:81:44:86:02:99:4a:
                    83:a3:98:0c:59:22:d4:7c:b9:b7:f6:75:25:6e:fe:
                    b8:52:b3:ec:82:ce:50:76:a0:e6:43:34:8b:76:74:
                    0a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F7:C7:3A:89:3C:C6:FA:10:8C:20:75:69:8A:CC:60:58:A7:E7:FD
            X509v3 Authority Key Identifier:
                keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c0:11:f2:ac:93:ba:02:ab:7d:4b:5b:cd:91:c2:0b:b7:56:
         9b:b5:2f:60:36:05:3c:52:1b:fc:04:eb:7e:30:87:f3:9d:2b:
         65:8b:45:2c:fb:c0:5e:a9:e1:4e:ae:0d:7a:78:69:8f:e1:b7:
         5d:70:fc:51:5c:ce:a7:cf:dd:eb:57:1f:b0:25:c9:4a:c6:bb:
         e1:ab:98:3e:d7:43:be:09:1c:33:79:9c:fa:b1:b6:a8:27:cd:
         97:b2:52:cc:59:c3:69:ef:d5:57:84:f9:72:bf:cc:94:48:2a:
         9f:92:3c:49:0b:7e:f8:58:2b:94:d7:b4:dc:0d:f1:d6:1d:d0:
         20:2e:73:41:72:c7:69:af:5a:a8:6f:6e:5f:ab:50:7b:d1:39:
         13:b0:6d:1f:bc:b0:f9:e0:d8:6a:49:57:57:bb:88:1a:e2:37:
         0d:db:a8:d7:e1:96:29:95:c7:9f:21:15:b2:0d:3d:d1:de:e2:
         e3:6c:45:df:6f:37:ce:3d:74:43:a6:c1:95:5a:99:05:6b:77:
         8c:ca:38:aa:9f:ed:56:24:9f:e4:b0:0a:c2:78:09:fd:22:8f:
         a9:3d:52:9f:59:73:81:b7:39:74:88:5f:fe:62:56:54:bb:a7:
         fc:c4:cd:80:85:0b:49:8a:3e:e0:b9:9d:1d:e1:db:4d:e9:ea:
         a2:e2:bc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:09:00 2024 by rpki-client on console-fra.rpki-client.org