Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File:                     RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier:          sxuxiavfTnB738nXcJlZTzZoLu9fT4CezbnNBR2y878=
Subject key identifier:   1C:97:99:73:C7:02:0C:BB:66:A2:4C:29:C7:3E:F8:73:A4:1E:09:86
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer:       /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial:       01923A02121CA84F2F58ECC8A6ECC06716C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number:          0142
Signing time:             Sat 28 Sep 2024 19:01:06 +0000
Manifest this update:     Sat 28 Sep 2024 19:01:06 +0000
Manifest next update:     Sun 29 Sep 2024 19:01:06 +0000
Files and hashes:         1: 1-iX0GJwceIxjjuUZV79-SGq7sZo.roa (hash: 2NAYyPszuUjgQie6DXLfMw7hLTuML0u5xByrmXU4LDI=)
                          2: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: V6RRfbGHcZuWaBSlRDY72OMvdOpRF4PvZ09cSVhM2Uk=)
                          3: lKfx__R2QYNPbbhoq0HP45HLvDo.roa (hash: sdH5pYALwtj4PstZalPPUwJqKm+I236p0iQfn6MPOAc=)
                          4: zTzpcP9SFebe-jTgSV2xeENc_to.roa (hash: j+gP7tl+18lB+h4D34OJr1I7ANuQRw+Bu+rnGJHGBrY=)
                          5: zveIAmliZCuZLlqTX3KRtpX6Xms.roa (hash: ykw9VU++sUDKW3F7PxgKA9+MbUJmIwLgZCq98dGtH7c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:02:12:1c:a8:4f:2f:58:ec:c8:a6:ec:c0:67:16:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
        Validity
            Not Before: Sep 28 19:01:06 2024 GMT
            Not After : Sep 29 19:01:06 2024 GMT
        Subject: CN=1c979973c7020cbb66a24c29c73ef873a41e0986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c3:d1:ef:85:a6:2e:ce:6e:53:a4:e1:b1:4b:
                    89:14:7e:f2:2c:1f:1d:96:fc:15:ad:ab:83:17:38:
                    71:d0:b7:8a:cd:31:db:72:15:aa:d8:9d:b6:5c:6f:
                    96:4b:db:3c:6a:22:d9:b9:6c:48:39:e8:df:08:2a:
                    10:31:06:68:c8:0d:81:5e:1e:a1:11:43:1b:98:d6:
                    2f:ab:48:56:d1:ec:3e:39:b8:6b:63:10:0c:a7:20:
                    df:7a:80:31:61:94:0f:99:93:c7:46:45:0b:b2:d2:
                    22:95:46:8d:e8:7c:1d:65:3b:e8:35:f8:7f:9f:fa:
                    9b:59:e2:71:89:f2:e5:68:de:fa:e8:7d:24:05:0a:
                    3f:7d:4a:9a:f3:f2:5b:05:3d:24:57:9e:09:eb:f7:
                    ce:91:9f:38:0e:b2:13:57:f7:f2:cf:40:db:da:91:
                    7f:ea:b8:1d:3c:e8:b2:e6:07:a4:e6:ca:55:e1:a0:
                    e5:0c:e1:05:3c:fc:c9:90:aa:65:3d:67:d8:45:b5:
                    a6:27:15:79:c1:72:f7:a2:40:50:b7:13:50:16:35:
                    4d:d4:8b:71:9e:db:98:a3:dd:56:76:5b:47:f9:81:
                    c1:b4:5f:a8:93:f5:61:53:79:99:37:94:64:ae:93:
                    cc:97:b9:4c:a5:64:aa:bd:e6:4d:8f:cb:66:8e:b7:
                    b0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:97:99:73:C7:02:0C:BB:66:A2:4C:29:C7:3E:F8:73:A4:1E:09:86
            X509v3 Authority Key Identifier:
                keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:65:8e:9d:2b:52:1e:fa:16:1d:f3:14:80:7e:dd:23:62:02:
         39:06:90:ec:42:71:67:21:04:35:3f:9c:59:d2:89:25:98:cc:
         fa:56:42:1e:f1:d4:ea:6c:d4:92:ec:7f:07:b4:4a:5c:76:01:
         36:2e:d0:0c:4d:c2:70:28:c0:54:e3:64:49:64:57:f7:62:47:
         a2:5c:74:d1:aa:33:e4:19:c4:f2:3d:44:7b:ea:0c:f5:b5:75:
         7b:84:cc:b3:d7:d5:49:d5:4f:c0:44:5a:0e:b7:1a:7a:72:3a:
         9b:55:89:24:d9:f9:0f:68:58:68:79:0c:f7:3e:65:bd:dd:71:
         68:ce:39:ea:be:6e:88:be:2a:d4:3e:f2:9b:4b:8f:5b:39:de:
         2a:dc:db:b1:94:7c:87:eb:48:71:51:99:d7:de:57:e8:8c:2d:
         10:af:63:5b:aa:7c:45:e0:01:6d:8a:34:25:13:22:e0:5a:3f:
         bf:43:15:31:fd:6a:8c:b4:5c:59:c2:29:01:21:f6:fe:a4:a2:
         6d:2b:83:07:e4:86:39:00:7c:e2:f5:f0:a0:e0:e2:c9:07:01:
         8d:dd:0b:0f:c3:e9:25:19:82:25:f4:a9:2e:20:cc:d3:5b:38:
         df:42:87:72:34:4d:17:32:ee:bc:42:e1:a7:31:df:46:0a:99:
         ab:b9:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:27:40 2024 by rpki-client on console-fra.rpki-client.org