Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft
File:                     KuSoz5RAPH-drSfzyf_nMehrd4c.mft (raw, json)
Hash identifier:          nzKsmzI0vDGiI2Zf1S0K6znUtqzkNml4M90ctpZwun4=
Subject key identifier:   33:22:23:EC:9A:EC:B8:ED:26:72:47:BB:92:83:21:77:70:E1:DD:1F
Authority key identifier: 2A:E4:A8:CF:94:40:3C:7F:9D:AD:27:F3:C9:FF:E7:31:E8:6B:77:87
Certificate issuer:       /CN=2ae4a8cf94403c7f9dad27f3c9ffe731e86b7787
Certificate serial:       019238BAF9D8C3B43429175D51D8BD8106DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KuSoz5RAPH-drSfzyf_nMehrd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft
Manifest number:          12D9
Signing time:             Sat 28 Sep 2024 13:03:50 +0000
Manifest this update:     Sat 28 Sep 2024 13:03:50 +0000
Manifest next update:     Sun 29 Sep 2024 13:03:50 +0000
Files and hashes:         1: DZCOI-ES2QF_93ycDxCnUyPKRrw.roa (hash: f0KqmdId8kLa0ODHLSp2dBvZuCm7X/Ykmno/K/VSwj8=)
                          2: KuSoz5RAPH-drSfzyf_nMehrd4c.crl (hash: BKJfKZcw2BFpVRpG8tFkV693SZQII1Q8ww3Zs/zc0BY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KuSoz5RAPH-drSfzyf_nMehrd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:ba:f9:d8:c3:b4:34:29:17:5d:51:d8:bd:81:06:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ae4a8cf94403c7f9dad27f3c9ffe731e86b7787
        Validity
            Not Before: Sep 28 13:03:50 2024 GMT
            Not After : Sep 29 13:03:50 2024 GMT
        Subject: CN=332223ec9aecb8ed267247bb9283217770e1dd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:98:05:53:7f:d9:87:86:c4:d0:ce:ae:d8:
                    cb:8d:39:dd:c2:b7:82:85:5c:a4:60:de:92:36:31:
                    e1:ac:e3:5c:7c:0d:b7:85:a1:29:ff:22:ff:d9:bc:
                    2b:12:6d:b0:77:7d:4b:bf:5c:2a:92:7c:23:c5:09:
                    e4:5a:e7:52:28:29:e2:38:da:1c:f7:40:2c:93:f5:
                    f1:09:b2:14:6b:dd:7d:61:e1:66:43:61:fa:5a:8d:
                    42:15:c7:77:08:6b:7e:c4:ab:98:ea:98:8b:ae:75:
                    5d:30:b8:9e:a6:26:39:3f:48:91:3f:e6:d0:f2:da:
                    24:c1:ff:d6:b3:19:d2:07:f8:6d:2e:29:e4:ed:2d:
                    84:9c:0f:5f:4e:2c:bc:53:68:fd:9d:bd:90:29:0f:
                    9d:96:b1:68:d0:44:ab:62:ee:47:e7:8c:c5:ed:f0:
                    18:ea:e9:8f:b8:12:5e:4a:93:b3:e1:4e:66:6b:98:
                    e0:84:57:de:cf:13:0f:a2:63:25:98:85:50:2c:e7:
                    af:a5:8a:a2:36:2b:f6:bd:76:39:e2:0f:fe:53:de:
                    d7:99:10:37:83:74:b5:ce:27:bf:c9:12:fa:03:d6:
                    62:d0:9f:73:ca:4e:fd:b7:20:9c:6e:c8:0c:58:10:
                    db:d5:9d:bc:b5:45:73:65:5e:93:ae:b2:90:02:49:
                    49:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:22:23:EC:9A:EC:B8:ED:26:72:47:BB:92:83:21:77:70:E1:DD:1F
            X509v3 Authority Key Identifier:
                keyid:2A:E4:A8:CF:94:40:3C:7F:9D:AD:27:F3:C9:FF:E7:31:E8:6B:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuSoz5RAPH-drSfzyf_nMehrd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3ef042-eab6-4462-b03b-7f89b168d9d7/1/KuSoz5RAPH-drSfzyf_nMehrd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:83:d5:10:09:49:84:13:ae:6d:1f:f1:ee:0b:a6:06:78:48:
         7e:be:89:4d:81:76:f2:c5:c9:c2:bc:cf:bb:bd:fb:f9:6b:0c:
         59:5d:14:de:5a:37:8e:66:4d:f0:27:26:31:4e:bd:db:51:20:
         f9:fc:23:8d:80:9c:a5:42:65:32:05:24:72:ef:be:f0:bf:5e:
         4c:67:89:93:ca:72:42:fa:1a:f0:e6:cb:6a:40:78:98:cf:b9:
         76:1d:92:b5:0f:ef:ce:7f:ef:94:e6:40:eb:0d:ec:2d:9b:92:
         89:3f:ac:7f:ce:e9:27:09:cb:1a:35:3c:d9:e4:b4:b1:54:d0:
         b3:a1:1e:7d:4a:9e:38:91:e7:ee:f2:3d:76:73:2a:9e:a3:67:
         7a:28:51:6f:21:42:fa:70:92:15:f6:73:6d:c2:d4:d2:d9:e5:
         1b:56:7a:98:94:84:54:ed:1a:16:f2:95:96:43:50:08:a1:1b:
         a5:7e:05:71:2d:fd:09:df:77:82:d1:25:c1:c9:a8:b9:cb:0f:
         25:45:bb:ba:3f:ae:57:b7:8f:9d:fd:a0:44:f7:86:ce:30:f3:
         e8:6c:08:9b:bf:c2:7f:4f:55:13:20:85:31:7f:c4:67:b7:cc:
         75:28:7c:3c:0a:8c:5c:f2:c3:1c:80:3c:43:ed:16:e9:cb:29:
         3f:b2:62:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:32:03 2024 by rpki-client on console-ams.rpki-client.org