Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File:                     glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier:          y3myw6r9i4aAEXWuZ13MCsYvtDkOsueX5kQTvp6IZp8=
Subject key identifier:   85:8F:AC:88:1E:E1:FE:95:EA:91:0F:E0:63:AA:AB:68:BC:D1:29:A4
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer:       /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial:       0191FA107E47CF1D5A22F6F76B2C6E0AD89D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number:          0182
Signing time:             Mon 16 Sep 2024 09:01:10 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:10 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:10 +0000
Files and hashes:         1: EOL9yLRfvUjRcTNIWa63z5nJR1s.roa (hash: 6yVa6KiIXweZp0BoV/GdwUlL1geB3F0jqHYP2WiAg+w=)
                          2: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: 9ufq1qf6cxmV0MT4swz2QmoGCPEc/v6rqqdlPFrNoP4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:7e:47:cf:1d:5a:22:f6:f7:6b:2c:6e:0a:d8:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
        Validity
            Not Before: Sep 16 09:01:10 2024 GMT
            Not After : Sep 17 09:01:10 2024 GMT
        Subject: CN=858fac881ee1fe95ea910fe063aaab68bcd129a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:6e:ac:54:99:aa:a0:2c:e8:22:ef:f5:1e:
                    77:74:a2:44:64:ce:09:23:5c:40:84:65:15:79:60:
                    03:dd:b4:53:58:13:2b:c7:d6:b9:8d:5b:47:23:4d:
                    33:f1:8a:6c:6e:7e:f6:8c:0e:3a:0f:fd:6a:8a:92:
                    f7:2d:bd:5d:49:a8:da:24:26:92:bb:69:f6:32:f3:
                    02:ce:ff:32:18:76:b1:2b:25:d7:8d:11:87:7d:84:
                    3f:a5:42:7d:e1:8a:4c:35:6b:34:db:92:59:e4:23:
                    1c:c4:40:4f:6a:cf:3e:e2:8a:e6:d0:76:4f:46:48:
                    00:09:52:f3:37:9c:1a:48:8f:f6:b0:f7:45:c8:43:
                    6c:af:e4:51:59:9e:d7:1c:0f:67:c9:e9:ab:e4:9d:
                    db:24:a8:76:c4:f9:3e:a9:b2:ee:06:f0:f4:02:67:
                    96:7e:be:f7:20:d5:b1:14:be:52:e6:a0:1a:82:32:
                    f6:b0:05:e6:1e:8e:ed:d1:64:f0:9b:58:e7:8f:4a:
                    fc:8d:7b:b6:09:01:25:80:1e:62:1f:45:d7:da:5a:
                    97:a4:37:48:0a:c8:a0:95:90:bc:34:a8:6d:17:ee:
                    12:4d:3b:c7:f6:9b:b0:f3:1d:db:14:93:41:fb:a1:
                    35:ca:f7:87:70:88:69:ab:60:f9:86:a8:e9:9a:d8:
                    22:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8F:AC:88:1E:E1:FE:95:EA:91:0F:E0:63:AA:AB:68:BC:D1:29:A4
            X509v3 Authority Key Identifier:
                keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cc:ab:0a:00:ff:f2:bb:ef:53:f4:e4:5f:08:4b:94:35:67:
         43:89:b8:05:70:dc:7a:68:fb:d7:5d:f7:1f:c8:fd:60:6c:cf:
         4f:19:41:97:e3:cb:7e:f7:2b:32:55:02:c6:5e:0d:01:53:78:
         8b:2f:9d:4d:ae:04:44:96:31:da:fc:b5:2e:3f:22:a5:47:62:
         8e:f6:8c:3f:4e:8a:a8:ee:6d:b6:6d:cf:f7:50:1f:93:f3:1c:
         37:3c:51:68:b6:87:17:55:68:cf:a2:b4:6f:ca:fa:e9:43:d2:
         f2:79:dc:c7:32:b4:53:5d:27:ab:7a:43:ea:92:b7:d6:bc:19:
         34:0a:ae:5e:c5:8c:38:11:0e:8a:00:c0:65:b1:03:41:77:6b:
         cd:3f:f1:66:76:32:32:48:93:db:04:ea:0e:6c:30:e6:99:43:
         d7:00:03:d3:c7:fd:3d:55:6c:f5:3c:4b:03:e1:93:de:20:d1:
         36:0b:2d:17:0b:a4:af:c7:2d:44:2e:08:23:d8:d5:57:6d:86:
         19:04:51:96:67:30:d8:2f:6d:e8:02:b0:9a:9e:06:d5:cb:ff:
         b2:89:1a:4d:cb:a7:e6:9b:90:7a:62:2b:f5:61:8a:46:24:e2:
         b8:a2:c1:ae:ad:b8:52:df:1c:72:a0:2b:61:a1:e7:a0:9f:01:
         23:46:da:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:31:21 2024 by rpki-client on console-ams.rpki-client.org