Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File:                     9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier:          EaBFfZ48gCEzcfxQDRz9UyDRJB+tG3P0f7mz3CK7k0Y=
Subject key identifier:   D0:A7:1B:3F:2D:E7:4D:1C:CE:91:44:02:24:61:A3:0B:9E:1D:99:72
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer:       /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial:       0191FA47847CAA2E52269F1EFD89BBA7FEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number:          07DB
Signing time:             Mon 16 Sep 2024 10:01:16 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:16 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:16 +0000
Files and hashes:         1: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: jow/FLRcddZhxs0HWAXCaL31VM6yTtwILWL7wjj9eJw=)
                          2: YNPic3s2pVDlFBWnXblgxpBU61E.roa (hash: W+bd+sxPPgs8B6dwSfgRkORd4vKs+JQbeygacrLE+ms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:84:7c:aa:2e:52:26:9f:1e:fd:89:bb:a7:fe:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
        Validity
            Not Before: Sep 16 10:01:16 2024 GMT
            Not After : Sep 17 10:01:16 2024 GMT
        Subject: CN=d0a71b3f2de74d1cce9144022461a30b9e1d9972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:a7:6a:08:48:86:59:46:b3:9a:5a:16:b4:
                    46:04:0e:c9:09:28:4e:fe:03:47:df:3d:f8:0c:d5:
                    2d:62:b5:9e:ba:97:7d:ff:ea:77:9d:b7:46:21:1f:
                    c9:d0:16:30:77:a7:e4:fc:31:66:b0:bc:73:84:eb:
                    e1:9a:1d:4c:28:b0:2f:11:58:dc:e6:ae:7a:f5:5a:
                    5f:6c:aa:fb:53:7d:2b:e7:43:5a:c0:60:a5:92:8d:
                    12:ff:be:35:8a:c6:01:da:c0:0c:c8:d7:c3:46:52:
                    05:4f:56:15:01:c4:05:12:79:a9:c1:d4:a4:c1:8e:
                    69:4c:91:90:f5:ce:d4:d0:1e:b3:15:ee:3b:14:b2:
                    83:a4:c0:af:48:2b:56:b5:a8:19:bb:f3:51:eb:c8:
                    f7:f3:f6:1e:cf:fb:1b:93:33:03:52:c8:fa:d3:04:
                    09:0f:b4:36:13:6a:f6:05:7b:5e:06:41:ad:f2:b8:
                    ca:c6:83:29:c8:50:a3:b4:56:5c:5d:92:96:e3:c1:
                    8a:e2:8f:fc:f8:ae:15:66:3d:97:0e:0a:1c:c2:62:
                    d0:ae:4e:b2:a7:01:2a:de:52:2a:b9:2b:fe:27:c0:
                    61:2f:64:68:1b:4e:0e:f3:aa:2e:c4:95:a5:26:72:
                    a4:db:d1:e0:f4:2a:0a:79:66:96:ad:c4:6e:99:58:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A7:1B:3F:2D:E7:4D:1C:CE:91:44:02:24:61:A3:0B:9E:1D:99:72
            X509v3 Authority Key Identifier:
                keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c7:26:f8:32:00:b8:a6:1a:c3:d5:91:72:ec:58:f1:11:3b:
         cd:aa:ea:45:79:3b:c2:bd:56:bf:8f:d6:40:a7:f0:51:2f:cc:
         28:cf:ff:db:14:55:a1:18:a4:16:35:5b:5a:f8:d4:a7:54:06:
         fe:a5:29:99:71:0b:c1:fb:32:f2:16:95:5e:90:36:f3:5f:a5:
         73:36:82:33:b7:21:eb:78:d1:29:a8:4e:f6:da:01:43:03:9c:
         1f:3f:5c:f5:b8:89:99:d5:26:c6:82:72:9a:a1:38:3e:f9:4a:
         51:a3:91:2d:68:e7:44:94:bf:8b:c5:88:68:70:28:bc:cc:2b:
         54:09:21:6f:2a:f3:b3:f3:ab:5e:25:2e:d7:2a:89:ee:0c:4c:
         49:71:d7:cb:1b:e0:24:83:e7:6a:63:3d:9f:a0:37:45:e7:9d:
         04:2a:e9:16:2c:41:ee:c4:0d:3c:6c:2b:c3:62:24:77:ff:b6:
         17:81:68:e7:d4:92:1d:55:fc:b8:80:8b:c5:fe:2f:82:58:b9:
         1b:07:ad:a9:c0:91:23:ab:80:01:4b:24:9a:78:1c:8c:d9:af:
         43:14:0d:0b:fe:a1:fa:95:1c:ef:30:1f:62:b7:62:e4:0d:7f:
         1d:a9:f0:16:b4:6c:00:41:37:0d:77:5b:cb:a4:3e:b2:18:3d:
         96:c3:ef:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:28:09 2024 by rpki-client on console-fra.rpki-client.org