Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
File:                     RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft (raw, json)
Hash identifier:          KKi4Vn74dHi5bkf7VKlP3n+jB/h680LkGuZRF9QyVLY=
Subject key identifier:   0B:FA:60:83:36:33:2F:CB:BC:11:70:D8:10:39:84:B5:07:F5:F6:AD
Authority key identifier: 44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5
Certificate issuer:       /CN=44b1467c20481d11b67ff7bac6498959f718e1f5
Certificate serial:       0191FA7E3DA46C8E3EBF495EA5402FE5611E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
Manifest number:          0118
Signing time:             Mon 16 Sep 2024 11:01:02 +0000
Manifest this update:     Mon 16 Sep 2024 11:01:02 +0000
Manifest next update:     Tue 17 Sep 2024 11:01:02 +0000
Files and hashes:         1: CZ-Vszt03uJCktqaclNv8Beh6so.roa (hash: tvVrqDYNwrBwjnQ5IaKMo4kF7P29ItyvpMoYlOZH5vw=)
                          2: RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl (hash: kXaCZYEbPIMCxtzQzuE9uTkrsb7T0N2ii3vJrn4nMUM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:3d:a4:6c:8e:3e:bf:49:5e:a5:40:2f:e5:61:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b1467c20481d11b67ff7bac6498959f718e1f5
        Validity
            Not Before: Sep 16 11:01:02 2024 GMT
            Not After : Sep 17 11:01:02 2024 GMT
        Subject: CN=0bfa608336332fcbbc1170d8103984b507f5f6ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a6:25:0f:a3:45:6e:64:a0:8f:79:be:3d:43:
                    17:1b:a0:35:e2:e4:75:20:eb:bb:0b:73:f0:91:0e:
                    46:4e:97:d1:4e:af:5a:3f:2c:6c:37:a8:2d:53:9b:
                    cc:04:08:68:0b:f8:05:ce:61:11:83:36:49:88:d8:
                    f8:74:8a:c2:f1:de:3e:ce:34:26:8f:02:95:24:6f:
                    d6:a0:a7:e6:3c:cf:ed:00:41:7c:ed:b9:84:b3:d0:
                    f1:1c:39:8e:8d:03:46:59:11:93:2d:dd:62:3c:2e:
                    1d:fe:26:b3:23:22:88:3d:3d:56:3b:fa:2b:2c:5a:
                    b0:7d:27:bd:b7:2a:4c:fe:5c:c7:51:ea:99:67:79:
                    13:02:2d:29:40:f7:7f:06:bc:43:9a:06:ec:b6:a5:
                    3c:94:44:57:fb:9f:00:95:98:91:1e:07:4c:95:62:
                    3d:70:dc:52:4d:c7:92:65:ee:41:47:a7:65:78:5a:
                    76:9b:31:85:64:60:e7:9c:6c:10:23:7a:87:04:65:
                    e5:fe:c7:1b:ab:58:2a:43:33:1b:0e:5e:af:8a:fc:
                    53:f3:5b:1c:8d:c5:7e:da:a0:06:0f:bc:a5:52:b5:
                    4e:fc:1e:35:1d:b9:f0:9f:9a:39:81:ad:1d:c3:76:
                    39:9d:e2:ae:c1:fd:3a:c7:44:30:e1:e1:28:cf:76:
                    27:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FA:60:83:36:33:2F:CB:BC:11:70:D8:10:39:84:B5:07:F5:F6:AD
            X509v3 Authority Key Identifier:
                keyid:44:B1:46:7C:20:48:1D:11:B6:7F:F7:BA:C6:49:89:59:F7:18:E1:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLFGfCBIHRG2f_e6xkmJWfcY4fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b7f5a-e860-4420-abee-19f874a181c5/1/RLFGfCBIHRG2f_e6xkmJWfcY4fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f0:ec:3a:e0:a6:06:db:58:9f:79:f8:98:11:53:e5:44:ca:
         11:42:d9:e0:39:b6:6b:7d:29:85:ef:ff:c4:bf:65:23:3d:58:
         22:23:bd:57:f2:94:35:d1:c8:64:3d:0d:84:12:b8:ba:45:b6:
         26:fb:c7:15:7b:09:35:f1:3c:f1:b4:e6:9c:a4:e8:5d:47:58:
         13:ee:d8:bc:27:8d:8a:61:e6:a8:7c:0d:b6:ff:ca:0f:dc:7a:
         d3:b8:c8:3c:aa:a9:f8:d0:9c:e9:b5:4c:45:78:41:b6:08:32:
         cf:3b:6b:cd:a8:bf:a3:ae:52:be:aa:8a:78:7d:07:6a:fc:89:
         b5:4b:a7:2a:5e:d1:53:94:de:b8:20:d1:07:6c:01:08:07:60:
         7b:d0:96:e0:ad:d5:7b:f2:1e:f4:d4:6e:b6:51:40:42:c3:39:
         45:cb:25:44:66:8a:48:e0:7e:43:fc:ca:09:ec:ce:83:68:ea:
         58:1c:03:9d:12:e6:67:4b:3b:c2:43:ea:39:42:09:1e:40:34:
         46:08:14:cc:13:b7:80:d5:c6:8d:55:05:37:6c:63:56:16:86:
         d7:e0:b2:c5:3b:f8:9a:a5:6c:ff:9d:81:f2:bf:94:f0:78:aa:
         5f:cb:7f:1b:8c:b1:e9:a3:70:d8:57:d5:05:7a:9b:24:33:a0:
         8a:f6:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:28:20 2024 by rpki-client on console-fra.rpki-client.org