Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File:                     9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier:          QojF2aIGRoWFQyRZbBJqAC7dkM3rUWvMtlTPubOrZTw=
Subject key identifier:   61:0B:78:93:71:54:14:B5:25:83:D6:D4:DD:67:04:70:ED:82:68:89
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer:       /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial:       019237A5DECA01811AF7B5CEDB7E4A0F3A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number:          0989
Signing time:             Sat 28 Sep 2024 08:01:10 +0000
Manifest this update:     Sat 28 Sep 2024 08:01:10 +0000
Manifest next update:     Sun 29 Sep 2024 08:01:10 +0000
Files and hashes:         1: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: BOWsnrsUkJxGK2ApRIsS/etytU4NZyd+4wIpY2/JBNQ=)
                          2: GgGUXgid9IV23BUdM80QD6QPK60.roa (hash: WfFWzn13/mIu03ttr5mntkNty8v4lAW6X/3zFagPLvM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:37:a5:de:ca:01:81:1a:f7:b5:ce:db:7e:4a:0f:3a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
        Validity
            Not Before: Sep 28 08:01:10 2024 GMT
            Not After : Sep 29 08:01:10 2024 GMT
        Subject: CN=610b7893715414b52583d6d4dd670470ed826889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e9:1b:ea:e7:eb:8e:8f:8c:99:f0:a2:1a:d2:
                    4a:ed:27:7d:4c:20:1b:1f:44:93:dc:3f:d4:9f:6f:
                    42:5d:c0:b8:33:c8:b7:a7:80:82:b0:10:06:e1:33:
                    89:7c:13:96:b8:1e:85:9d:e6:4b:ab:30:8b:80:86:
                    20:ff:ed:c9:69:1b:41:a5:d7:b3:af:88:3a:72:7f:
                    d6:2b:d9:81:23:78:19:72:eb:9e:2d:ef:a7:38:bb:
                    a5:12:d8:00:20:69:64:95:00:4a:47:08:af:0d:51:
                    5d:f2:d6:71:20:d8:2e:0e:2b:4c:9f:42:27:42:47:
                    58:41:97:11:c8:22:d9:3c:87:27:1a:06:00:8d:c9:
                    03:cd:d0:e5:92:f4:aa:1c:8b:73:e3:cb:fc:2e:ff:
                    d1:61:94:50:4a:41:13:df:e5:9c:ae:e1:2b:90:fe:
                    72:2d:6b:3c:4b:f4:d7:b2:fc:ee:04:79:5c:26:1b:
                    3d:4f:46:2f:7b:0a:d9:4e:47:59:b7:43:cf:d6:1b:
                    7d:e0:f5:76:5b:b7:44:40:18:05:e4:01:93:d0:4a:
                    7d:c0:8f:74:63:82:a4:71:71:5b:90:93:1c:20:44:
                    ae:47:af:f3:f6:4c:9d:b3:4f:e9:03:e1:69:2a:a6:
                    27:c6:59:ff:8e:3d:8f:6c:0e:8a:97:3e:1e:13:8e:
                    cf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0B:78:93:71:54:14:B5:25:83:D6:D4:DD:67:04:70:ED:82:68:89
            X509v3 Authority Key Identifier:
                keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:8c:c7:7a:56:41:1a:50:c7:d9:2a:2e:19:88:48:b3:51:4f:
         00:82:19:22:fc:33:cc:a2:65:bf:bf:d8:6c:da:80:b7:5b:67:
         0b:85:35:47:0b:d7:49:e6:39:b6:93:fc:67:b5:f5:a6:13:67:
         af:57:d1:55:b6:91:b4:a8:78:e6:4b:25:75:70:40:9c:b1:18:
         78:91:c6:af:f5:f5:03:55:b6:c8:96:63:d3:93:6a:da:77:59:
         a9:54:f0:53:7c:8d:3b:cb:7c:fe:9f:6b:87:32:20:36:76:47:
         1b:74:c5:d7:eb:69:80:33:76:c8:af:5c:ec:79:60:d6:0c:39:
         db:3d:64:51:81:fb:11:0a:4d:f2:15:0b:8e:0c:c4:e1:a5:9e:
         f8:44:d5:1b:7f:67:ec:46:51:4e:42:07:75:2a:6f:73:92:f2:
         6f:6d:37:88:c1:3b:09:e4:7c:37:67:c1:6d:cc:d7:c4:71:d7:
         6a:76:6d:bb:a5:e3:be:60:c7:1f:7b:a1:fa:56:51:71:b3:35:
         7e:07:b6:11:db:86:8b:a5:f8:96:d8:8a:7c:34:20:04:24:1d:
         3f:1c:9d:e7:7a:68:87:f5:22:a2:64:4d:ac:9a:37:9b:f6:5c:
         eb:a3:89:8b:4e:71:3e:9d:7e:a6:7e:a9:fa:a7:25:14:b4:c6:
         07:ef:09:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 09:31:35 2024 by rpki-client on console-fra.rpki-client.org