Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File:                     mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier:          hpndqUDR9UtbPhFgr8/074aPtcqEhwh36Tdmep8VZNA=
Subject key identifier:   C9:E4:22:5A:A8:92:B6:3F:61:43:67:50:02:63:D9:D3:2C:B4:1D:5B
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer:       /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial:       019367EC097AC61BEF8BBBA927CA548D74A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number:          0AFB
Signing time:             Tue 26 Nov 2024 10:02:22 +0000
Manifest this update:     Tue 26 Nov 2024 10:02:22 +0000
Manifest next update:     Wed 27 Nov 2024 10:02:22 +0000
Files and hashes:         1: TjtIVY_2f0OxDdpEU-uRxzeGj_g.roa (hash: MG+iVq7CzkKP4h4sV32vZCfz7WiVMzCyXByIkROiN2Q=)
                          2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: Jx1poimVn4m1ZSdPeO7YsaEdZgWiaIvXfLbzcIbuUpw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ec:09:7a:c6:1b:ef:8b:bb:a9:27:ca:54:8d:74:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
        Validity
            Not Before: Nov 26 10:02:22 2024 GMT
            Not After : Nov 27 10:02:22 2024 GMT
        Subject: CN=c9e4225aa892b63f614367500263d9d32cb41d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:ca:c1:aa:b9:0f:45:18:93:b7:3a:87:52:
                    08:13:a0:80:ce:46:38:a4:62:66:54:59:d3:a2:96:
                    be:54:82:79:b5:d2:a7:60:68:3e:5b:ec:bf:c3:82:
                    11:2f:a2:84:79:1d:77:ab:e7:f6:09:c9:3a:89:e7:
                    8b:41:a5:7e:2d:57:f4:a3:41:b6:9e:06:b8:c5:50:
                    f9:5e:11:54:26:f5:50:e1:b0:bf:eb:d5:53:89:c2:
                    8e:d1:53:a3:7e:99:e2:db:1f:5e:bd:b2:fd:08:40:
                    13:3f:24:76:eb:60:1d:bf:53:77:b9:e7:4e:f6:7f:
                    da:c1:7f:4d:8e:8f:5f:db:b6:e8:73:6b:b9:2e:db:
                    7a:d9:7f:ef:6b:09:ba:2a:31:10:d6:3a:09:28:3d:
                    c8:c1:82:b7:aa:d4:ae:60:aa:65:82:c8:07:b4:b3:
                    45:6b:0a:72:0f:02:42:f3:61:b9:8b:f1:d0:59:7b:
                    4f:d0:72:d2:72:55:f8:06:f3:a2:0b:56:82:99:ab:
                    41:33:79:eb:1c:76:a3:9b:64:24:ca:2b:d0:7d:06:
                    a5:d5:83:37:63:b0:1b:3c:35:42:48:95:cb:8d:6e:
                    65:37:8f:9a:3d:1c:20:08:df:a7:6e:46:5f:58:c3:
                    80:01:b6:88:7d:17:54:9f:a4:ae:38:6f:38:0e:94:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E4:22:5A:A8:92:B6:3F:61:43:67:50:02:63:D9:D3:2C:B4:1D:5B
            X509v3 Authority Key Identifier:
                keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:5b:72:7b:2e:26:95:6e:6f:ab:2c:73:01:be:fb:44:20:34:
         77:37:70:0c:6e:42:09:a8:1f:6c:59:ae:e7:78:ea:3f:bd:91:
         b0:7a:28:7e:38:d9:0a:29:a4:f1:8f:3d:42:fe:43:fa:68:84:
         76:d0:bf:8a:d2:22:6d:14:aa:af:c9:e6:ee:8e:eb:a9:53:e5:
         97:8c:90:9b:7e:be:f9:74:f0:58:2a:61:db:20:42:13:98:56:
         2a:c9:8c:30:a3:4a:38:fe:a1:df:ee:5a:7d:e3:7f:c3:cc:3d:
         a6:d5:96:06:94:35:10:6b:00:22:6d:59:36:7e:11:48:fb:42:
         06:10:55:0c:b7:b7:90:86:2d:c9:72:3d:0f:12:c9:8a:62:eb:
         f2:7e:89:75:98:b6:ac:c9:eb:b7:62:fb:51:ae:e8:6b:70:c8:
         8f:3d:53:4f:32:33:76:29:91:91:5d:f8:f0:84:aa:5b:cb:c0:
         27:18:11:f2:a4:14:f2:db:88:e8:9d:dc:b2:fc:15:31:23:ae:
         13:59:95:24:93:90:17:f2:41:dd:37:17:42:7a:70:f0:6e:cf:
         8b:37:52:39:2f:66:f9:47:87:a9:3b:c7:14:e2:44:ef:8b:4e:
         f6:cc:f7:ef:65:4e:89:6f:d9:87:cd:d5:95:dc:f5:fa:e0:c2:
         2a:56:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:52:53 2024 by rpki-client on console-ams.rpki-client.org