Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
File:                     AWRUygmetS5VVg9dCeh-cxYa5zg.mft (raw, json)
Hash identifier:          9a44XL4QC1/SHIMj4Tgv2SYECjGDtmEjnL2AyUYN3og=
Subject key identifier:   86:FD:81:2B:C3:BA:AB:45:51:3B:6E:12:F1:5C:05:26:CD:B7:82:1C
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Certificate issuer:       /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial:       0192395D27A3E73B4D0BEF4A6323F4B0A698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
Manifest number:          05FA
Signing time:             Sat 28 Sep 2024 16:00:59 +0000
Manifest this update:     Sat 28 Sep 2024 16:00:59 +0000
Manifest next update:     Sun 29 Sep 2024 16:00:59 +0000
Files and hashes:         1: AWRUygmetS5VVg9dCeh-cxYa5zg.crl (hash: v+tOIkE96tN11JG0hU/nrM/GKafRqyNIdEV2COCml3Q=)
                          2: uQ1nIMDgEYo7NviYRm-aoSrk6Mk.roa (hash: HKTG2PXHU1aYTTx43L9CgfDaeUEvXXZNopVMBTE+NKI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:5d:27:a3:e7:3b:4d:0b:ef:4a:63:23:f4:b0:a6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
        Validity
            Not Before: Sep 28 16:00:59 2024 GMT
            Not After : Sep 29 16:00:59 2024 GMT
        Subject: CN=86fd812bc3baab45513b6e12f15c0526cdb7821c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:0e:f7:df:c4:4b:26:60:14:c2:2f:a2:8e:
                    fd:83:69:9f:e2:64:be:b2:b4:f6:4e:67:e4:23:0e:
                    fd:86:1a:66:67:71:0c:41:ec:2f:54:21:ad:3c:9f:
                    d7:d2:4c:73:47:18:04:8e:34:c5:47:1b:c1:39:e4:
                    89:1c:25:e1:f3:f2:fd:75:51:1e:97:a6:f7:45:fd:
                    a2:75:39:13:86:ef:87:89:cf:67:d3:e0:52:4a:68:
                    2f:cd:44:a7:78:43:db:9f:05:d9:97:d8:d1:9e:0c:
                    bc:c7:f7:16:82:a8:63:88:1e:b3:bb:eb:c8:fb:b0:
                    29:34:9d:66:1d:6a:e8:7e:7e:3b:27:9a:05:c3:47:
                    2b:28:ed:46:16:cd:2a:84:3c:24:d7:33:56:d5:67:
                    83:b6:f1:54:76:99:a3:91:e0:d6:7d:65:4e:94:d1:
                    a8:78:7c:dc:37:36:69:3a:07:01:ac:a9:5f:ac:7b:
                    0d:25:37:e1:4b:a3:9e:d1:46:23:dd:a9:01:2c:30:
                    57:e0:c1:13:53:ec:10:cb:43:c5:f5:63:7e:b7:f1:
                    0c:ba:d3:d5:c6:d6:3d:80:b1:6f:14:1b:22:1b:26:
                    13:82:f6:d9:51:04:0d:d5:21:23:26:26:1e:ef:a9:
                    29:79:66:8f:6a:32:11:40:a9:5c:08:9d:d3:1a:54:
                    03:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FD:81:2B:C3:BA:AB:45:51:3B:6E:12:F1:5C:05:26:CD:B7:82:1C
            X509v3 Authority Key Identifier:
                keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f2:37:83:7e:6d:4b:3a:32:89:e1:92:ae:70:45:de:ac:9c:
         a8:77:30:83:5c:b4:ff:36:ce:97:38:6f:9a:e6:72:af:ca:7a:
         4b:af:aa:cd:87:b7:0a:aa:d5:62:38:89:4e:ed:b7:c6:4a:f1:
         f3:78:38:49:1d:06:9c:f0:5c:24:7b:b0:c8:d2:b6:0f:ac:28:
         2e:79:bb:41:21:98:03:12:fa:e5:eb:62:c8:60:19:75:52:21:
         aa:a1:2b:8d:b5:a9:52:69:6b:a4:c7:f5:7d:97:0f:5b:fc:a4:
         b1:fb:81:4a:fa:3f:5a:66:e5:20:78:b8:cc:c4:88:80:1a:63:
         98:78:93:fc:4a:d6:b3:2c:85:b0:9e:be:f8:2b:dc:b8:bd:cf:
         33:5c:09:2f:e3:b8:1f:8a:ff:cb:4e:6d:5d:7d:40:84:e7:71:
         6a:97:5c:0d:8e:dd:02:9d:f7:e6:1a:12:75:dd:c8:85:3e:a3:
         97:47:b1:41:ae:09:5a:be:49:d9:dd:0a:6f:39:6e:2e:6b:e6:
         4e:a0:20:27:a9:0d:60:0a:e9:78:e8:c6:ba:b7:13:84:83:f5:
         f1:11:bf:2e:83:f2:2c:7f:22:b5:b7:ac:4b:45:85:fa:2f:82:
         22:32:da:79:44:dc:35:79:94:87:c3:16:9b:4e:0a:df:a5:3b:
         a5:4b:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:29:58 2024 by rpki-client on console-fra.rpki-client.org