Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
File:                     s-98dqs-aXHY-HMC3fksxgmISeo.mft (raw, json)
Hash identifier:          JPclt3ilc5I4HfK3NqP5JrofFupR8h9v4JjhoYxzO8Q=
Subject key identifier:   1F:11:C4:0D:47:BB:56:68:09:8A:0C:13:14:23:C9:99:04:DE:BA:08
Authority key identifier: B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA
Certificate issuer:       /CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
Certificate serial:       019238B9B69873DE9D28F50C7BC6EA0B1185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
Manifest number:          12DE
Signing time:             Sat 28 Sep 2024 13:02:27 +0000
Manifest this update:     Sat 28 Sep 2024 13:02:27 +0000
Manifest next update:     Sun 29 Sep 2024 13:02:27 +0000
Files and hashes:         1: 1-MZVlE8Go9VBXFeDGDZneyVG39I.roa (hash: xNJ7FMGBMO95SgGurpUmY3Chk8Cm/ViHQ7s9aFgLg2Y=)
                          2: s-98dqs-aXHY-HMC3fksxgmISeo.crl (hash: leaV6IFu990yK5li7vNWKuvYoWUfnEQzqT3e29DfFUc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:38:b9:b6:98:73:de:9d:28:f5:0c:7b:c6:ea:0b:11:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3ef7c76ab3e6971d8f87302ddf92cc6098849ea
        Validity
            Not Before: Sep 28 13:02:27 2024 GMT
            Not After : Sep 29 13:02:27 2024 GMT
        Subject: CN=1f11c40d47bb5668098a0c131423c99904deba08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9a:2d:70:b0:cc:d8:02:b0:4a:71:51:94:39:
                    8d:e8:58:1b:0c:e1:cc:f8:41:d9:e5:94:87:fb:57:
                    76:f3:17:8f:6b:fd:6c:9b:46:03:ad:24:d8:2c:c9:
                    5b:08:18:f6:4e:5b:77:07:7d:5b:e8:ca:57:0e:0a:
                    2a:cf:0d:7b:a7:d4:e9:14:aa:d8:db:4e:9f:d1:31:
                    63:80:a8:78:ed:c0:8d:e7:de:31:a2:c1:5c:66:55:
                    d6:7e:cc:6b:23:2a:56:5f:25:6a:49:fc:4c:db:e8:
                    95:7e:4e:b7:36:88:ef:33:22:b9:b2:b3:0a:94:af:
                    a1:b7:fa:2c:29:6b:b2:13:0e:02:7c:45:f8:bb:cc:
                    29:32:ca:52:3e:1f:8b:f2:54:a8:5a:cf:30:02:74:
                    77:07:2b:87:48:1b:a4:fe:cf:66:99:a8:a5:f1:18:
                    8d:4f:c2:1d:d4:c1:e2:4e:33:95:3b:e7:30:e2:43:
                    86:d1:e4:8a:d2:c8:35:4a:d3:8d:72:3d:2f:a3:be:
                    e8:6e:26:9e:f2:eb:bf:a4:4b:5b:01:f5:b8:d1:5d:
                    65:1c:c4:91:d2:a7:61:bf:8e:84:27:06:4f:49:4a:
                    27:5c:d9:a6:31:ef:0d:6c:43:98:87:35:a6:62:fa:
                    dd:87:bc:7a:e7:25:ed:9d:82:0c:11:b5:ce:5e:35:
                    64:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:11:C4:0D:47:BB:56:68:09:8A:0C:13:14:23:C9:99:04:DE:BA:08
            X509v3 Authority Key Identifier:
                keyid:B3:EF:7C:76:AB:3E:69:71:D8:F8:73:02:DD:F9:2C:C6:09:88:49:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-98dqs-aXHY-HMC3fksxgmISeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/74980e-74f9-4b5e-9cf2-69711fe83d23/1/s-98dqs-aXHY-HMC3fksxgmISeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a6:71:ad:73:a2:22:90:e1:be:87:c8:84:7f:b1:78:eb:72:
         a8:76:b3:96:fe:d0:b4:75:d9:b5:e7:e5:13:ee:f1:ce:cd:23:
         fe:a9:61:33:65:19:f7:8b:1d:2f:25:ef:08:78:10:9c:f1:fe:
         fa:59:cc:49:4c:17:26:a1:a9:03:e6:ce:db:7b:5f:9c:c2:86:
         7d:c2:09:1f:85:28:2f:5a:ce:f2:0f:58:51:2e:d0:04:15:c8:
         51:ca:bb:98:fd:46:ed:d4:7a:25:ee:d9:da:09:d9:cb:fe:f0:
         84:5a:cf:5c:69:7c:c5:33:d9:29:9f:3f:99:9d:4e:87:aa:a8:
         38:76:c9:32:32:59:72:7b:e7:b5:80:f7:a0:cd:86:df:67:fd:
         3b:bb:52:f7:86:76:a1:21:f7:f3:0b:06:a2:c0:f4:07:85:01:
         63:ce:d7:1c:da:87:0b:a8:c3:95:b3:19:7b:f1:0b:5c:b9:2b:
         4e:b8:da:d7:a2:04:b6:55:41:33:54:3f:1d:d0:a8:09:dd:59:
         68:7e:5a:40:26:79:d3:4d:ed:ae:b3:26:4b:f9:31:e6:f8:2c:
         ad:42:3b:c1:9d:e8:df:22:74:5c:9b:41:42:72:98:1e:6a:41:
         34:7e:62:63:4c:ad:11:bc:58:83:b6:ad:1b:3f:db:14:dd:8e:
         73:5b:ca:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:35:03 2024 by rpki-client on console-ams.rpki-client.org