Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          gWS5PXs8lBEs8hFuypmjfvQuijSJRA0o4k36ep6VOr0=
Subject key identifier:   C4:7E:F5:AC:C6:8C:A1:50:35:9D:66:AD:CE:3E:50:3C:05:5B:BA:08
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       019258E87800B3DCE1CDA2B5FEB0A1C96C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          0FB7
Signing time:             Fri 04 Oct 2024 19:01:22 +0000
Manifest this update:     Fri 04 Oct 2024 19:01:22 +0000
Manifest next update:     Sat 05 Oct 2024 19:01:22 +0000
Files and hashes:         1: 1-Ro7RpJqNgh_f_N-UzvVz1Ai6gA.roa (hash: Tv0NNUmuL2S4lAzuzjbv0Mg6N7n9MAat5ioJp33bJ+g=)
                          2: 2CNDKBjAc6yyL5PIhDfIk2JgogY.roa (hash: x+ySdCKRvKo+Vs6kmlcqAeavSr4ZhsNBOBJsTKX507E=)
                          3: XblaV3BRLJ5D7Cal5m0GpfbVEb4.roa (hash: TV7qKKs/36hlzb3ODdEARD+SsvLNUQdnJSw3r+YMmM4=)
                          4: dgjz6xetoJ2HDng9m0qxp0Hkhgo.roa (hash: WJjxzMMWguqsOyUM0crOoioMtp83MQLfsaJMjrmFCEE=)
                          5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: uNSAVjAcm7yl2EIwDsbf9Tu1JR9LH+NEbcBLTC/XlC4=)
                          6: zVSpN7JeTDkMnQMjwO4I0mbU5ro.roa (hash: 4YdWFVjpdqkOrztXS+/fWUE09P5FSG5n7J/JOQ+j1vU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Oct 2024 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:58:e8:78:00:b3:dc:e1:cd:a2:b5:fe:b0:a1:c9:6c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Oct  4 19:01:22 2024 GMT
            Not After : Oct  5 19:01:22 2024 GMT
        Subject: CN=c47ef5acc68ca150359d66adce3e503c055bba08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:fe:4a:d5:e5:13:d8:be:ec:b1:21:9b:6b:
                    62:93:78:ef:94:a3:51:3d:e8:e3:13:bb:5a:3d:3a:
                    2f:3f:7b:d9:96:94:01:ad:dd:a3:61:ee:02:96:86:
                    25:1d:17:32:76:34:09:d3:05:44:c5:1c:21:f7:39:
                    9b:e6:b1:f5:16:bd:df:be:a0:9e:fb:cd:30:dd:cb:
                    47:15:66:3f:5f:3c:81:4d:bf:e0:41:7d:13:de:a7:
                    fd:12:cc:1a:3c:ee:92:da:82:f9:21:d0:42:74:54:
                    5c:5c:3f:99:ce:36:d4:ad:50:79:1f:8b:fa:18:58:
                    0b:f9:1c:db:76:a5:a2:a5:d2:14:e0:98:67:ab:08:
                    2c:29:a5:22:a6:9e:da:d5:e1:df:6b:4b:22:85:36:
                    13:0b:af:88:bd:75:68:26:e3:18:fd:66:8e:a6:45:
                    d1:f5:bb:52:16:11:1b:fd:e3:34:df:9d:ed:21:5a:
                    7b:ac:65:71:e3:0c:a3:6c:fe:d0:76:25:84:a6:df:
                    26:33:ff:8f:2f:77:85:1c:1b:1d:25:cf:09:9c:81:
                    10:f6:64:f3:84:a3:bb:78:2e:68:62:1d:b1:4f:e8:
                    16:a1:a3:22:b0:ce:89:cc:f5:3d:9b:b5:a6:7a:02:
                    15:dd:29:a2:14:7e:71:73:1e:97:eb:b0:59:1f:e3:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7E:F5:AC:C6:8C:A1:50:35:9D:66:AD:CE:3E:50:3C:05:5B:BA:08
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:09:73:dd:4c:6f:6c:de:26:5a:3d:c2:d2:95:9d:ad:7a:46:
         db:1c:e2:4a:63:8c:ce:f8:a4:41:53:9e:1e:f0:34:38:64:59:
         4f:90:32:5a:0f:ef:80:32:47:ca:e8:37:fc:07:87:3b:23:cb:
         a6:00:36:62:72:5e:6a:2c:ac:72:8a:84:55:01:62:cf:84:96:
         88:8a:74:f4:4e:fd:fe:ce:85:77:46:54:d0:91:49:f6:85:4e:
         ab:61:d3:e3:77:03:be:33:12:57:69:15:73:aa:ac:84:eb:3a:
         f8:bd:9f:49:26:44:84:b4:bd:9b:1d:74:fb:fb:a3:18:05:43:
         6b:7a:74:b0:fa:12:76:41:c4:c2:a2:3e:5a:2f:4d:25:96:7c:
         6e:78:a2:36:ae:93:e1:40:b3:ab:db:07:a6:7e:77:79:e1:59:
         ec:3b:c6:01:60:30:33:a9:6a:d9:6a:73:01:d0:5c:a6:43:26:
         f0:17:af:4f:94:bb:5e:85:88:f1:1d:92:ea:bd:cb:f6:89:69:
         5a:5a:8d:51:b8:c1:78:27:da:d9:93:04:25:9c:d5:58:08:61:
         1d:7c:1f:f5:cb:99:8b:94:85:28:68:ea:d0:62:d7:7c:3c:d3:
         43:ab:f8:f7:e7:ec:dc:a3:dc:3b:a6:7b:ad:93:46:62:4a:c3:
         9f:4b:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 00:15:34 2024 by rpki-client on console-ams.rpki-client.org