Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File:                     FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier:          TPo81lF6gSm2Jxk+EIIye/F5hTC1Fb9zjuV0PWCFb+c=
Subject key identifier:   07:83:25:78:1C:3C:33:6C:54:D3:67:81:42:7D:FD:D5:42:FD:8C:B9
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer:       /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial:       0191FAEC915811E6117FA3C125B45A8CA2F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number:          05C7
Signing time:             Mon 16 Sep 2024 13:01:33 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:33 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:33 +0000
Files and hashes:         1: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: TTOPxXpTVngzLb5srZwV7nG4R6ma2cPe/QY8Bce3KTU=)
                          2: Uz4nilC81RG4L8hCKGU1v_EVnoo.roa (hash: zbTIgGSaGgxDRaMWHjYeGNP569K8cSjC2uV+fBxhf/k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:91:58:11:e6:11:7f:a3:c1:25:b4:5a:8c:a2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
        Validity
            Not Before: Sep 16 13:01:33 2024 GMT
            Not After : Sep 17 13:01:33 2024 GMT
        Subject: CN=078325781c3c336c54d36781427dfdd542fd8cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:06:c2:6d:0f:64:dd:c6:27:c2:9e:53:95:f8:
                    ce:6e:a7:d9:32:a6:53:0b:44:ed:85:6c:67:f8:d9:
                    0b:8d:fd:22:45:30:6f:5b:c4:fe:d8:f1:a0:01:8c:
                    b9:12:8c:e2:16:e5:12:45:93:5a:ec:b7:ac:42:dc:
                    5f:f5:13:f4:4b:c9:59:cb:83:06:36:86:ef:90:9b:
                    70:68:22:6d:b8:4a:23:6b:5a:b5:6c:2f:7f:71:9e:
                    5c:b1:26:2b:18:f1:8e:20:d6:43:d4:2c:ba:50:21:
                    4a:fe:bc:ad:4e:8a:cb:5a:99:de:d5:b1:3c:6b:0f:
                    46:05:19:88:72:c5:f8:30:55:71:33:f2:5b:ab:ac:
                    0c:ee:c5:b8:03:7e:70:d0:92:65:6e:72:7c:32:b9:
                    d9:3d:cf:7e:b8:7b:d1:68:ff:96:b3:be:eb:f4:43:
                    fc:e0:6d:c7:c3:10:0a:d1:5a:55:08:2e:b3:6f:ea:
                    01:90:2d:5b:df:cd:82:02:8d:6f:f2:37:05:66:b7:
                    a5:f2:ce:f7:1c:aa:c4:a0:dc:ba:5e:e9:5b:4c:bd:
                    d1:61:75:0f:f7:cc:a5:e4:d0:8e:e9:62:3e:ec:f6:
                    76:28:63:fe:e6:70:6e:2f:c3:4c:95:30:f0:65:18:
                    b3:a2:d5:4d:42:82:1a:af:b5:f6:d0:b8:da:91:34:
                    cb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:83:25:78:1C:3C:33:6C:54:D3:67:81:42:7D:FD:D5:42:FD:8C:B9
            X509v3 Authority Key Identifier:
                keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:24:ef:8a:66:a0:bf:eb:94:d0:16:12:d4:a9:9a:81:ed:6a:
         0c:ff:5f:78:77:c0:70:25:86:b1:db:cd:7e:07:b5:c1:bb:48:
         c5:69:e7:0e:26:4c:c0:94:29:3a:13:5f:dd:8b:3b:57:09:d5:
         78:59:34:60:65:e8:c8:9d:e4:e7:73:e4:af:67:78:52:dd:d5:
         68:85:37:dd:29:c7:f4:b4:e2:7e:3a:fe:47:d4:5a:ec:6e:60:
         2d:a4:af:cc:25:1b:9b:82:ec:19:43:43:a2:68:b8:23:8f:99:
         2e:3c:a9:06:81:f3:05:5e:d4:4e:dd:ac:08:74:37:1a:8d:97:
         96:0d:62:50:1a:f6:ec:28:6d:cb:72:c1:c2:3d:dd:52:5d:c6:
         e9:72:72:72:54:33:08:40:f7:c0:6c:22:21:98:bf:18:e0:ee:
         61:47:07:aa:99:dd:b8:1d:b8:56:9a:de:11:39:df:5c:d7:31:
         a2:63:94:07:ff:ba:de:dd:9b:7e:19:74:11:0d:b0:19:2e:71:
         5b:d6:dd:f5:ef:bc:25:76:17:62:a1:5e:f3:41:ee:8c:5c:4e:
         03:08:b0:18:c4:a9:a8:e4:c6:a0:f7:58:dc:0c:70:e9:96:85:
         51:ea:a1:99:79:6d:dc:f2:f6:1d:14:a7:21:a8:83:d8:ca:ba:
         79:17:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:30:30 2024 by rpki-client on console-fra.rpki-client.org