Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
File:                     yQ7dEObZBiIVv9ZORbO_imuZY3k.mft (raw, json)
Hash identifier:          ul543HMkOd5plkvkbuWMNzWTZjPrrNWARmmuDcIIX7c=
Subject key identifier:   8F:6C:F4:BB:E8:5F:FF:1B:4D:D7:7C:81:78:D7:F2:D8:52:1F:1C:31
Authority key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Certificate issuer:       /CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Certificate serial:       0191FA103AE56A915688733EDBF0B4801805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
Manifest number:          010F
Signing time:             Mon 16 Sep 2024 09:00:53 +0000
Manifest this update:     Mon 16 Sep 2024 09:00:53 +0000
Manifest next update:     Tue 17 Sep 2024 09:00:53 +0000
Files and hashes:         1: _4feJt_t3NEHL0Z99_1tPOCeSww.roa (hash: ZNrLa6LiQoSGKGiCcV4rT0+Jpw5ep09iBum4Gs6YUt4=)
                          2: yQ7dEObZBiIVv9ZORbO_imuZY3k.crl (hash: kEfJhoCIoZTOGP2zX/b2TO8y2e4BKfUABErOTygs3Kc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:3a:e5:6a:91:56:88:73:3e:db:f0:b4:80:18:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
        Validity
            Not Before: Sep 16 09:00:53 2024 GMT
            Not After : Sep 17 09:00:53 2024 GMT
        Subject: CN=8f6cf4bbe85fff1b4dd77c8178d7f2d8521f1c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ff:9b:a3:76:94:4d:8d:11:94:c6:52:7e:51:
                    07:6d:1d:89:d6:00:59:ab:26:76:b0:44:4b:81:1e:
                    e6:5b:2a:a2:b4:ce:7c:d5:0b:1f:4b:91:9d:d7:57:
                    52:92:79:db:c4:ba:87:64:f0:4f:2a:15:3d:67:c2:
                    dd:c6:24:b9:da:e3:99:5e:c7:41:40:d3:9f:b1:ee:
                    30:64:22:80:82:ca:30:42:e7:0b:26:68:8f:9a:2b:
                    b4:42:11:b0:a0:71:d2:1d:9c:24:b5:ef:9f:89:3e:
                    8c:ff:c1:a4:37:19:56:47:a6:9a:57:44:bd:2c:60:
                    32:60:0c:c9:7a:35:ad:eb:b2:e0:d7:ef:a4:b1:4d:
                    fb:35:e2:cd:70:a0:48:6c:09:c8:a8:99:cc:a7:b9:
                    f7:3e:e2:fd:61:86:05:a7:d1:3b:ef:02:1e:fa:49:
                    8d:e1:18:d3:05:3a:b0:83:5d:0d:16:48:19:e1:52:
                    de:65:ea:62:a1:66:fc:31:f2:4d:19:00:98:b7:32:
                    6b:fd:3a:26:b9:bc:a5:f4:ae:47:ba:35:73:d1:e0:
                    61:b4:a5:35:95:41:86:86:c1:b1:ba:a7:73:ff:d7:
                    78:1d:d9:64:cf:4e:70:1f:3b:4c:0e:00:c2:fb:7f:
                    cd:21:25:e4:a0:fa:43:02:1a:ab:5c:e7:f7:b7:7c:
                    25:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6C:F4:BB:E8:5F:FF:1B:4D:D7:7C:81:78:D7:F2:D8:52:1F:1C:31
            X509v3 Authority Key Identifier:
                keyid:C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cc:53:d2:af:f6:55:5b:12:78:88:48:ee:89:25:1e:54:6a:
         66:70:9d:f5:43:d2:82:5b:8e:ff:00:2c:6f:f7:62:0f:9d:25:
         0f:1c:37:0e:32:71:80:2b:49:92:38:04:2f:a5:60:64:4c:9e:
         1f:57:b9:f7:94:34:d4:7e:ad:86:16:a2:93:fc:16:8a:08:51:
         6f:7d:a8:81:1b:62:b0:22:b6:af:21:d1:c2:5d:27:fb:29:e0:
         d4:46:ad:f7:c4:e1:37:e4:66:5e:5b:ea:8e:90:9f:ef:87:78:
         a0:20:f9:25:64:d6:42:72:50:36:b4:37:bf:31:38:88:2e:2f:
         96:fa:f1:15:3c:9b:8d:eb:65:53:25:6e:66:6c:13:3c:c7:db:
         1c:dd:86:0d:28:39:83:f7:b4:b5:8b:b1:b2:9c:99:e1:2a:ad:
         e3:f5:5e:2e:54:4d:85:2d:2e:f3:00:ba:8e:6f:00:a8:c9:1b:
         b5:6c:dc:52:0a:2c:74:39:24:67:e5:14:88:56:b5:ab:a6:76:
         14:e8:46:4e:77:3b:7c:12:ac:be:6d:8d:78:4d:fe:b3:29:7b:
         18:f2:b0:6a:bf:8c:ca:0a:e9:a8:99:a2:01:9e:36:04:97:81:
         40:24:8a:94:3f:e2:af:da:18:3b:69:72:e7:e7:ce:c4:93:89:
         74:79:63:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:30:55 2024 by rpki-client on console-fra.rpki-client.org