Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          VgzplxwYHW+VD1MmynxN0zUtH20dGqJfqVDH9rHBAvo=
Subject key identifier:   51:08:E1:77:DD:32:2B:1B:B4:CC:75:31:73:63:DC:05:88:A1:3A:08
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       01925FFD0B2A691CFAD2519A038B0D2E353D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          1014
Signing time:             Sun 06 Oct 2024 04:01:11 +0000
Manifest this update:     Sun 06 Oct 2024 04:01:11 +0000
Manifest next update:     Mon 07 Oct 2024 04:01:11 +0000
Files and hashes:         1: 5NS5975EAn-vRP0V1xn79bNv5MI.roa (hash: X/XBdb3raTOZQbgB9y51TVQNqtClEjDZSP8zaZjuf7U=)
                          2: MB3J6oAeOZYFq8iEdbsNYXJF_z8.roa (hash: 3wMEg1aFxJ8PIBZ9KsOXoOH0Y7VjgRtRmoRwW6PClq4=)
                          3: bFLArXGdJw9-s4oU-UQH8F3bQtI.roa (hash: 7xEwelcj7GfYqj1rzll0tvhADaq9lGc9t5zxn4xIUCY=)
                          4: f0sMAF1dn3EW2_d9g2NwQjj5EkE.roa (hash: OQ2wOXsoJcNgnLg+XKAhnlWHZLtcryfsMa+E7twO12c=)
                          5: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: FZNMjY0rr2JKqN/EH5r9ucQTUuKusz9nMHt+eDNUFqY=)
                          6: kilFcYFdq1RyTWXBBgcZ5_hJHRU.roa (hash: okD4Q99K8dxCrAxKcXNg7+YONuJT8aWZtmXGl876jFc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Oct 2024 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:5f:fd:0b:2a:69:1c:fa:d2:51:9a:03:8b:0d:2e:35:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Oct  6 04:01:11 2024 GMT
            Not After : Oct  7 04:01:11 2024 GMT
        Subject: CN=5108e177dd322b1bb4cc75317363dc0588a13a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:b6:b7:10:21:01:f1:b8:a6:66:de:3f:7c:
                    db:4d:21:4d:3f:22:2e:62:8c:84:f5:97:08:a8:d7:
                    d8:52:4d:bb:51:52:e8:c8:43:55:90:d7:e0:59:a2:
                    cc:3d:9b:b4:ab:fb:48:0d:eb:7d:9e:e9:b1:ae:ff:
                    83:31:69:8d:0e:31:25:03:68:eb:bf:2a:4b:52:2f:
                    85:e5:55:e6:6a:a6:1b:e2:53:96:17:e8:e9:90:0a:
                    da:a5:85:88:37:2c:24:06:bb:de:10:3d:51:0d:a4:
                    8f:3c:22:bd:5c:83:ed:d3:66:3d:db:3d:c9:cb:1a:
                    58:fa:f9:28:f8:1a:04:73:2a:81:0d:24:bb:df:6f:
                    04:c9:c6:a6:b1:f9:c6:c0:cf:05:63:6f:bf:1e:48:
                    db:fb:9a:d5:f5:7a:49:76:bc:23:91:55:a5:2a:3e:
                    aa:e7:cb:d1:32:12:c0:f7:7d:1f:a1:9e:11:77:3e:
                    bf:eb:a8:c2:4b:c8:ba:12:a2:05:25:36:61:00:c6:
                    90:92:3a:32:e6:9b:6f:36:fd:dc:3e:76:a7:b4:a3:
                    75:87:31:23:f4:e1:38:65:6f:57:b5:40:75:14:da:
                    11:2c:5c:91:1a:f1:11:8d:af:d0:8e:12:3b:d3:76:
                    9d:52:eb:a4:3b:59:27:31:78:bd:da:e3:51:1e:b2:
                    f2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:08:E1:77:DD:32:2B:1B:B4:CC:75:31:73:63:DC:05:88:A1:3A:08
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:94:3f:7b:72:9a:32:ad:4b:f6:02:d6:0e:aa:90:79:97:d8:
         67:72:cb:33:2f:65:47:22:7f:e6:68:0e:99:98:0a:12:cc:00:
         7b:56:12:18:71:00:29:25:12:13:43:2b:aa:8d:44:9a:56:b0:
         bc:79:0d:30:77:53:29:07:5f:af:16:79:da:21:5d:bb:2b:2f:
         9f:72:a5:88:d4:3f:53:7f:1a:89:11:48:a5:76:f2:dc:2c:b7:
         ed:3e:7c:56:cc:03:d8:a5:dc:0c:99:ce:af:61:02:c6:a0:32:
         4b:54:18:59:d1:32:e4:83:33:ac:30:a0:15:26:d5:68:9d:7d:
         3c:8d:35:50:f0:93:85:f6:44:75:ba:05:c2:41:6d:4d:df:12:
         3f:05:fa:86:af:f4:e7:4f:32:42:bd:82:b6:b6:d0:f1:55:1f:
         d3:eb:76:a1:09:5f:54:94:12:83:5a:75:66:b2:ee:4a:ac:58:
         a3:aa:e2:f6:0c:99:f2:28:33:1c:96:e1:56:14:36:39:6e:ed:
         41:5d:14:9e:fd:de:a3:4f:b0:27:12:c1:be:ba:72:8a:5c:35:
         f1:3b:62:0d:cd:94:95:27:98:7f:08:9f:b6:1f:9a:30:11:29:
         38:7e:db:34:aa:3e:31:ed:11:df:8d:8e:6d:2d:ea:bc:33:55:
         1d:d7:ba:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 08:24:56 2024 by rpki-client on console-fra.rpki-client.org