Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
File:                     auug8jdBINVPpbzcKp0kUUFy6m0.mft (raw, json)
Hash identifier:          AmT5fmvDMAQRIBfF/63pE8TsBxbJiTxXy31Rod1smis=
Subject key identifier:   BC:9C:33:4B:D6:2D:86:02:B8:83:B2:9A:5D:ED:3C:2C:D2:D9:9B:98
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Certificate issuer:       /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial:       0192395D7C09E0100DDB511A98C012456A47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
Manifest number:          0D91
Signing time:             Sat 28 Sep 2024 16:01:20 +0000
Manifest this update:     Sat 28 Sep 2024 16:01:20 +0000
Manifest next update:     Sun 29 Sep 2024 16:01:20 +0000
Files and hashes:         1: GYkQ0g52m6JsPiY3UPo7y06kVXY.roa (hash: rKMcq6i+DXCumia9ceZ6e+PO+78LXCBWhsUmEG86sKI=)
                          2: UytIIVjIUIhTshFvCt6fZzTn6NM.roa (hash: 5Fm/o2fFhAv/dsRsa/aAXhU8HK7IKP96L0zC05Rr/6w=)
                          3: auug8jdBINVPpbzcKp0kUUFy6m0.crl (hash: T73CG2QnzmXrqJNbJ0aZOvLr996hW/lG7qQ8Ep7qIT8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:5d:7c:09:e0:10:0d:db:51:1a:98:c0:12:45:6a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
        Validity
            Not Before: Sep 28 16:01:20 2024 GMT
            Not After : Sep 29 16:01:20 2024 GMT
        Subject: CN=bc9c334bd62d8602b883b29a5ded3c2cd2d99b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:86:1d:4c:0c:94:e0:1e:ad:e7:c7:bd:52:f6:
                    f7:6b:13:94:cd:be:0d:3f:b5:28:c6:9b:1f:b6:ef:
                    43:05:1f:fd:d8:e7:14:0b:ae:cd:2e:49:e6:03:77:
                    01:6f:50:cd:43:26:80:84:44:82:44:ad:38:2c:4c:
                    53:bd:a6:f0:0f:98:bf:a0:54:b3:c5:7f:a6:01:c2:
                    59:77:32:e4:f8:dd:5c:52:47:a2:b3:e8:67:a1:43:
                    01:13:ad:d5:19:83:a1:54:b2:4b:0e:48:87:fc:6d:
                    d9:dc:82:63:01:d0:26:8b:2d:5d:7d:a8:22:d6:0c:
                    27:dc:7b:68:b8:c4:f2:38:ff:10:0d:aa:63:c0:54:
                    69:83:c1:c3:73:fe:d4:0e:a5:87:c9:9c:0d:48:34:
                    f7:44:ec:be:de:b7:2a:01:53:19:45:f4:7a:4f:78:
                    0d:f1:9b:ef:4b:d2:11:90:e4:c5:49:7a:86:85:74:
                    d9:37:1e:2a:46:11:c3:ab:8d:18:3d:fd:85:d6:29:
                    c0:2c:b3:37:20:24:02:ed:75:6c:e1:63:37:46:0c:
                    0f:07:f9:ee:60:9f:ae:80:ce:f4:63:f6:03:e9:83:
                    ae:47:d0:e6:1d:bc:69:20:53:5f:4b:dd:11:9b:ed:
                    98:f1:b0:81:2b:04:07:52:1f:dd:35:4a:a6:5a:e3:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9C:33:4B:D6:2D:86:02:B8:83:B2:9A:5D:ED:3C:2C:D2:D9:9B:98
            X509v3 Authority Key Identifier:
                keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4e:f7:f4:e7:7a:7d:90:0f:c1:88:f6:dc:35:7a:e0:59:97:
         9b:06:ce:d4:f7:a9:84:cb:21:7b:4f:97:f2:82:8e:43:4f:bd:
         46:e1:1b:3f:6a:2e:59:88:be:57:79:96:33:f2:a7:1a:3c:cf:
         61:f8:2b:16:41:76:47:c1:28:ee:ed:92:87:6f:88:0d:c1:d7:
         99:0f:d9:aa:fc:f0:a3:74:d2:cb:66:c0:d3:18:26:cd:77:35:
         5b:02:a4:a3:2a:d8:bb:77:a1:56:2e:a2:2d:b1:c3:c6:bf:45:
         a0:3c:68:a6:12:14:15:1b:b1:8e:a7:a6:5a:aa:cb:ae:b8:ad:
         b8:c0:65:bc:df:6d:b5:6e:8a:d3:48:f3:5c:e6:9a:52:13:d2:
         40:c0:09:f6:9e:6f:ef:a7:a5:7d:f8:b1:71:0f:ad:6b:3b:d4:
         57:ac:48:eb:2d:e9:28:41:6d:ac:6a:5c:d3:83:e1:a1:aa:8b:
         71:cf:18:56:bd:bb:81:89:c7:08:7c:f2:d6:7d:75:e6:5e:6e:
         1f:c5:00:dc:af:6e:2c:fa:c4:a2:ce:3c:c8:71:8c:e8:3c:7d:
         47:1d:d9:2e:de:db:78:2c:bd:e3:ba:2e:c7:7c:5c:6d:be:b7:
         16:92:9a:43:a2:70:70:e4:67:15:e0:93:9c:e0:0a:51:8e:b7:
         55:03:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:34:51 2024 by rpki-client on console-fra.rpki-client.org