Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
File:                     onIAVE-TpnX8jHhBhWmA44o1Kcs.mft (raw, json)
Hash identifier:          qvveP601O/BjWZRokaF6JxcfOQnaF2ozBxx7IofX5jM=
Subject key identifier:   69:93:A8:2B:FD:E2:50:4C:E7:D6:5D:07:23:11:0D:CD:25:A9:95:82
Authority key identifier: A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB
Certificate issuer:       /CN=a27200544f93a675fc8c7841856980e38a3529cb
Certificate serial:       019239CAE701132170485421435836C04FE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
Manifest number:          0D78
Signing time:             Sat 28 Sep 2024 18:00:51 +0000
Manifest this update:     Sat 28 Sep 2024 18:00:51 +0000
Manifest next update:     Sun 29 Sep 2024 18:00:51 +0000
Files and hashes:         1: 5rq4mPYSoLMw0c9Ex0reOHs5960.roa (hash: 6H/V1n0peanmBCYVAQMj7GDUr4M6jpBZAHpFu14I3G4=)
                          2: onIAVE-TpnX8jHhBhWmA44o1Kcs.crl (hash: Op2TkNpnc4MEz+9y4L0Wi5fnQWSK8ZpGu9ZctPZCXRg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:ca:e7:01:13:21:70:48:54:21:43:58:36:c0:4f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a27200544f93a675fc8c7841856980e38a3529cb
        Validity
            Not Before: Sep 28 18:00:51 2024 GMT
            Not After : Sep 29 18:00:51 2024 GMT
        Subject: CN=6993a82bfde2504ce7d65d0723110dcd25a99582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:64:40:96:25:de:4b:58:0f:52:7c:62:42:
                    47:f8:8d:73:95:7b:ca:ac:1e:98:1f:6d:2a:97:1f:
                    18:c2:a1:b2:3d:c1:d7:ef:2d:11:91:64:ee:07:a7:
                    9f:85:f3:22:84:83:19:a0:9b:47:a6:5d:e6:a0:c0:
                    b0:8d:73:98:27:71:f6:05:d2:e5:79:8a:12:65:02:
                    59:d5:fa:cf:f5:d5:b6:d7:97:63:1c:db:38:45:c9:
                    f2:25:68:89:d4:c9:ca:f7:74:8f:2b:31:55:03:69:
                    09:91:6f:80:91:b6:95:01:cc:94:51:51:1c:8b:6c:
                    b6:51:27:49:d3:1b:e5:97:95:97:a2:17:93:ff:6a:
                    4f:a6:aa:d9:95:7a:d3:13:b6:09:59:1e:55:a5:ab:
                    39:04:db:8b:aa:15:c7:e5:1b:52:50:51:19:26:f7:
                    f8:7f:87:4d:41:bb:8f:18:ee:fe:87:ae:b8:30:8a:
                    b9:61:70:eb:b2:71:26:ed:24:00:bf:c8:0b:0e:ca:
                    2c:85:65:d3:64:54:b5:45:7f:51:4e:56:c8:28:88:
                    96:5f:29:6e:44:13:72:5b:29:fb:90:32:ac:54:a1:
                    1b:a8:42:b5:53:58:0c:7a:11:9a:85:fc:82:86:be:
                    3a:ad:19:41:f6:d4:88:66:27:6b:3d:19:0f:46:d8:
                    e4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:93:A8:2B:FD:E2:50:4C:E7:D6:5D:07:23:11:0D:CD:25:A9:95:82
            X509v3 Authority Key Identifier:
                keyid:A2:72:00:54:4F:93:A6:75:FC:8C:78:41:85:69:80:E3:8A:35:29:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onIAVE-TpnX8jHhBhWmA44o1Kcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bc1c74-1e0a-4055-80b8-efa7f89bd0b9/1/onIAVE-TpnX8jHhBhWmA44o1Kcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:58:f7:7b:d1:0e:18:62:7b:29:06:93:44:c8:11:44:b4:41:
         7f:34:e9:81:8a:b8:4a:ce:f1:2b:ba:e8:0e:a4:14:03:6c:4b:
         11:1e:e5:36:a2:f4:d4:05:7d:01:ec:3e:da:cf:0c:d5:6c:63:
         c6:35:9b:a7:f8:0d:d8:91:a6:5b:8c:ae:c0:e9:0c:10:14:d8:
         0f:27:61:41:46:49:c2:3a:62:cd:a1:ff:7e:a5:bf:44:1f:ba:
         7d:b7:58:ac:77:73:c0:53:42:eb:8f:89:a1:d1:cd:1a:40:09:
         6e:57:3f:3d:f1:fc:cc:63:46:9f:5a:2a:08:74:65:0a:60:fe:
         4b:0e:af:bc:0a:19:6b:5d:f4:a7:e2:fa:fc:76:ae:30:84:6b:
         0a:e4:17:10:8d:48:26:69:37:f3:b2:af:51:b3:38:0b:9c:52:
         13:88:f4:47:9e:09:e2:1b:ba:11:6f:e7:1f:56:51:78:13:d0:
         d8:ac:17:aa:2a:4a:fd:08:f5:d7:58:7e:8b:02:af:d9:46:62:
         28:a7:9e:64:64:06:97:5e:42:33:1c:e8:fd:a9:95:5a:44:7a:
         9e:4c:27:f3:48:18:c6:65:b7:a4:05:15:0f:97:e1:3f:5d:a8:
         4c:4b:e7:b0:4b:fc:a6:06:73:04:ac:09:df:e8:00:9a:da:2b:
         65:73:2f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 02:05:25 2024 by rpki-client on console-ams.rpki-client.org