Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
File:                     i29IgAONVauY18tm38-ol7e6Eeg.mft (raw, json)
Hash identifier:          aELaJSreCqDdxiNGU7c88Ezxc2lh9ZuR+iDIsFQjRCQ=
Subject key identifier:   30:D9:67:3A:4E:A1:11:A8:50:D2:85:EC:B6:20:C5:CD:B0:A8:CA:D1
Authority key identifier: 8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8
Certificate issuer:       /CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
Certificate serial:       0191F96C2B99A55D7C7D6135EA54A7AFC4A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
Manifest number:          0134
Signing time:             Mon 16 Sep 2024 06:01:41 +0000
Manifest this update:     Mon 16 Sep 2024 06:01:41 +0000
Manifest next update:     Tue 17 Sep 2024 06:01:41 +0000
Files and hashes:         1: i29IgAONVauY18tm38-ol7e6Eeg.crl (hash: 38A04cM9/i1/G6FFuVr1D4f/Hz/JTBbotdQe47nRc3I=)
                          2: mtpPext4h5WVwiDrn_IgP8t7gfQ.roa (hash: x7KnjNNpx0Vut4YWO8+HdBQU9lgI+mn6Aw07SpwTTGk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 06:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:6c:2b:99:a5:5d:7c:7d:61:35:ea:54:a7:af:c4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f4880038d55ab98d7cb66dfcfa897b7ba11e8
        Validity
            Not Before: Sep 16 06:01:41 2024 GMT
            Not After : Sep 17 06:01:41 2024 GMT
        Subject: CN=30d9673a4ea111a850d285ecb620c5cdb0a8cad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:c9:7a:5e:18:ce:63:f3:fa:aa:df:1c:ab:
                    ad:3b:e4:01:1b:d2:ba:72:7b:32:b1:1c:12:b5:14:
                    be:5e:26:e5:94:c5:35:65:9e:11:5d:65:53:02:68:
                    02:08:ab:dd:da:eb:cd:5b:64:75:47:ae:67:cd:85:
                    32:6d:11:f7:3a:95:7c:d2:5a:ea:9b:72:e8:d1:f9:
                    8d:c7:9e:fd:2d:09:e2:6d:bd:6e:d4:5f:68:08:98:
                    03:ca:d6:ba:a1:fa:7e:e6:97:00:2b:69:e2:12:9b:
                    cf:df:c3:9d:51:37:63:41:0d:86:b8:28:57:e1:c7:
                    39:3f:41:c6:00:6f:ff:9b:98:28:b5:ec:54:43:20:
                    c3:5e:ee:68:fe:c3:b6:18:cc:fa:17:f7:0f:34:ed:
                    97:f2:b5:c5:94:20:12:6b:9d:64:80:b5:e0:2f:aa:
                    a7:d3:a6:7b:7a:a0:41:77:64:f9:ff:ab:bf:35:ae:
                    e2:ec:46:50:ad:c4:a3:9d:39:92:32:70:2c:71:46:
                    1c:37:ef:a5:ef:74:27:b6:1b:3b:b7:c1:c3:e5:06:
                    5c:e1:e9:4c:79:20:67:96:3d:5c:71:14:92:0d:bb:
                    8a:11:48:d3:fb:53:14:14:ad:80:50:42:53:87:59:
                    8f:c5:38:e6:75:1d:32:e6:f3:6d:f7:ee:f4:bf:d0:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D9:67:3A:4E:A1:11:A8:50:D2:85:EC:B6:20:C5:CD:B0:A8:CA:D1
            X509v3 Authority Key Identifier:
                keyid:8B:6F:48:80:03:8D:55:AB:98:D7:CB:66:DF:CF:A8:97:B7:BA:11:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i29IgAONVauY18tm38-ol7e6Eeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d0c38d-9f02-418b-96b2-fb3111dbd1ca/1/i29IgAONVauY18tm38-ol7e6Eeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bf:02:6e:97:cc:60:8a:a1:58:48:db:79:c8:d5:f6:43:34:
         6d:24:84:62:89:d1:3d:ac:b3:97:90:b7:8b:6b:47:31:34:91:
         29:d7:a9:69:ad:67:26:8f:6d:db:85:b8:92:4c:7b:f1:a8:34:
         8f:ac:07:41:67:b5:f7:65:aa:bf:ba:63:32:14:4c:32:14:09:
         0f:19:04:9c:14:2c:1c:ad:82:f8:d3:68:a6:8a:5f:5c:1f:e5:
         90:f5:66:67:9a:76:31:57:57:d6:f2:e9:45:98:bd:dd:53:06:
         8b:e5:83:e2:4a:77:32:48:db:52:a0:06:a3:3e:66:de:cc:3c:
         50:80:56:78:f4:97:1e:fd:a3:b3:3b:1b:fb:f9:e2:0c:73:bf:
         25:5d:92:5f:48:88:20:bc:06:ef:69:21:cc:ce:dc:67:e9:64:
         12:ae:5d:8b:94:6d:8d:13:cf:3c:18:82:20:87:b5:a0:c5:ab:
         a0:f1:bf:55:94:ce:e4:e3:47:0c:0d:b0:d2:f0:fe:a1:f5:6b:
         a7:23:20:d1:07:47:b8:af:b5:50:3c:ba:18:c1:6d:3f:fb:2d:
         34:8f:51:0e:09:0b:01:05:6a:5b:1a:12:e8:33:a5:94:ad:43:
         95:fd:25:b7:7d:2d:23:67:85:f9:80:f6:e8:f2:65:6b:bc:4b:
         ca:7a:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:33:08 2024 by rpki-client on console-fra.rpki-client.org