Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File:                     CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier:          f4VA7XngQ8hagDpHHeEIOTH4hAN0o8ERsBlsQ/yoAGg=
Subject key identifier:   03:20:46:7D:2A:3C:A3:15:52:92:CB:39:CA:60:36:1C:11:8F:DF:B9
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer:       /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial:       0191FA479789ECA28BBACA4B8EFF320D1B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number:          0F4F
Signing time:             Mon 16 Sep 2024 10:01:21 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:21 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:21 +0000
Files and hashes:         1: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: RqQT6W+gFiBMbkcy9WzkyCGxf3ghnA3wTXSJCJmC1vI=)
                          2: lpCeyP0b1SZnvza4DIOxu_Ymu1U.roa (hash: pV9sb6nYPcj/K4xUu4d0tNk7+kgSgxoW30SJl1yP5WM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:97:89:ec:a2:8b:ba:ca:4b:8e:ff:32:0d:1b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
        Validity
            Not Before: Sep 16 10:01:21 2024 GMT
            Not After : Sep 17 10:01:21 2024 GMT
        Subject: CN=0320467d2a3ca3155292cb39ca60361c118fdfb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:e2:b0:9e:c2:ff:13:9c:86:f2:12:42:02:
                    05:a0:60:c5:87:92:83:b7:94:c1:e8:e1:f3:ef:f3:
                    5d:6e:43:50:a4:35:da:c9:a1:46:42:01:11:f8:4c:
                    93:93:db:00:c8:af:77:5c:2c:e8:a4:7c:bf:9b:b9:
                    49:53:5b:57:e7:07:4c:9f:ba:8f:ff:97:28:21:b4:
                    fe:32:33:a8:3f:ac:8b:84:2d:24:f3:7a:7b:36:c8:
                    ea:0a:6d:58:23:ac:2f:f7:a5:b0:14:73:56:1a:e2:
                    83:17:9f:32:bf:b4:76:ac:7c:8b:f3:bb:fd:eb:d9:
                    0c:98:1f:66:0d:eb:52:65:c0:f2:e5:51:fc:60:a7:
                    af:a5:b6:4a:f7:98:06:3f:a6:72:ca:4c:49:9d:43:
                    6c:e7:17:16:5a:50:95:dc:aa:85:96:99:67:a1:f4:
                    d3:d7:98:06:2f:40:ad:f1:b9:d9:e8:29:ca:43:a9:
                    8c:a1:96:41:8b:e6:05:af:b2:41:c6:ea:f2:9e:3a:
                    a5:43:20:f7:1b:e4:4a:6d:75:07:09:01:55:15:ba:
                    51:0c:98:79:af:0e:21:8c:fa:64:fa:b6:e9:6d:7d:
                    7e:9c:2c:d9:b6:79:29:69:8f:e0:fb:36:14:86:ba:
                    3f:03:a3:d6:bb:fb:a4:31:62:2d:2c:ed:f4:a8:c5:
                    84:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:20:46:7D:2A:3C:A3:15:52:92:CB:39:CA:60:36:1C:11:8F:DF:B9
            X509v3 Authority Key Identifier:
                keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:36:9b:a9:cf:5e:d3:e5:7d:43:0c:8d:52:32:3b:5f:69:54:
         83:9b:5a:15:a1:b6:d0:fa:28:13:21:5c:db:bc:35:92:b7:59:
         9f:5f:99:e2:0a:21:ea:41:ae:60:19:c5:98:a8:52:3b:7e:c4:
         8b:7b:75:14:a1:3d:6c:0d:b0:8f:73:16:5e:b4:e9:ef:e1:46:
         8c:26:0e:0a:97:be:63:eb:1e:9d:01:1f:a7:c1:94:bd:2a:37:
         ba:ac:36:e8:d2:84:3e:85:5d:2e:28:46:e3:9f:8e:8a:96:eb:
         c1:fc:28:9a:5a:c5:5d:fb:29:34:4d:12:2f:e2:43:67:96:a7:
         13:e6:67:8f:9d:dc:a9:d7:76:b2:1a:0e:bf:ec:6d:71:3e:38:
         8e:d2:82:83:8e:99:48:d0:5e:55:8a:b8:5d:3d:22:07:d5:38:
         da:d5:cc:78:9a:e1:85:a0:da:66:5b:ad:a5:31:4a:bf:1e:aa:
         6e:11:69:57:5a:13:9c:d4:c4:31:f2:6a:af:93:4e:8e:03:b0:
         c3:9c:74:4e:45:a8:91:e6:a4:46:c5:c2:aa:b6:85:86:c0:9f:
         91:14:c8:ee:01:6f:c9:b3:f3:f7:45:3c:55:db:22:d6:ae:c0:
         c3:ed:1c:99:e6:12:66:a0:f7:ce:58:52:26:30:b5:5b:db:c6:
         41:f5:1a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:33:21 2024 by rpki-client on console-fra.rpki-client.org