Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
File:                     1szonupFG4KUqLtpfEmTrkTQXG8.mft (raw, json)
Hash identifier:          nt7pa1LfQT64ukf9+44HNQCH4BJlxghYh3k0M0NDuWI=
Subject key identifier:   2A:45:8F:05:ED:6F:B8:3B:E5:5A:2C:F0:E9:58:16:97:77:CE:BA:13
Authority key identifier: D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F
Certificate issuer:       /CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
Certificate serial:       01923400412CE4E5EB3B4F31511630CA8BD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
Manifest number:          064B
Signing time:             Fri 27 Sep 2024 15:01:24 +0000
Manifest this update:     Fri 27 Sep 2024 15:01:24 +0000
Manifest next update:     Sat 28 Sep 2024 15:01:24 +0000
Files and hashes:         1: 1szonupFG4KUqLtpfEmTrkTQXG8.crl (hash: IM4V+t7fowYcXn7B+d9HkTElhIfrGFavZc4sc/ci108=)
                          2: SmGyVD5pzfI0P6hHdE1wrlwGc4E.roa (hash: OyNw/4G/3lGLm44FyMow/KPB/WiDAWwN/lsjR7AQZ1g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:00:41:2c:e4:e5:eb:3b:4f:31:51:16:30:ca:8b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6cce89eea451b8294a8bb697c4993ae44d05c6f
        Validity
            Not Before: Sep 27 15:01:24 2024 GMT
            Not After : Sep 28 15:01:24 2024 GMT
        Subject: CN=2a458f05ed6fb83be55a2cf0e958169777ceba13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:c6:99:8d:3f:b1:30:db:1c:ed:c6:0e:0e:
                    ba:cf:b5:25:c2:9c:6b:5a:a9:f0:d1:e8:d3:09:b3:
                    ba:9c:70:f3:f4:59:60:0a:52:a9:b2:2c:5a:55:ba:
                    b7:51:a4:01:f6:19:19:da:b6:3e:6a:ed:19:73:75:
                    51:a4:58:c9:b3:b6:00:cc:27:3f:ca:96:f1:33:a3:
                    96:60:af:b5:88:ba:be:3a:7b:9a:ae:6d:7d:50:c1:
                    f7:2a:30:c0:56:02:9a:25:ec:a6:96:91:6f:f4:05:
                    40:22:65:4d:23:0e:50:77:d5:e8:06:f7:49:85:da:
                    2c:f2:63:d3:85:c2:00:c5:85:33:23:e3:b9:bd:ab:
                    4e:eb:c9:4c:78:78:71:2c:21:d4:e2:93:94:88:c4:
                    0e:fd:05:12:cb:b5:65:bc:05:94:84:4c:2b:e0:c0:
                    ee:cb:03:59:1b:b5:af:46:9e:28:a8:e8:81:77:2d:
                    29:43:02:3c:3e:33:9f:c4:06:6e:73:54:9a:12:6e:
                    02:d1:d8:72:b4:15:b5:ff:62:0c:9b:b0:c4:e6:94:
                    66:23:bc:99:8c:8f:d7:7e:bf:1a:61:d3:30:03:9a:
                    4a:76:d9:e7:69:5c:77:01:6b:e2:b4:35:20:0d:48:
                    ea:f4:13:56:66:d0:57:96:52:14:28:79:b7:03:98:
                    f3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:45:8F:05:ED:6F:B8:3B:E5:5A:2C:F0:E9:58:16:97:77:CE:BA:13
            X509v3 Authority Key Identifier:
                keyid:D6:CC:E8:9E:EA:45:1B:82:94:A8:BB:69:7C:49:93:AE:44:D0:5C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1szonupFG4KUqLtpfEmTrkTQXG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0a627e-c40a-4590-8c9a-696e3d188f2a/1/1szonupFG4KUqLtpfEmTrkTQXG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:45:e3:15:d1:55:be:d2:e1:ba:76:17:0d:e4:6d:7d:90:8d:
         a3:55:36:8e:65:59:19:db:a2:86:ce:48:aa:cb:f5:59:ef:00:
         3c:75:5d:b2:78:8f:f4:aa:26:db:76:d8:bf:9e:f3:08:7e:9e:
         16:ae:f4:96:5e:c3:1e:18:b6:f1:b4:92:90:5e:4a:64:59:13:
         f2:be:2d:a6:b0:49:f7:f8:95:00:2f:2d:5e:f9:77:0d:2d:18:
         c8:51:6e:33:0f:a5:47:60:e8:5d:dd:c0:a4:e1:57:28:53:14:
         83:54:9b:1c:f1:ed:e8:59:88:31:57:79:53:42:28:0c:47:31:
         0d:49:e4:5d:6f:b7:e4:ba:fb:0c:3c:d5:f9:2b:36:82:14:bc:
         8d:5f:0c:32:81:52:70:6f:cf:15:03:a7:bd:0b:32:5a:aa:9c:
         97:33:fa:01:80:71:b5:13:0a:e5:35:b2:30:43:1f:44:06:ed:
         36:3a:b2:f7:07:3a:4f:7b:e6:f1:3c:2e:6c:cc:32:0b:bc:7d:
         1b:03:41:09:5c:ec:4f:3b:9c:38:49:e7:de:54:30:c9:3a:34:
         d9:ff:04:bf:7f:fe:54:59:2e:88:1c:0a:5e:f8:aa:18:85:c6:
         ea:c5:d8:f7:0b:f1:ac:3c:84:a6:68:72:8c:50:44:69:39:ab:
         72:83:32:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 22:00:01 2024 by rpki-client on console-fra.rpki-client.org