Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
File:                     xRCtRomJb7hQznkP3-NE1MAnpa4.mft (raw, json)
Hash identifier:          MEnKOlJBiFHsUG+pr8nOWHnFhl8Jkw0Im6Ovio0Uh/g=
Subject key identifier:   50:59:21:98:8A:25:97:DF:0D:6C:3A:DA:55:FD:5C:69:08:69:9F:5D
Authority key identifier: C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE
Certificate issuer:       /CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
Certificate serial:       019236CC15225F470202F4C689345032D95F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
Manifest number:          12DC
Signing time:             Sat 28 Sep 2024 04:03:17 +0000
Manifest this update:     Sat 28 Sep 2024 04:03:17 +0000
Manifest next update:     Sun 29 Sep 2024 04:03:17 +0000
Files and hashes:         1: 9G5_vAvVVb2oivzsRt_Hjuv2mQE.roa (hash: 1ayxXcBbYCNa31LxzB6y4ysDFrYBbzC2GxU/fCpaPdU=)
                          2: xRCtRomJb7hQznkP3-NE1MAnpa4.crl (hash: MBdPEHK8AHS0465z3qricTvZ7qTAuCo6Y08BQNKCDtM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 04:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:cc:15:22:5f:47:02:02:f4:c6:89:34:50:32:d9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c510ad4689896fb850ce790fdfe344d4c027a5ae
        Validity
            Not Before: Sep 28 04:03:17 2024 GMT
            Not After : Sep 29 04:03:17 2024 GMT
        Subject: CN=505921988a2597df0d6c3ada55fd5c6908699f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ac:92:e8:0c:55:3b:f5:c1:33:d6:87:09:f6:
                    1a:a3:b2:5c:f6:d2:c5:ec:0d:9b:97:9f:95:cc:7e:
                    98:e4:96:f8:10:08:19:aa:68:c9:40:fb:ac:15:7a:
                    88:40:ba:13:1a:fd:e6:f4:8a:df:e7:2f:f4:e3:41:
                    77:32:44:43:6e:12:1f:26:2b:fe:ad:ed:cb:20:db:
                    40:ec:c7:a0:03:02:fa:09:42:50:f0:2b:44:c9:2e:
                    d9:df:37:c8:b7:61:d4:e6:12:65:d4:19:15:e6:5f:
                    72:75:63:92:6d:bb:fa:06:ae:88:fe:1e:e6:44:54:
                    5b:62:83:56:cc:2c:62:7d:95:12:1f:02:4f:70:3a:
                    09:6b:f5:66:0d:83:50:a1:af:c5:d2:6b:1f:f8:ed:
                    a2:68:88:a6:3d:af:4f:d7:3a:e4:4a:9c:e3:4c:d3:
                    48:27:1b:87:55:dd:53:8b:ae:4c:95:ee:c2:eb:83:
                    75:40:d2:99:02:60:6c:39:1b:ec:8e:e3:76:fe:e9:
                    18:60:e4:4e:b1:ce:f3:07:0a:97:51:f1:40:bd:6d:
                    4d:60:69:71:0f:1e:a4:9d:42:ee:14:6e:f0:78:bd:
                    dc:2f:1f:8f:8d:ef:62:28:ea:e7:42:18:b5:5c:b8:
                    14:1f:12:8c:81:cf:51:22:ee:37:e9:9f:f0:61:d1:
                    05:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:59:21:98:8A:25:97:DF:0D:6C:3A:DA:55:FD:5C:69:08:69:9F:5D
            X509v3 Authority Key Identifier:
                keyid:C5:10:AD:46:89:89:6F:B8:50:CE:79:0F:DF:E3:44:D4:C0:27:A5:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRCtRomJb7hQznkP3-NE1MAnpa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/65f954-3f88-4357-9642-9a16d9c0caf7/1/xRCtRomJb7hQznkP3-NE1MAnpa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8f:a9:f1:0c:82:c3:79:cd:fa:ed:20:9e:8b:77:f4:62:b3:
         f9:95:96:6e:a6:64:48:db:61:fe:88:12:6c:19:27:93:af:dd:
         31:ac:90:2a:54:2a:44:51:6b:91:d2:88:6f:85:49:7f:34:55:
         ea:84:a3:1c:64:01:12:d3:b2:cb:62:ef:7f:04:19:93:e7:b3:
         92:11:69:50:a1:db:cc:89:25:1d:34:ae:4a:99:cb:fa:25:bb:
         0e:d9:92:0c:73:f6:29:e7:0d:bc:1f:8f:28:e4:de:e7:9c:af:
         fb:0a:66:4d:54:f5:23:10:a1:aa:ea:dc:09:98:06:e4:1c:74:
         93:22:3f:6d:bd:84:7c:db:d7:3b:ed:71:27:a6:10:32:a9:31:
         57:0a:72:77:52:6c:25:b1:dc:f5:65:fe:1e:52:06:f9:bb:1f:
         0a:f2:bb:13:4e:21:40:00:72:dc:3c:a6:94:d3:9c:86:ef:3d:
         35:4b:6c:c4:7a:d3:b6:73:28:00:ff:83:72:c0:34:9e:3b:5e:
         f3:bc:35:9b:c0:08:5c:f2:f1:67:1c:0a:1e:c8:dc:dd:5f:79:
         91:c6:c3:4b:8c:a7:0d:a4:84:a4:80:1b:a4:62:83:a9:68:b8:
         a6:5c:b5:cd:df:f8:e0:f4:c1:26:7c:ea:b8:ff:e0:51:e0:52:
         f9:14:88:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:08:29 2024 by rpki-client on console-fra.rpki-client.org