Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
File:                     clLH1e2MWivCrQMGXUHD5LOsFXU.mft (raw, json)
Hash identifier:          crdiCt0v4g3qOdbyxM0xw3G+pxnAh7hol4fsQxnle4w=
Subject key identifier:   DE:FC:A3:A8:4C:34:D4:C6:07:56:70:A8:7D:4C:C4:23:F8:F1:B7:BA
Authority key identifier: 72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75
Certificate issuer:       /CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
Certificate serial:       019236CACD5A867211F3B718574F8BAD85FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
Manifest number:          0FDB
Signing time:             Sat 28 Sep 2024 04:01:53 +0000
Manifest this update:     Sat 28 Sep 2024 04:01:53 +0000
Manifest next update:     Sun 29 Sep 2024 04:01:53 +0000
Files and hashes:         1: clLH1e2MWivCrQMGXUHD5LOsFXU.crl (hash: 4ys0s21E78TPJqIQc3wlIjoWMcM62XfSKDWDF9lPNhU=)
                          2: oPggvEBSpYSy6vtYrGxOms7XiCs.roa (hash: bnk+N3KxAYyA9ArIx7/xCplRBRTHihapZXeMkME8f6E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 04:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:ca:cd:5a:86:72:11:f3:b7:18:57:4f:8b:ad:85:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7252c7d5ed8c5a2bc2ad03065d41c3e4b3ac1575
        Validity
            Not Before: Sep 28 04:01:53 2024 GMT
            Not After : Sep 29 04:01:53 2024 GMT
        Subject: CN=defca3a84c34d4c6075670a87d4cc423f8f1b7ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:b1:46:02:ad:09:cb:c2:ef:ea:ac:6e:e0:
                    c9:b7:44:74:7d:39:89:bd:11:12:47:4f:1e:9a:eb:
                    10:f7:5c:13:28:04:62:08:ee:cd:e2:3c:29:80:f5:
                    4b:fc:89:92:a0:23:fc:74:90:32:25:ca:81:8c:a6:
                    7a:7a:9e:c7:e2:6a:38:c2:70:58:2a:6c:3f:02:dd:
                    3e:9c:c9:b8:26:0b:f5:18:2a:94:02:7d:3c:6c:67:
                    75:37:4c:da:90:a8:d8:1c:e7:28:ea:75:4a:7e:55:
                    9f:7d:dc:5b:e0:69:44:fe:a3:de:47:52:21:f1:d5:
                    83:2e:e9:d8:24:c7:9e:f3:e9:89:e9:69:5c:17:0e:
                    49:2f:58:5f:78:56:db:d6:08:d4:d1:cd:28:bb:5e:
                    c6:af:da:d6:3c:73:cd:33:7a:af:75:72:a8:15:4d:
                    b5:13:c5:a6:25:98:b0:38:a3:3c:0d:89:49:bb:03:
                    03:f4:53:8c:6c:7d:3e:e0:e1:7f:dd:9a:7e:46:76:
                    94:fb:46:de:d0:88:42:c8:a5:1c:8b:3b:a3:7c:a3:
                    27:27:ce:21:c3:77:49:32:c6:ad:b9:21:c4:47:15:
                    dd:52:9e:51:f9:dd:10:ac:fe:de:48:c6:cd:25:8d:
                    47:e2:dc:33:cc:89:e4:71:fb:15:f0:a9:f5:08:41:
                    e4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:FC:A3:A8:4C:34:D4:C6:07:56:70:A8:7D:4C:C4:23:F8:F1:B7:BA
            X509v3 Authority Key Identifier:
                keyid:72:52:C7:D5:ED:8C:5A:2B:C2:AD:03:06:5D:41:C3:E4:B3:AC:15:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clLH1e2MWivCrQMGXUHD5LOsFXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2b9d89-ed82-4401-81d9-67d1b2a61bb0/1/clLH1e2MWivCrQMGXUHD5LOsFXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:8f:fa:66:de:0c:09:3c:96:f4:a6:48:fd:88:ef:3c:64:5f:
         1f:ac:2f:2d:f7:d6:8c:35:6e:b2:5c:d1:8e:2c:a0:b3:53:88:
         a9:df:94:da:23:8f:5d:cc:e0:ef:86:da:fd:67:8c:10:7c:bf:
         32:16:26:89:25:ab:cc:ab:24:34:85:5b:83:4c:af:48:9f:3b:
         b2:05:0e:92:54:15:c6:32:ed:b5:62:c1:c7:a3:66:24:e5:87:
         40:c8:76:69:ed:00:d2:f1:89:aa:38:8a:41:a8:68:88:ce:87:
         fc:b2:a3:e1:29:39:3e:6b:bb:2f:39:8b:49:4f:e4:99:11:0c:
         a7:cf:5a:60:4d:75:f8:01:da:27:00:e0:e3:83:73:41:32:10:
         81:2e:4c:c5:1b:20:e7:d7:a4:4c:41:83:f5:f2:53:3c:f9:37:
         63:08:d3:9f:df:f9:6e:cd:04:3f:fe:c4:e3:e3:f7:0d:17:60:
         b0:aa:02:42:16:0f:21:0b:a5:18:71:e6:2c:eb:41:e8:ec:dc:
         31:e4:80:0a:ed:2a:d9:60:93:b2:35:5f:25:99:f3:e5:a4:d9:
         82:e2:20:a5:36:a4:71:8f:14:e4:48:06:85:1d:ac:fa:f1:cf:
         ae:7c:92:b1:d6:d9:af:7a:2e:f0:82:1d:d4:23:d5:b3:67:34:
         55:ad:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:08:51 2024 by rpki-client on console-fra.rpki-client.org