Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
File:                     kTxeovTqvz88Qt88Mx6cuhDJOgk.mft (raw, json)
Hash identifier:          dnyW6COURX/+3tmR2LYiUlGuTYRijaqRm981uv/tYS4=
Subject key identifier:   2B:96:2D:93:FC:0D:BD:E0:74:48:91:B7:D9:1D:04:B9:AA:A0:FC:B2
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Certificate issuer:       /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial:       019220E74501E531932C2AF713F43C189186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
Manifest number:          12D1
Signing time:             Mon 23 Sep 2024 22:01:20 +0000
Manifest this update:     Mon 23 Sep 2024 22:01:20 +0000
Manifest next update:     Tue 24 Sep 2024 22:01:20 +0000
Files and hashes:         1: kTxeovTqvz88Qt88Mx6cuhDJOgk.crl (hash: kMw84agLVKG7H/C2mmH3p3hXLmK/JzjCi9lqqVgLQBg=)
                          2: mob8UZ2SSQ7TqH6Ku4D7Z9qyrPU.roa (hash: w/ukyH9KLBhPF/t77HNpTV7/ZmprkwWr5+3MMytjvGY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Sep 2024 20:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:20:e7:45:01:e5:31:93:2c:2a:f7:13:f4:3c:18:91:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
        Validity
            Not Before: Sep 23 22:01:20 2024 GMT
            Not After : Sep 24 22:01:20 2024 GMT
        Subject: CN=2b962d93fc0dbde0744891b7d91d04b9aaa0fcb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1e:ab:9c:9b:98:31:ef:52:f9:e4:59:9c:49:
                    7e:60:53:e7:99:93:e2:63:5b:46:6a:7b:e8:99:0f:
                    c6:b3:c5:b1:49:0c:70:12:32:44:bd:8e:18:96:22:
                    c4:99:01:92:b3:8f:91:3d:35:13:56:b7:16:d2:2e:
                    48:68:85:dc:a5:3c:fe:43:88:89:39:e8:47:73:79:
                    c5:44:19:28:ea:81:89:13:8c:a5:0a:b6:49:c8:1c:
                    0f:cc:ce:56:c0:3c:8a:f2:60:a8:0f:82:f9:0b:f2:
                    a6:d0:7c:30:68:65:7a:43:1e:a9:2f:ef:c0:69:67:
                    7d:f8:bb:0b:ee:d6:1a:1a:2f:97:ec:22:d8:59:43:
                    f0:48:d0:7c:ee:67:68:49:12:3e:fa:8f:01:53:c1:
                    bf:44:b4:ea:aa:48:ee:03:d8:04:12:c1:cb:aa:39:
                    10:7a:d5:11:8e:c0:0c:af:7c:2c:0f:e4:c7:01:01:
                    b8:32:01:e0:09:68:84:77:03:3e:83:e9:07:13:16:
                    41:39:26:37:23:73:95:89:29:95:bf:d8:9f:c2:6b:
                    a9:d6:56:5b:69:ab:b4:d8:15:a2:15:88:eb:47:f9:
                    79:01:39:e6:72:7d:94:53:27:b4:ec:47:1e:2b:f4:
                    2e:cb:05:c2:4b:e4:b4:da:0e:34:af:ea:2c:c2:72:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:96:2D:93:FC:0D:BD:E0:74:48:91:B7:D9:1D:04:B9:AA:A0:FC:B2
            X509v3 Authority Key Identifier:
                keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:88:d0:2f:ed:a5:10:f2:8f:8c:5d:1b:a0:ab:00:7a:44:fd:
         26:c4:bf:a9:7a:30:da:2a:bf:d2:77:1a:3d:16:c3:a2:8d:10:
         40:13:e9:c0:76:6d:0f:32:59:9f:92:78:42:f9:3b:91:76:36:
         95:0b:c1:bc:e1:0d:18:09:6c:0e:99:63:40:a6:64:e6:df:0a:
         5a:08:6a:ba:bc:d4:f2:f1:7a:21:4a:9e:b1:9d:d4:3e:19:ee:
         f1:24:d1:8e:03:51:55:42:a6:99:53:b9:5d:aa:0e:4b:7b:a4:
         58:09:ff:cd:be:a7:63:e1:84:2f:38:51:ef:5d:1d:8a:b7:7a:
         ff:ee:ab:1f:4b:57:d1:fc:fa:66:02:30:57:13:17:18:ba:42:
         1f:b0:e4:2c:e4:82:31:cf:35:e6:d8:17:2f:1e:3f:0b:b9:41:
         90:1c:4b:40:3b:ac:0f:26:21:3a:c6:4d:39:4a:3f:68:ee:a2:
         58:84:bf:6b:a9:fe:bc:16:29:d1:66:0b:7a:e0:16:33:e2:60:
         29:5d:1a:e6:29:8a:fa:ca:11:cf:be:31:34:1d:42:a6:83:f6:
         81:02:5f:34:65:1f:65:4b:fc:f9:09:40:19:a3:77:3d:c7:2e:
         cf:99:b0:33:fd:b8:44:08:76:34:44:73:61:a1:12:7b:8a:83:
         49:b4:3a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 00:08:33 2024 by rpki-client on console-fra.rpki-client.org