Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.mft
File:                     AaIKvBDEaMuZQ70Dfs-MPiTvogE.mft (raw, json)
Hash identifier:          nrMwz6Uyzgplr7NU6QhhFwdZ1B+RxfWnzQpeSoRwgY0=
Subject key identifier:   5E:26:7C:C3:03:FD:CE:91:2F:A6:43:1B:14:6F:5B:2B:DB:69:3A:CB
Authority key identifier: 01:A2:0A:BC:10:C4:68:CB:99:43:BD:03:7E:CF:8C:3E:24:EF:A2:01
Certificate issuer:       /CN=01a20abc10c468cb9943bd037ecf8c3e24efa201
Certificate serial:       019239CB0F4CC6694E30BAE755695592913E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AaIKvBDEaMuZQ70Dfs-MPiTvogE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.mft
Manifest number:          0352
Signing time:             Sat 28 Sep 2024 18:01:01 +0000
Manifest this update:     Sat 28 Sep 2024 18:01:01 +0000
Manifest next update:     Sun 29 Sep 2024 18:01:01 +0000
Files and hashes:         1: AaIKvBDEaMuZQ70Dfs-MPiTvogE.crl (hash: rsC3AyzS+NptoKHJiWBD6fGmI/fVKNC/lmUtZfOBIR0=)
                          2: IYG8wvO-1A_NtaxskPdlenW1wZk.roa (hash: 8rvKBhvEa4X4HQE+pZ344hM0V3t5/4wO9ILlR5Vy2s8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AaIKvBDEaMuZQ70Dfs-MPiTvogE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:cb:0f:4c:c6:69:4e:30:ba:e7:55:69:55:92:91:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a20abc10c468cb9943bd037ecf8c3e24efa201
        Validity
            Not Before: Sep 28 18:01:01 2024 GMT
            Not After : Sep 29 18:01:01 2024 GMT
        Subject: CN=5e267cc303fdce912fa6431b146f5b2bdb693acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:0d:3e:d0:dc:97:4c:67:2a:16:73:09:a6:
                    78:e8:9c:50:38:c7:13:0f:f8:0c:3f:b7:d5:c2:fc:
                    08:ff:a5:ba:38:7e:41:ac:a7:57:67:06:1a:f4:16:
                    ad:df:b8:b3:0f:23:ad:80:6a:65:ef:0e:f5:8c:c1:
                    60:7e:82:0b:9c:07:bd:a0:1a:c3:71:2e:56:23:15:
                    75:3a:c9:b5:31:0f:04:71:89:96:ad:4c:7c:b6:f1:
                    30:7f:52:c4:2d:66:26:45:fc:66:5c:0c:15:3a:64:
                    d6:8d:2a:57:4e:56:4a:c2:c4:60:0f:27:0c:bd:bd:
                    a2:01:ad:84:2f:dc:9f:df:56:06:26:57:c2:54:6f:
                    78:70:8a:e5:c7:ca:e3:4e:ea:a9:7a:e6:12:c5:e7:
                    7a:45:91:52:54:f2:e5:82:a6:44:27:5d:e0:8a:df:
                    ff:62:77:62:3e:0f:b5:cc:97:c6:4d:35:c9:83:51:
                    05:ae:b9:50:f5:e0:20:e2:ce:01:9f:39:bc:32:f1:
                    a3:a6:ab:c6:e7:00:dd:eb:52:ed:6a:a3:c7:13:50:
                    66:0f:5d:6a:a7:74:44:48:52:f3:06:e9:be:41:22:
                    07:d7:6d:eb:cc:59:70:ef:ad:3e:4e:81:60:5c:75:
                    67:27:b5:94:a5:e4:4c:04:84:ef:92:0b:c1:cb:3d:
                    60:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:26:7C:C3:03:FD:CE:91:2F:A6:43:1B:14:6F:5B:2B:DB:69:3A:CB
            X509v3 Authority Key Identifier:
                keyid:01:A2:0A:BC:10:C4:68:CB:99:43:BD:03:7E:CF:8C:3E:24:EF:A2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaIKvBDEaMuZQ70Dfs-MPiTvogE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8521d5-b054-4d33-86a8-ff1d8cd4f095/1/AaIKvBDEaMuZQ70Dfs-MPiTvogE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:99:ac:91:0e:17:e5:37:ff:e7:8b:96:6a:b1:b9:fe:b7:02:
         de:ac:a4:95:99:d8:3d:e9:56:e9:c5:af:1b:1c:38:c4:26:bf:
         36:8a:fd:bc:19:c9:ab:2f:89:51:52:db:3c:e7:67:1c:b8:10:
         59:e4:b7:e0:92:f6:14:99:67:c6:82:cf:2d:93:26:39:02:80:
         ea:23:43:de:69:60:fe:52:28:d5:af:ba:9d:ed:24:46:77:fc:
         49:bd:d4:f7:7d:37:84:23:06:0a:c2:a2:c4:64:a6:c9:e7:ca:
         c1:ba:79:ee:16:9f:09:8b:2a:3d:44:57:57:17:72:f5:d2:58:
         91:ef:77:eb:ed:76:90:ae:c9:df:2f:85:ed:20:23:40:c3:dc:
         b5:0b:66:93:11:cb:0f:52:4b:5f:24:b8:b3:ce:16:a3:8f:51:
         c1:09:5c:10:ce:5a:a7:96:54:8f:1f:2a:d5:eb:0d:36:50:ce:
         5b:fc:e5:24:00:26:e2:c0:3d:36:12:8a:36:73:c4:94:e1:63:
         fa:00:9c:15:55:d5:d9:38:86:44:22:24:b7:f8:7f:0e:a5:ae:
         ba:01:b1:d9:be:9f:c1:d0:93:c4:12:bb:45:34:c0:d6:3a:cf:
         57:63:ba:8e:f4:8c:22:21:48:08:23:89:e9:68:bf:bf:00:34:
         b1:3b:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:41:33 2024 by rpki-client on console-fra.rpki-client.org