Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
File:                     a15HDpDV693Mqpz2uyLoneDZ8gc.mft (raw, json)
Hash identifier:          9o7QN+Q1rg8JK6Vr2/Wpe6yywC5IidUB7CB2tPyBz3c=
Subject key identifier:   39:E3:E0:DA:81:FE:08:96:03:A2:4D:91:DC:D1:25:A6:D0:0B:BE:16
Authority key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
Certificate issuer:       /CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Certificate serial:       019369DA5BBB431E0DBDF138751D19A8462E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
Manifest number:          09B7
Signing time:             Tue 26 Nov 2024 19:02:18 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:18 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:18 +0000
Files and hashes:         1: a15HDpDV693Mqpz2uyLoneDZ8gc.crl (hash: SQHeAWf1pwgl5rhgjXxEv17svhfbLYwDat4H99ctoDA=)
                          2: enuFkCLxDVhCMz9jlKxjl1zB4cg.roa (hash: pnimZNZOWLJrx2rpwm0EayhMsl9bJLcDgFRRRJaJEaU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:5b:bb:43:1e:0d:bd:f1:38:75:1d:19:a8:46:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
        Validity
            Not Before: Nov 26 19:02:18 2024 GMT
            Not After : Nov 27 19:02:18 2024 GMT
        Subject: CN=39e3e0da81fe089603a24d91dcd125a6d00bbe16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fe:79:61:ad:e8:40:5b:df:b5:e9:56:8a:ff:
                    99:bd:cb:d5:68:29:8d:9f:e4:ea:6e:5b:cb:00:71:
                    4d:63:a6:6c:64:3b:f9:08:25:db:8a:61:2f:5d:c5:
                    5a:c4:de:a0:05:69:ef:5f:3d:b2:40:5b:23:ae:2b:
                    03:5c:db:d7:d9:e9:db:21:3e:2d:14:12:58:88:4b:
                    74:51:ab:fb:be:8f:a3:f6:f8:d7:6b:85:cd:60:e6:
                    43:27:cf:ce:e5:30:89:f7:4f:56:b2:71:1a:14:d4:
                    5a:f0:6f:f3:82:c3:92:4a:ea:20:2f:01:b4:21:c7:
                    06:7d:ee:71:35:69:bb:27:6b:e9:4c:0f:c8:5b:57:
                    6e:81:89:b2:f6:30:70:0e:92:50:7f:01:9a:9c:de:
                    80:27:2b:2f:f4:63:2b:61:7b:8e:4d:dc:e2:b1:6b:
                    b7:61:0c:3e:39:15:e9:ef:64:21:1b:9b:b8:82:7b:
                    35:a0:5e:ae:fc:55:cb:c7:64:15:92:da:d8:ff:be:
                    7e:f8:de:5e:af:aa:61:b3:a9:6a:d6:3f:ee:44:a8:
                    4b:d0:6d:a5:8f:ae:79:1d:97:76:a7:76:56:8f:7e:
                    07:8c:fe:9d:ad:49:c5:40:ff:ee:15:e4:4e:17:88:
                    60:f4:0f:12:88:18:02:1d:02:fd:83:b0:bb:5d:e3:
                    c2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E3:E0:DA:81:FE:08:96:03:A2:4D:91:DC:D1:25:A6:D0:0B:BE:16
            X509v3 Authority Key Identifier:
                keyid:6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f8:bc:35:36:d1:5e:ed:9f:70:48:3a:5c:7f:b5:8f:8c:38:
         4e:52:df:17:59:09:81:3e:4b:55:82:6e:85:3e:fa:8c:b1:ea:
         54:1a:db:7d:37:f5:0d:7f:0b:17:41:35:22:14:83:e4:29:c2:
         27:3c:0a:f0:be:56:f8:97:0a:4c:fb:52:1d:8f:f4:75:d9:6b:
         74:bc:17:b8:58:6f:18:8b:cc:bb:69:ce:fa:96:f4:4d:38:ec:
         01:5d:99:c8:30:3b:01:7e:d7:c9:b4:1a:c4:de:bf:ed:63:5f:
         0b:c9:f5:3d:16:1c:c1:a2:9e:8b:c2:0a:ce:4c:7b:1c:a2:c7:
         62:30:76:55:25:28:f1:8b:77:12:dc:52:24:7e:60:fe:77:03:
         c5:fb:43:11:8d:eb:a4:1f:0d:76:54:54:37:90:90:15:df:ee:
         85:09:06:4a:e9:30:1a:63:63:b6:58:71:7e:7d:53:89:d8:11:
         1d:e7:50:6d:0c:65:3d:3e:59:3d:b8:79:ba:b6:5b:4f:6f:8e:
         ca:d3:f7:ec:37:f4:19:c7:74:e7:61:52:32:6d:0c:b1:bd:f6:
         a1:be:8a:98:d9:5e:f3:6a:ac:78:bb:f3:c9:ea:0d:61:93:c6:
         25:c2:2d:64:28:4a:f9:88:ca:8b:50:26:6c:86:5d:7a:1d:68:
         21:24:3e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:31 2024 by rpki-client on console-fra.rpki-client.org