Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File:                     IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier:          DisE5gPXhAjc487wyBIc3QkV/XaoG/pxTXgeke9Fu6o=
Subject key identifier:   48:10:D6:C7:2B:76:D7:FC:5C:90:47:65:E7:45:F8:E1:19:F4:5F:0F
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer:       /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial:       01920DCDF4FF1B10BD39F849422C654A4ABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number:          03
Signing time:             Fri 20 Sep 2024 05:00:54 +0000
Manifest this update:     Fri 20 Sep 2024 05:00:54 +0000
Manifest next update:     Sat 21 Sep 2024 05:00:54 +0000
Files and hashes:         1: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: 2/JUXfN1xzYJpaymXEOpIymFm9z3SOS0QnvrT7P26HY=)
                          2: vb5va3BZBg2wD8iHLCSA4yPjArc.roa (hash: uv2IzMkLk/dS3S0QoZkGuQkdv//dK81fW1Rv7w8pI1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0d:cd:f4:ff:1b:10:bd:39:f8:49:42:2c:65:4a:4a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
        Validity
            Not Before: Sep 20 05:00:54 2024 GMT
            Not After : Sep 21 05:00:54 2024 GMT
        Subject: CN=4810d6c72b76d7fc5c904765e745f8e119f45f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:92:de:dd:2b:e4:21:bc:16:08:92:4a:1e:
                    fd:09:8b:78:2a:14:0e:9b:c0:30:59:0f:5e:b5:c8:
                    89:68:81:b4:4b:fb:4f:d0:18:05:c7:f9:e9:97:eb:
                    04:6c:63:d7:f0:de:6f:13:b0:cd:90:d3:72:93:56:
                    63:d6:d3:88:64:dd:9b:50:88:40:f5:ed:14:4c:25:
                    65:77:27:52:1e:f2:d5:42:fc:70:ba:68:58:86:2d:
                    41:36:01:c2:58:03:e4:50:8c:45:29:63:5a:7f:bf:
                    75:f1:6d:8d:26:cb:bb:4b:87:e3:a0:fc:b8:c2:7b:
                    1d:db:9f:db:d6:ad:4f:12:21:c9:08:85:d0:43:c4:
                    a9:54:a5:4f:bc:9b:07:f1:ff:21:95:50:4b:0a:3c:
                    0c:4a:93:4e:22:65:f3:ca:08:95:e2:89:15:51:47:
                    b9:1a:1e:96:3b:fb:d8:07:e6:87:b8:58:4a:64:3c:
                    00:cf:42:a1:8d:8c:fd:44:bd:9b:84:76:17:1a:36:
                    4f:83:7a:04:78:b8:c4:a0:5f:d7:e5:00:ba:cc:b4:
                    e2:3c:cb:f1:12:02:b7:d1:13:87:e5:55:4f:04:2d:
                    6d:d0:51:5e:f2:27:59:24:9f:77:9e:e9:09:47:12:
                    98:63:ce:d2:5f:c4:15:50:0f:ed:81:5c:6a:f5:b9:
                    4f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:10:D6:C7:2B:76:D7:FC:5C:90:47:65:E7:45:F8:E1:19:F4:5F:0F
            X509v3 Authority Key Identifier:
                keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2d:96:7a:36:f5:05:1b:6d:03:fb:85:27:16:45:19:72:dc:
         43:b2:f5:c4:5b:57:b7:5a:d6:2b:3d:c5:8d:1a:4a:ed:0b:2f:
         f8:e8:d8:80:c0:cc:4e:fb:51:62:2e:88:0c:49:42:04:3e:6e:
         3a:b2:bd:77:ae:92:78:aa:a6:8b:ca:06:b0:c4:50:59:5d:f1:
         f6:6d:3c:30:01:b4:37:27:e7:30:7a:4b:62:fd:2e:3a:3e:82:
         31:b4:db:02:d5:5f:af:d6:d1:02:ba:81:0f:fc:95:2b:23:81:
         5a:25:51:13:90:52:d9:3c:a0:cb:25:94:00:cb:20:13:2c:ee:
         b8:e8:13:fd:ba:be:ad:ea:84:53:7c:f0:d2:95:5a:95:03:df:
         d7:f5:ca:09:ed:0a:a2:ee:6e:e0:a0:65:9f:cd:6a:9f:39:a1:
         ad:51:de:07:b7:f7:0e:4c:52:22:97:a9:f5:7a:6b:c0:16:af:
         6b:fd:26:08:70:08:4f:94:cc:d1:c4:21:bc:ea:2c:2b:7d:45:
         71:a4:9d:bd:24:40:b1:08:d6:91:c4:70:8c:fd:8c:80:a5:5b:
         04:39:a5:de:57:5f:e3:3a:5c:b0:e2:6d:e5:b9:c2:a0:79:91:
         05:4c:ae:0d:b0:28:c1:9b:93:6c:9f:fc:af:25:e0:ba:5c:42:
         89:7c:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:21:39 2024 by rpki-client on console-fra.rpki-client.org