Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File:                     ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier:          wv7C38JuSPVzVF8pglxHBEF6ipU7b3Tdrir3YbywZM4=
Subject key identifier:   6C:56:F9:66:CF:F5:10:EB:9F:4C:97:1D:AF:B1:F4:02:8D:18:EB:54
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer:       /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial:       0192362592BAA980C568FB46F7DAE0AB4241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number:          12DC
Signing time:             Sat 28 Sep 2024 01:01:24 +0000
Manifest this update:     Sat 28 Sep 2024 01:01:24 +0000
Manifest next update:     Sun 29 Sep 2024 01:01:24 +0000
Files and hashes:         1: 0I14GtFHzJGVP2uXnE0yak_hoMg.roa (hash: xYPtIw81/QcoQJVFjzKJH1+qXW7eSVJRXbxtEHc2AVY=)
                          2: MfAUk16L7xGeBACaKFwVMbSpsz4.roa (hash: bZsn3vXD+RY3PUbkxSex04QjmdIlTIPEEu8EEpzfs3o=)
                          3: RqzH37yoqqhj4bemgvLshrs6C7o.roa (hash: AiCLddGrdRr68OV8DLJUly1YHa08XgTvIrrDVLmRCsI=)
                          4: c68cD--LKHx-uEcYpviNAKC2hmg.roa (hash: OT5aAuksDGl9hDbPUN13cuJ5TjerW1eMmPXfQcmhkfs=)
                          5: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: pxjvkPmdkJ+wUO0U5AKZvinm2vHK2JDwwQUuZvL7BQE=)
                          6: iHuO0cvSKcVg8hbzJHc5vhcPwI4.roa (hash: dEtEkNuOvPNiqJUNshsYFTUzNfqex7Yc/P606wrkQM8=)
                          7: nc_QXt_JhgvAwAPU3RfSpKWB9l8.roa (hash: lnlukQ2Un4xXpngI4FwpF7JRGxV4/x7LfP0ISJ/X/fc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:36:25:92:ba:a9:80:c5:68:fb:46:f7:da:e0:ab:42:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
        Validity
            Not Before: Sep 28 01:01:24 2024 GMT
            Not After : Sep 29 01:01:24 2024 GMT
        Subject: CN=6c56f966cff510eb9f4c971dafb1f4028d18eb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:5c:37:dd:08:1a:65:78:bd:4d:42:8f:7d:
                    0b:12:f9:a3:50:f7:58:41:4b:2d:0b:2d:ee:5a:33:
                    df:23:59:fd:cb:4a:fe:d3:86:ae:ac:dd:7f:74:07:
                    0a:76:11:f0:dd:36:3a:9c:bd:31:75:d5:37:8b:98:
                    5d:a0:e4:b5:fe:19:04:40:0f:1e:bd:c0:d1:fb:54:
                    05:3a:8a:16:69:0c:26:10:58:c7:91:b9:90:c5:f6:
                    a1:e8:ce:26:cf:5f:34:ca:9b:f9:8b:6e:dc:64:84:
                    f5:f7:d4:d6:58:aa:77:02:4a:00:b5:48:3a:23:e3:
                    a8:6d:e1:0d:da:56:c3:12:e8:1d:05:69:33:90:f2:
                    f8:cc:85:74:72:96:1d:03:f8:09:2f:98:ef:7b:0b:
                    c6:2c:8f:5a:7c:ad:42:cd:fd:15:8f:10:64:29:65:
                    cb:c7:94:2b:d5:08:a0:e4:69:b0:54:a1:a0:cd:70:
                    5f:f4:4b:5f:b8:7f:9d:c6:7d:fb:f9:37:54:0c:8c:
                    11:bf:dd:ba:e4:03:0f:6f:a7:36:f5:67:60:3b:23:
                    cd:5d:33:df:33:52:26:9b:23:52:e1:a1:b7:a3:9a:
                    c4:dc:4a:1e:5c:2b:2e:0a:48:c1:e9:26:1c:bd:f7:
                    e6:b3:02:e3:29:51:15:97:3a:ee:d6:13:27:90:95:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:56:F9:66:CF:F5:10:EB:9F:4C:97:1D:AF:B1:F4:02:8D:18:EB:54
            X509v3 Authority Key Identifier:
                keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e6:fd:66:51:a0:91:a3:d6:11:25:77:91:1b:70:78:b8:25:
         2a:00:c8:bf:2f:24:d5:b1:25:39:fe:c8:31:38:52:bf:ea:55:
         8d:98:78:58:08:1d:5d:79:09:a7:93:e8:70:df:b2:b4:30:93:
         8c:b0:65:d8:d8:55:ee:15:c6:dd:2d:da:84:cb:e9:58:75:c2:
         95:05:51:ed:c5:c7:fb:69:9e:67:2c:00:eb:d7:77:46:3d:e0:
         24:50:60:e1:4d:e1:bb:55:ca:16:5d:17:fc:f5:4b:77:8d:b2:
         26:ea:0e:c1:e0:29:89:f5:f5:71:68:ef:65:5f:a9:63:f4:10:
         13:6c:45:b8:e5:c0:3f:01:74:b8:c3:73:10:01:6b:14:b1:54:
         28:eb:d0:8e:dc:21:1c:90:8a:97:a7:86:60:b0:ed:90:8b:66:
         2f:15:bd:f2:59:6f:e1:9f:be:a4:d2:a1:53:f4:1b:dd:54:d0:
         2c:4a:f1:25:f3:26:e7:fe:10:3a:16:81:42:ea:3b:42:7e:ae:
         ee:26:df:bd:f8:7a:94:e1:fc:55:ec:4f:3c:42:79:e3:36:4b:
         42:8b:7b:54:84:b9:c0:56:5b:b3:aa:62:23:a3:b9:83:52:9e:
         a9:a9:5f:77:dd:c1:df:eb:bb:a4:9d:18:20:2e:40:de:3a:56:
         b7:b7:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:35:06 2024 by rpki-client on console-ams.rpki-client.org