Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File:                     sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier:          wmgnUoreeB8CPh087BBDfPMsQB0fRF8tC6ExzVx6el0=
Subject key identifier:   EC:86:5F:B2:E7:F0:B7:F1:78:03:81:33:15:E9:9B:52:2D:17:77:FA
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer:       /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial:       0191F9A26D00F08D2A7AF164923F4A1874CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number:          8C
Signing time:             Mon 16 Sep 2024 07:00:57 +0000
Manifest this update:     Mon 16 Sep 2024 07:00:57 +0000
Manifest next update:     Tue 17 Sep 2024 07:00:57 +0000
Files and hashes:         1: U1D_m81l2jgjA4juSSiHI1zbTlI.roa (hash: LDmDEyNEiY4UVFRoPUf/70s5SCJdcaPrc0vKgaKS86s=)
                          2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: +kyj1//kblpl0+oqnEmXqwCsHVjanuYCd2jg+Bowrkc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:6d:00:f0:8d:2a:7a:f1:64:92:3f:4a:18:74:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
        Validity
            Not Before: Sep 16 07:00:57 2024 GMT
            Not After : Sep 17 07:00:57 2024 GMT
        Subject: CN=ec865fb2e7f0b7f17803813315e99b522d1777fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:58:54:e3:09:ca:68:fd:36:0a:01:64:19:
                    3a:e0:4e:5f:9c:d8:72:28:04:43:49:55:f5:bf:fd:
                    c1:a4:97:71:5c:7b:08:26:0a:fd:0d:7e:9d:f3:d1:
                    90:1e:11:2f:8b:b1:68:e7:ae:60:c8:e7:bf:3b:0b:
                    da:cb:f6:65:8b:51:3d:e6:b2:1b:c3:dd:7a:0b:45:
                    c3:5b:c7:36:dd:b7:06:6e:e8:3a:a3:05:59:b2:4a:
                    71:52:48:37:1d:e5:82:5b:6d:7c:c7:9d:30:95:83:
                    47:11:4a:d8:80:4d:f6:61:2d:72:4e:8b:7f:a0:51:
                    f7:96:e9:52:9f:fe:d5:e0:c1:42:00:fc:4c:19:c3:
                    09:88:94:02:7e:f8:2e:fb:d2:c0:5c:c5:68:82:9b:
                    89:ce:bf:69:52:69:4e:88:79:ae:ff:27:87:1d:ab:
                    95:1f:25:64:24:16:2a:85:58:18:96:32:a7:25:ea:
                    41:08:96:b1:e4:52:e1:55:48:6f:39:d4:cd:7b:0e:
                    35:4f:f0:78:fd:85:cb:31:eb:c9:cb:50:dd:09:6b:
                    9e:95:aa:f5:73:02:25:da:73:ec:26:40:ce:cf:43:
                    41:63:97:4a:67:54:6c:9a:9c:4b:10:d2:f3:01:28:
                    be:ae:f4:b0:ee:fe:31:12:e4:c3:31:96:99:f8:6b:
                    1f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:86:5F:B2:E7:F0:B7:F1:78:03:81:33:15:E9:9B:52:2D:17:77:FA
            X509v3 Authority Key Identifier:
                keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:28:62:85:02:7e:f2:3e:b8:e8:c2:0c:af:48:f6:52:d8:02:
         18:d5:2d:0e:48:2c:b5:71:7e:30:2e:00:d4:55:e0:51:4c:37:
         94:19:20:82:ed:80:66:09:90:a3:b8:3a:3a:d4:e0:f5:77:3b:
         a1:05:b8:4a:50:17:52:82:23:b0:c7:56:84:d9:98:bb:74:33:
         bd:21:48:59:23:e2:f8:e3:e4:81:7d:f4:f6:7b:d8:77:b7:21:
         69:08:51:6a:20:2c:87:42:65:d8:a2:71:85:8e:74:72:48:5a:
         8b:56:38:12:e7:ff:d2:b5:d9:af:de:2a:08:6e:9c:cb:ed:95:
         b9:97:50:f8:a2:ee:ba:25:10:70:00:d5:ba:80:6a:fe:e3:cd:
         1b:fc:d7:4e:b0:43:fa:67:00:81:10:f3:87:af:98:c2:f0:e5:
         9a:bd:41:bc:d0:bb:0c:38:6e:6e:ba:fa:64:ec:99:bf:cd:29:
         87:a9:0b:c3:f7:f9:67:80:87:98:67:78:a5:3d:c7:89:82:4b:
         98:b5:3a:7d:2d:03:9b:fb:31:26:14:ca:cf:21:eb:66:cc:6e:
         13:22:d2:e6:f0:9b:bc:a5:f5:7b:fb:2e:8b:ea:cc:bf:ef:d3:
         89:0d:b6:81:60:61:1a:63:1a:c3:99:f8:b4:c8:b4:39:0a:b9:
         ef:d3:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:13:46 2024 by rpki-client on console-fra.rpki-client.org