Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
File:                     a-tglLyrS9Ox9vVsUYK6EiDiK28.mft (raw, json)
Hash identifier:          24rhjsUQ/5Mu+q+ioFFwP1xLkS4R/YC5fhr075yp3wY=
Subject key identifier:   1F:33:2F:03:DF:45:7F:E9:55:35:42:9B:57:7F:B5:F6:AD:42:55:C4
Authority key identifier: 6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F
Certificate issuer:       /CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
Certificate serial:       0191FA7E33C9EF81C83CFE7874F53167C466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
Manifest number:          013B
Signing time:             Mon 16 Sep 2024 11:01:00 +0000
Manifest this update:     Mon 16 Sep 2024 11:01:00 +0000
Manifest next update:     Tue 17 Sep 2024 11:01:00 +0000
Files and hashes:         1: JNqofKdTCyKuFPaKJyP6SgPUo-U.roa (hash: 45wsfdI11Lb9wpD2yzKU9os/SaZqc85cR8n+5rmxjjE=)
                          2: a-tglLyrS9Ox9vVsUYK6EiDiK28.crl (hash: Z8ZLR5Zb5xUjMuiqJ2HNXM/rcfvf7vGJjbOZed1K0K4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:33:c9:ef:81:c8:3c:fe:78:74:f5:31:67:c4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6beb6094bcab4bd3b1f6f56c5182ba1220e22b6f
        Validity
            Not Before: Sep 16 11:01:00 2024 GMT
            Not After : Sep 17 11:01:00 2024 GMT
        Subject: CN=1f332f03df457fe95535429b577fb5f6ad4255c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:3b:53:1f:ec:a7:b7:c8:cf:a5:6a:df:de:
                    a0:52:56:03:af:a3:1d:dc:c1:29:91:ac:7e:4c:09:
                    f0:78:4b:fb:82:cf:35:ae:e2:38:fd:c2:4b:26:dc:
                    60:c7:bc:18:cf:fd:e2:02:da:36:64:ca:3a:0b:6f:
                    e6:8e:e9:ed:32:fd:88:56:fd:78:36:cc:05:13:44:
                    29:a2:2d:65:9b:c1:d3:c1:65:ae:04:59:dd:36:76:
                    c3:a1:3d:62:e7:80:f4:cd:e9:0c:4a:76:a4:10:25:
                    46:ab:e2:fd:18:8f:8c:bf:58:62:39:95:a1:36:7b:
                    eb:21:22:3c:39:d1:0d:88:6f:92:d4:d8:79:b8:af:
                    8a:db:fa:aa:a8:b5:56:be:ec:13:48:9c:a6:02:d7:
                    00:ac:3a:e9:b0:4f:01:50:bd:15:21:f9:65:62:ef:
                    55:80:72:4f:67:e8:b6:8e:59:50:00:2d:ce:d3:ef:
                    21:b0:c8:0f:ba:f7:19:13:46:59:9c:29:60:e6:5e:
                    d3:8d:02:b2:a0:7b:9c:77:37:2a:34:fb:13:b8:94:
                    6b:fe:f5:c2:ee:f1:cb:d0:54:4d:62:9e:b5:b2:e5:
                    e0:11:3d:3d:f7:9d:e4:42:8b:39:05:54:e7:13:62:
                    28:bf:5f:41:02:37:c5:58:ce:39:19:0e:f5:df:70:
                    1c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:33:2F:03:DF:45:7F:E9:55:35:42:9B:57:7F:B5:F6:AD:42:55:C4
            X509v3 Authority Key Identifier:
                keyid:6B:EB:60:94:BC:AB:4B:D3:B1:F6:F5:6C:51:82:BA:12:20:E2:2B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-tglLyrS9Ox9vVsUYK6EiDiK28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba4640-163e-465f-90f9-ea587fd658b2/1/a-tglLyrS9Ox9vVsUYK6EiDiK28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:82:8d:7b:a9:9d:54:67:f5:04:77:18:0a:b1:b6:89:8e:ff:
         3f:6f:61:93:8e:10:45:76:c2:00:97:9b:d0:9a:50:f6:b2:fa:
         a9:09:5f:49:b4:73:b5:da:36:5c:b1:52:02:f7:67:c8:13:16:
         f0:b9:ba:9c:da:61:7a:ab:0f:0a:fd:e8:7c:0d:1f:af:5c:81:
         05:32:1d:a8:82:22:5f:62:79:30:64:82:d2:bc:78:52:56:c1:
         66:86:78:46:3a:48:6e:2d:bc:c2:1b:09:25:88:d9:85:d9:8c:
         ea:08:3f:36:83:c2:77:60:b3:bb:37:4b:d1:39:39:45:ed:da:
         7a:44:b1:45:50:93:bb:b0:9f:47:e5:af:2a:ac:f0:47:24:98:
         2e:18:90:d8:18:7c:ed:b0:d6:3e:58:e5:98:9d:65:48:df:1a:
         12:ff:a7:f7:9d:37:5f:e1:f3:49:65:12:dd:df:f7:b1:19:c6:
         f6:73:b9:52:f6:90:4c:7e:73:b8:d9:ed:9d:8d:06:56:c4:85:
         30:fc:99:0f:1c:b8:a0:da:d3:51:06:1c:fd:a5:ce:4b:6f:bd:
         6d:f8:4f:e2:e8:89:0c:c4:86:ea:4f:01:21:7d:50:db:32:d1:
         5e:e5:b3:fc:ef:7b:71:99:e7:4c:5d:b9:09:b3:fb:b4:9e:02:
         ff:74:4d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:15:04 2024 by rpki-client on console-ams.rpki-client.org