Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
File:                     XEXOsYsUpzcoK3WvC6Fs_9emq64.mft (raw, json)
Hash identifier:          SfyOBVQ06wZxd0Y+AgGK/Z1xVtgXDt/z4mQ5KQyD4lE=
Subject key identifier:   C2:24:77:92:AE:68:D9:8D:E7:0A:23:2A:7E:22:A1:10:21:CA:31:42
Authority key identifier: 5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE
Certificate issuer:       /CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
Certificate serial:       0192395D222F359954216FCDA46D4F627699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
Manifest number:          0970
Signing time:             Sat 28 Sep 2024 16:00:57 +0000
Manifest this update:     Sat 28 Sep 2024 16:00:57 +0000
Manifest next update:     Sun 29 Sep 2024 16:00:57 +0000
Files and hashes:         1: XEXOsYsUpzcoK3WvC6Fs_9emq64.crl (hash: u1hLsvD37FODzAJuneKf0GFi17TKuZdlZ2H7PpO6oGk=)
                          2: qB1AiMx_cSLDraUQy7ALLdASAEg.roa (hash: aJy3Zgq/HnPCgrohDsCnyRmk5K9jdkomIRf26auFHd8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:5d:22:2f:35:99:54:21:6f:cd:a4:6d:4f:62:76:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c45ceb18b14a737282b75af0ba16cffd7a6abae
        Validity
            Not Before: Sep 28 16:00:57 2024 GMT
            Not After : Sep 29 16:00:57 2024 GMT
        Subject: CN=c2247792ae68d98de70a232a7e22a11021ca3142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:bf:40:3b:7d:90:7e:9b:c1:03:8c:14:e8:
                    11:f5:e6:69:65:61:ee:e1:49:f9:bb:07:26:1b:cc:
                    d4:b5:23:f9:7c:5d:bf:b5:84:a6:39:7e:d4:2c:f1:
                    b2:c7:5a:27:c6:74:b6:7a:51:51:54:3e:33:e0:cc:
                    91:31:be:94:c3:a8:26:12:8c:9b:07:d6:21:8c:51:
                    8a:6f:3d:67:2b:8f:ff:94:6c:ec:8a:a6:88:e1:a2:
                    3e:75:c0:af:eb:3c:19:c0:22:8a:56:c7:d1:e4:4e:
                    68:45:74:da:91:b0:f1:89:c3:4e:14:dd:78:5c:79:
                    a0:05:12:7f:60:d6:56:6d:35:11:d7:d0:68:4f:97:
                    30:36:68:a7:43:4f:4e:6a:42:2f:58:ad:85:bd:2b:
                    bb:7d:4e:3c:03:d2:66:d4:37:01:d4:f4:71:9d:0f:
                    17:de:00:cd:ca:f4:bd:74:52:12:9b:fe:11:3b:74:
                    c2:41:1e:77:96:8b:bd:12:7c:bc:88:d6:5b:10:26:
                    0b:34:1f:4e:56:8b:4c:ac:8e:bf:25:32:d8:4b:a2:
                    1a:13:ff:40:4a:fc:9d:af:0e:a4:8b:2c:16:ce:34:
                    63:19:3a:67:ca:76:8b:5f:04:97:df:e2:51:1d:e0:
                    4b:d7:50:b9:99:2f:24:06:d1:9c:d8:8c:58:60:e0:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:24:77:92:AE:68:D9:8D:E7:0A:23:2A:7E:22:A1:10:21:CA:31:42
            X509v3 Authority Key Identifier:
                keyid:5C:45:CE:B1:8B:14:A7:37:28:2B:75:AF:0B:A1:6C:FF:D7:A6:AB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEXOsYsUpzcoK3WvC6Fs_9emq64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d71ef8-4b98-400a-89ee-c61bf7749df5/1/XEXOsYsUpzcoK3WvC6Fs_9emq64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1e:6e:5f:e0:31:15:97:47:ea:8f:c0:71:8a:13:67:ae:30:
         90:fe:ae:b9:5c:d9:52:de:fc:e8:4b:08:95:88:f7:3e:1f:f8:
         a1:cb:bc:43:34:19:c6:06:21:3f:7e:44:9c:91:74:21:b0:6e:
         62:24:e9:fa:bc:e5:92:d6:11:a9:f2:af:cc:f0:b3:a3:af:70:
         7b:9a:0a:7f:9f:43:81:10:7e:48:5d:86:90:dd:7f:e7:c1:86:
         dd:7c:cf:34:f3:1b:60:fe:99:de:16:b0:29:91:e5:c5:65:55:
         61:2e:ea:cd:c9:92:e6:6d:37:a2:67:12:82:00:a3:94:ad:4f:
         82:1c:bf:8a:6a:78:11:d2:d5:b9:ae:0a:c9:6e:a8:6f:1e:cb:
         a1:f3:87:2b:74:b0:68:42:78:a1:69:a4:a2:ec:30:41:bd:f0:
         79:8f:df:e7:da:e4:2f:dc:8a:24:79:05:66:47:e8:eb:09:72:
         d8:62:e5:f0:92:1d:a8:90:5b:af:4f:d4:3f:a5:f7:80:ad:c3:
         0d:be:c7:15:5b:bf:a1:5a:54:6d:62:09:da:a2:47:8d:17:1c:
         12:6b:2e:e5:2b:f6:01:a2:e4:ec:05:ee:c6:9f:a0:62:97:98:
         3e:1e:a6:ed:a2:20:76:3b:ae:0b:7d:04:81:4f:de:51:ab:04:
         b1:b2:4a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:20:18 2024 by rpki-client on console-ams.rpki-client.org