Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File:                     XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier:          pPPOT7ylRYEmGraoSoKyJ41M4AnL9eXkasXVL2AFAOo=
Subject key identifier:   4C:A9:4E:4A:C8:BB:3D:38:01:6A:86:D0:CA:A6:3F:40:85:A5:B3:03
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer:       /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial:       0191F9A2B744E0F0542B196152E0B74A0E60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number:          12BC
Signing time:             Mon 16 Sep 2024 07:01:16 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:16 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:16 +0000
Files and hashes:         1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: /2zRGheh8ukeynmJKTx8xsQnuDmNmnlw3lQykdzSIKc=)
                          2: bD8y3CrlHmdP0D8gmbV0q2bE7MY.roa (hash: BjMvOoxfQwjqHVsLjoQqT8eG3s4d4OJMFwIINRMycOU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:b7:44:e0:f0:54:2b:19:61:52:e0:b7:4a:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
        Validity
            Not Before: Sep 16 07:01:16 2024 GMT
            Not After : Sep 17 07:01:16 2024 GMT
        Subject: CN=4ca94e4ac8bb3d38016a86d0caa63f4085a5b303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:b0:17:aa:ff:6a:9b:70:df:77:c7:d8:b1:
                    9f:a0:83:02:b3:6e:37:30:95:06:09:e8:35:22:99:
                    89:2a:78:50:6b:64:89:dc:4f:60:f2:6d:69:be:d1:
                    a4:06:9a:42:d1:ef:6e:6d:7d:c3:f0:ef:b1:7a:09:
                    af:2e:ba:e1:cb:76:31:98:71:2b:ab:5f:14:81:20:
                    70:c5:be:ea:cf:e4:ef:c0:6d:7c:46:9b:e4:d5:fd:
                    64:c4:bc:ca:98:01:16:63:d1:56:9f:03:49:26:6b:
                    83:95:b9:f1:27:62:f8:05:5e:e9:99:31:1b:81:8e:
                    26:6a:33:f0:42:e1:2d:19:e3:21:6e:07:fe:4c:ad:
                    81:e9:f6:ff:9a:6d:63:5d:23:f5:7f:8d:1d:d1:93:
                    ad:70:1a:6c:36:7d:87:c5:01:97:bd:07:4e:d3:2a:
                    b7:66:ee:95:07:5f:44:51:93:21:ec:57:d7:c0:1a:
                    06:98:5f:75:14:99:ad:d5:fc:70:fd:2a:a7:09:21:
                    d8:4a:6f:90:ef:f6:a2:a8:7a:16:49:ec:e3:b8:f6:
                    f6:1b:9c:87:21:98:22:66:64:8b:d2:48:8b:40:62:
                    72:a3:62:d8:eb:40:8d:ed:43:34:be:0c:ff:de:2f:
                    c6:48:4f:ec:a2:8e:e5:1d:46:1d:e8:a2:e0:01:d1:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A9:4E:4A:C8:BB:3D:38:01:6A:86:D0:CA:A6:3F:40:85:A5:B3:03
            X509v3 Authority Key Identifier:
                keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bb:ff:73:53:6e:5a:63:59:da:7d:fe:b7:55:a0:d5:c6:6f:
         97:33:d2:c2:b4:63:71:5f:13:87:87:d9:9c:27:7a:af:94:d8:
         ab:6c:65:cc:5f:61:d8:00:b6:98:dc:00:85:fe:0b:0f:08:5d:
         4f:4f:4d:8a:f5:58:39:bf:f8:f2:6a:1a:e0:39:62:01:d2:9a:
         9d:78:c6:27:52:e9:7d:e6:72:a6:59:d3:e6:35:40:98:22:31:
         e4:58:9b:df:35:92:e5:93:93:39:84:2b:94:22:79:55:69:85:
         bc:f8:2c:67:23:73:4c:0c:bd:00:21:ea:29:a9:75:d1:c5:83:
         17:24:97:cf:c0:1d:02:c7:fe:fe:cb:da:cc:7c:ac:41:2d:96:
         3c:fb:3b:91:45:49:46:76:84:92:ec:eb:1b:2e:90:9b:ff:dc:
         03:5e:8c:86:de:80:b5:43:32:08:d5:54:72:08:b1:89:e3:12:
         b7:b6:83:e8:2c:71:f4:f7:3e:86:fc:f0:3b:c3:b1:23:da:a9:
         b3:05:8e:9d:eb:7f:8b:ef:99:9d:e2:2e:b0:dd:23:b6:0c:3b:
         39:78:e4:d9:ec:40:43:78:ca:92:a7:df:ce:e4:9f:b9:3d:f0:
         77:64:13:54:1f:71:a2:13:1b:79:d8:ff:6d:41:62:50:82:fc:
         0b:d4:71:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:16:26 2024 by rpki-client on console-ams.rpki-client.org