Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
File:                     KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json)
Hash identifier:          5L4sfrKiXkZGBHAQF088qUiLJGwzMEXC8FD4HIbIrMc=
Subject key identifier:   50:E9:0F:A4:D3:1B:EA:FC:B8:2A:1E:8D:67:DC:8D:2A:61:5D:4C:90
Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
Certificate issuer:       /CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Certificate serial:       0191FA4797671981F53E4148A7AD0DD6FEF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
Manifest number:          DE
Signing time:             Mon 16 Sep 2024 10:01:21 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:21 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:21 +0000
Files and hashes:         1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: B7U0maVVm/AlZXznc+C6kZieuYEMtHOryTobHY8dIxI=)
                          2: UElPgndSLpWp6U3b-IMd8sNsZUM.roa (hash: yxASVRXoO5N0YemflH+ME8x/vICNaE65whpxYNjaUMI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:97:67:19:81:f5:3e:41:48:a7:ad:0d:d6:fe:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2
        Validity
            Not Before: Sep 16 10:01:21 2024 GMT
            Not After : Sep 17 10:01:21 2024 GMT
        Subject: CN=50e90fa4d31beafcb82a1e8d67dc8d2a615d4c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:0a:53:8d:0d:a3:2a:9d:d7:5e:54:2a:9f:
                    2e:cf:c2:21:0a:41:89:ef:02:a9:60:b5:0c:63:b2:
                    1d:41:c7:1d:5d:da:4d:d8:1b:f6:b3:e6:6a:72:a0:
                    a2:51:a8:67:b0:50:e2:ac:75:c0:bf:ca:05:9e:72:
                    69:12:58:57:23:46:65:67:f8:69:de:22:60:67:a4:
                    19:5e:e9:5a:e8:c1:3f:25:9e:b4:ac:53:e5:2c:fe:
                    9e:8a:66:fb:88:f6:36:9f:0d:90:37:15:7f:15:87:
                    51:fb:24:57:31:ac:3e:7f:85:dd:bd:93:d5:97:5a:
                    b9:75:40:86:82:7a:c5:da:35:b3:c2:36:e1:22:65:
                    3d:41:99:5e:39:2e:5d:40:0b:91:21:81:b0:0c:c4:
                    7d:c4:85:1f:68:62:1a:c1:84:ec:49:d4:89:bb:b2:
                    ec:11:01:1d:56:2d:d5:c2:7c:ba:fd:c8:c6:0e:94:
                    f3:c8:62:c9:5a:50:27:6f:03:7c:bc:63:ff:f1:01:
                    ec:de:52:5e:47:07:af:0e:b7:39:21:34:5f:74:9c:
                    6f:6a:7e:9a:4e:73:0a:7e:24:cb:cb:cd:b7:28:b1:
                    34:31:8e:9c:c1:44:fa:4d:22:03:b4:64:2a:60:e0:
                    1b:1b:04:4b:99:40:cb:63:3e:9f:94:6c:ca:5e:52:
                    43:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E9:0F:A4:D3:1B:EA:FC:B8:2A:1E:8D:67:DC:8D:2A:61:5D:4C:90
            X509v3 Authority Key Identifier:
                keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:49:d0:04:80:f1:95:6b:21:45:13:bf:a3:2d:b9:6b:ce:55:
         1e:f1:3e:dc:c7:21:c7:34:25:2e:9a:94:3d:95:8a:94:dc:3b:
         e1:16:87:9e:d9:fe:90:cc:66:71:f7:ba:d7:a9:dc:20:a0:40:
         6b:d3:df:fa:53:3b:0c:d7:64:e0:68:8e:31:49:ad:c1:a0:5c:
         42:a5:6e:d5:fd:47:6f:46:28:1f:42:8c:8e:4e:f1:a3:94:88:
         52:20:9a:4b:45:6d:99:ab:a4:91:73:a5:09:1d:49:98:58:e5:
         d9:ef:f8:0b:34:9a:3b:ba:46:b1:58:ce:3f:8d:a7:6d:7c:45:
         81:77:40:34:f1:77:54:a3:db:bb:3e:be:6d:f4:1a:a4:a5:a9:
         ab:88:c9:df:d1:d0:90:3b:11:7a:98:37:85:e8:98:7b:03:c0:
         be:18:b8:9d:2b:de:91:7a:b8:30:63:a1:04:a0:ee:c9:b2:a2:
         67:b7:ac:17:f1:b1:3f:b0:59:e9:0c:f5:89:63:dd:c4:9e:71:
         ce:63:41:da:13:03:43:d4:09:ad:66:48:2d:60:ea:2a:87:04:
         a3:06:a2:9e:d6:32:26:05:89:d2:83:b2:c5:65:62:58:e6:72:
         d4:b5:3c:72:87:11:7d:9e:1d:fe:ed:73:09:4b:65:fd:66:39:
         aa:b0:94:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:19:03 2024 by rpki-client on console-fra.rpki-client.org