Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
File:                     2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft (raw, json)
Hash identifier:          SY/KhTjsmCgX4iN20idg9xgNzAB6ssTeeoEV79XgFT0=
Subject key identifier:   09:EA:5C:18:1F:EA:78:84:6C:1E:E2:D5:2E:5A:5C:BD:C8:55:F0:53
Authority key identifier: D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C
Certificate issuer:       /CN=d977120937500eb46696428962e510e02c348e6c
Certificate serial:       0191FB5A7DA2AFEE56FC7CBC3B121B22FCD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
Manifest number:          09A4
Signing time:             Mon 16 Sep 2024 15:01:37 +0000
Manifest this update:     Mon 16 Sep 2024 15:01:37 +0000
Manifest next update:     Tue 17 Sep 2024 15:01:37 +0000
Files and hashes:         1: 2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl (hash: sMwmULREeeYdqrWPBLfgpZPtRdeD4y0yKb7rte1Fvg4=)
                          2: nDxjRmjDDBO2JWgOAzMnjjqzEf8.roa (hash: rfF1fuFzl/sQxepNG6hHu9yz36Eel4vqO7WtA16PFkY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:5a:7d:a2:af:ee:56:fc:7c:bc:3b:12:1b:22:fc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d977120937500eb46696428962e510e02c348e6c
        Validity
            Not Before: Sep 16 15:01:37 2024 GMT
            Not After : Sep 17 15:01:37 2024 GMT
        Subject: CN=09ea5c181fea78846c1ee2d52e5a5cbdc855f053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:7e:ed:4d:2d:d9:27:c3:34:7a:f2:57:1a:
                    cf:3d:ee:a9:52:a8:e0:3d:07:b4:33:fb:63:9c:56:
                    6a:d6:9e:42:05:0b:21:19:74:33:b6:7f:99:65:c4:
                    89:60:75:f2:32:1a:bf:3a:df:e4:ee:4c:0e:55:dd:
                    17:58:06:25:b8:20:3e:5b:b3:3f:e4:31:27:86:a7:
                    8f:d3:2c:b9:99:bd:3f:17:4e:f1:e7:dd:a9:94:f2:
                    48:e8:51:ca:f1:85:4b:ea:6c:84:0e:da:59:1c:f8:
                    4e:c9:b0:f8:86:f3:8f:8d:f7:cf:17:71:08:f4:5b:
                    7f:c4:49:5d:25:10:1f:42:f3:57:40:6b:b1:23:b2:
                    23:c4:db:79:2f:fc:58:9b:e4:25:e1:d1:2d:82:57:
                    68:30:e4:b8:4b:24:59:3a:92:1f:95:4a:a3:1f:c9:
                    71:aa:73:89:63:65:47:9b:90:f3:01:31:b3:17:8a:
                    79:fc:da:bf:da:71:23:70:90:02:ca:85:12:34:a1:
                    ee:6f:e4:07:12:42:3f:0a:41:4a:32:4b:27:cb:2c:
                    87:f3:19:c4:48:da:9b:7f:af:f4:1f:1d:99:bf:e7:
                    10:1f:4a:ea:f4:be:7a:00:52:ee:9d:71:6b:03:37:
                    e6:48:4c:24:d9:88:c1:85:c1:8b:2b:63:68:40:a0:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EA:5C:18:1F:EA:78:84:6C:1E:E2:D5:2E:5A:5C:BD:C8:55:F0:53
            X509v3 Authority Key Identifier:
                keyid:D9:77:12:09:37:50:0E:B4:66:96:42:89:62:E5:10:E0:2C:34:8E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9eedb9-e594-415b-b88a-de381db436ec/1/2XcSCTdQDrRmlkKJYuUQ4Cw0jmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:60:90:86:be:31:29:21:fa:a2:b1:2f:b7:c3:a1:3b:44:23:
         f0:83:1e:7b:f9:f6:c4:33:94:65:7d:e3:00:de:14:ec:90:0e:
         2f:8d:b0:67:0a:91:8f:75:48:0e:f3:4d:98:08:c7:6e:07:0f:
         26:1b:c5:61:2a:ac:70:c0:23:c3:3d:71:8c:a6:ad:a5:e7:88:
         5e:c8:0b:62:2e:f9:d6:8c:de:59:93:65:42:d4:32:85:f2:18:
         fd:91:22:bb:a9:1b:5e:ed:79:57:fa:cb:95:e9:9e:9b:31:a4:
         b2:57:a8:2e:37:29:ef:8a:43:79:a4:db:05:11:77:c9:67:c8:
         3c:ed:98:8f:02:52:87:0f:cf:8c:e6:0f:27:fa:51:28:b3:b3:
         73:a2:75:9a:ab:f8:21:4b:0f:96:55:8d:4a:98:23:f2:61:fd:
         39:05:4b:c0:c1:84:d0:cf:2b:aa:61:f3:e6:3c:f4:65:e9:be:
         89:38:92:7a:12:b3:91:4e:a5:64:dd:ac:f3:e0:40:97:02:56:
         c8:73:fd:d5:52:2e:5d:37:80:4f:22:01:f6:80:bd:af:20:09:
         fc:23:47:76:1c:ed:85:f6:2e:a5:ad:60:8a:0f:0d:63:df:74:
         c1:0f:9b:f1:31:b1:c5:e1:0f:c3:b2:88:e1:e2:fd:20:a1:78:
         12:9c:44:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:21:17 2024 by rpki-client on console-ams.rpki-client.org