Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
File:                     X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft (raw, json)
Hash identifier:          sDjwrfRupi2cv+RTZ4qVj/ofD90ZUPzn/zPdcYX1KB8=
Subject key identifier:   C9:AF:44:3B:D1:43:48:DF:B8:1F:47:E9:07:00:B7:F3:B5:8E:B6:DA
Authority key identifier: 5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
Certificate issuer:       /CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Certificate serial:       0191FA1073684151164B8B8F7C43D7CD7CEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
Manifest number:          F1
Signing time:             Mon 16 Sep 2024 09:01:07 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:07 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:07 +0000
Files and hashes:         1: X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl (hash: HYABpujRqnX9zcfZW6NgSu6sDG71AIhM+dwLMKtBHmU=)
                          2: _Iz12Gr5-yP8EUDgPII5Gkrf8XY.roa (hash: z9tYJgk72LOicF/0pwzdlVsj500cibqx/MGGQcVCuRE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:73:68:41:51:16:4b:8b:8f:7c:43:d7:cd:7c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
        Validity
            Not Before: Sep 16 09:01:07 2024 GMT
            Not After : Sep 17 09:01:07 2024 GMT
        Subject: CN=c9af443bd14348dfb81f47e90700b7f3b58eb6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:37:f5:fe:74:34:bc:9a:ba:80:0b:04:61:
                    e7:3f:99:af:6a:df:35:f8:f0:57:41:0a:9d:b1:ed:
                    e1:63:07:29:59:21:8f:c2:17:b9:e7:6f:5f:a3:d9:
                    d0:28:3c:bd:0b:b9:d8:58:17:41:2e:68:5a:47:6b:
                    dd:09:a0:62:68:4f:8b:f7:83:ab:18:55:cf:2e:6b:
                    2e:34:e4:1b:b2:11:5d:8f:8f:46:53:bf:ff:7c:6e:
                    14:35:25:de:64:a4:1e:f6:01:eb:e2:14:9f:50:95:
                    02:fe:d5:0a:ff:54:1b:a7:33:46:2a:3f:9d:87:14:
                    9c:77:c4:fc:ed:9d:b1:95:df:65:8c:a6:2d:85:fa:
                    58:54:4d:cf:d4:1d:40:1f:8b:4a:96:e2:15:d0:cf:
                    4c:56:71:ab:33:95:27:35:68:ac:e4:86:06:e1:95:
                    8a:b5:a8:1d:56:bd:8f:dd:2a:db:a9:d3:36:2d:f6:
                    bb:a5:70:9f:de:25:f6:a0:3e:7d:57:e0:ad:b8:29:
                    66:2b:af:05:f3:af:01:cc:f5:d5:6d:86:c8:84:2e:
                    7a:fb:cf:78:69:2e:e5:ee:34:c7:54:f3:3d:c7:ca:
                    98:ae:ae:88:ff:48:69:cc:da:a8:d5:af:dc:84:27:
                    82:59:d7:2b:30:3f:25:fd:3a:f7:35:c8:34:38:5b:
                    af:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AF:44:3B:D1:43:48:DF:B8:1F:47:E9:07:00:B7:F3:B5:8E:B6:DA
            X509v3 Authority Key Identifier:
                keyid:5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:34:57:79:46:ff:d4:00:84:40:77:38:04:d3:7a:86:ba:23:
         04:83:3a:f0:ad:74:de:5c:13:03:15:24:3b:05:06:b8:3b:c9:
         af:72:ec:dd:0c:10:ec:f1:79:0c:32:51:0e:a0:78:fe:e6:c1:
         53:9f:61:bf:67:06:ca:bc:09:4f:ed:57:7d:3e:36:fd:5f:99:
         d7:61:c1:53:db:5d:d6:82:0a:77:9c:e2:98:b3:13:37:51:64:
         3f:8a:5e:8a:db:43:14:5f:8f:fb:b3:e1:87:06:d9:02:9c:6d:
         9a:03:79:60:c7:f7:a2:70:47:32:73:ea:c0:44:55:a9:07:e4:
         b2:f2:e5:89:55:b5:df:32:72:7b:90:47:2c:e0:92:77:76:17:
         dd:35:ef:53:c9:5e:34:63:1b:30:bc:fc:65:8d:ec:03:09:f0:
         78:af:a1:82:56:41:2d:c8:b2:d5:67:f1:fe:00:33:c5:08:eb:
         a0:45:6f:fd:68:72:2e:9a:aa:d8:a9:d3:45:83:6d:1b:91:18:
         04:f4:47:eb:1a:82:d3:80:94:f7:6a:bf:1c:c9:f6:f5:1b:44:
         04:c1:ae:91:a1:29:a7:55:c2:d2:01:98:6c:1d:e7:3b:73:6f:
         cf:d4:67:40:cd:39:1e:d5:5a:3b:82:9b:ed:2d:9a:bf:46:f9:
         4d:0f:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:19:59 2024 by rpki-client on console-fra.rpki-client.org