Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
File:                     ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft (raw, json)
Hash identifier:          dOJkwrF/dtACTF117AZZJUem/hVUHQxXis3KyFyawFM=
Subject key identifier:   B2:14:2C:E3:CC:EC:B1:A3:76:CE:52:C4:8A:BC:EF:D0:94:F5:5B:E1
Authority key identifier: 11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F
Certificate issuer:       /CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
Certificate serial:       0191F9A2A8980AAE075512388F01DD3EE0E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
Manifest number:          015A
Signing time:             Mon 16 Sep 2024 07:01:12 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:12 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:12 +0000
Files and hashes:         1: 8cHfmHDyFVcJ8E4WKsNL1UqOxHw.roa (hash: pSsmQ5bdk8HoS43peXReW4+nGgTzEHmmu74qI3MUbSw=)
                          2: ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl (hash: dG6wKzcjM2bfaO21Ck7TRkgcUlabgkEnVBOt/7ycYSI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:a8:98:0a:ae:07:55:12:38:8f:01:dd:3e:e0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11126172bea5b0fd345406ebb4ae95ff95e3d57f
        Validity
            Not Before: Sep 16 07:01:12 2024 GMT
            Not After : Sep 17 07:01:12 2024 GMT
        Subject: CN=b2142ce3ccecb1a376ce52c48abcefd094f55be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d3:6a:90:4a:a7:8c:a6:aa:f1:06:b0:98:77:
                    f7:83:01:73:8d:f4:3e:2a:fa:6b:ad:56:9d:f6:28:
                    cc:c4:24:3a:e9:89:fd:86:c3:69:23:32:57:60:2a:
                    26:5a:76:42:f9:58:22:a1:ec:ef:af:1d:50:6e:5e:
                    89:af:4e:36:91:9c:cf:f9:d7:2c:77:d4:b4:24:64:
                    19:90:13:91:cd:8d:b3:30:b2:eb:9b:7a:13:c9:1c:
                    5d:8e:f7:82:82:1e:3f:ad:fe:80:f9:a6:c6:6e:48:
                    ed:42:c8:9b:cc:6f:f0:19:0c:78:f5:fa:99:0b:26:
                    a9:07:93:9a:14:f4:5e:58:ff:b2:ea:c5:41:00:24:
                    44:96:59:5c:75:1f:13:d1:10:6c:6a:52:84:6d:81:
                    8f:03:0f:0f:37:ad:ad:54:6a:8a:2e:af:74:68:b5:
                    f6:7c:30:f3:14:19:0d:0f:93:09:aa:ae:af:d4:79:
                    6c:39:1b:6c:9c:d9:c6:68:5d:3f:4e:3a:58:69:52:
                    c2:13:63:3d:7b:88:77:9f:7a:56:1c:bf:35:d1:31:
                    b9:b4:58:30:c0:de:4c:57:b1:84:d9:2e:22:5e:31:
                    61:33:75:4b:58:59:35:8a:3c:a7:dd:b7:e6:97:80:
                    45:80:7d:2a:9b:d2:14:f9:7f:fc:73:4a:f3:11:f8:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:14:2C:E3:CC:EC:B1:A3:76:CE:52:C4:8A:BC:EF:D0:94:F5:5B:E1
            X509v3 Authority Key Identifier:
                keyid:11:12:61:72:BE:A5:B0:FD:34:54:06:EB:B4:AE:95:FF:95:E3:D5:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJhcr6lsP00VAbrtK6V_5Xj1X8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/fd7f48-00d6-47df-8797-8d9094f3f5a1/1/ERJhcr6lsP00VAbrtK6V_5Xj1X8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2a:52:e0:79:e4:0a:f9:d6:0e:f2:fb:de:95:92:81:c8:dd:
         51:8a:5d:3a:49:11:60:59:77:ac:eb:b0:7c:73:b7:1a:50:5c:
         07:b8:ea:79:8e:0d:b9:e1:90:44:6d:5f:b1:1d:71:31:99:4d:
         33:e2:49:f7:ef:5c:ad:77:cf:63:17:04:f8:47:99:58:6b:f7:
         4a:ed:66:c1:1a:35:1d:af:bb:59:1f:46:d9:e7:56:f8:e1:20:
         f6:0a:22:b9:de:ac:77:25:5f:44:82:15:ec:1a:88:c0:7c:94:
         c9:b7:a5:4b:21:6e:6b:e3:87:b4:91:e9:32:88:f3:da:9d:70:
         36:07:18:85:20:a5:e6:87:5c:40:82:f5:b6:dd:f3:d3:0b:1d:
         13:df:09:6a:5f:9e:04:49:39:7b:41:c3:36:5a:b5:9d:65:c6:
         a1:42:ce:6e:c7:58:32:a2:93:37:8f:b6:92:9a:35:47:c7:01:
         ee:c8:04:eb:b0:92:f9:02:46:00:d4:32:65:36:31:56:5f:38:
         d3:54:04:a6:78:e6:99:af:29:17:4f:90:e3:b4:1d:3e:48:dd:
         bb:10:25:20:d9:06:f6:49:74:d9:e6:5c:31:f8:6a:50:3d:0b:
         f6:89:03:26:10:d0:23:2e:05:33:6f:97:aa:c6:d6:54:e9:c7:
         3e:9d:c1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:23:21 2024 by rpki-client on console-ams.rpki-client.org