Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
File:                     818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json)
Hash identifier:          Wg/CU9wbaT1NJZW1022Yqx340qEp0/29l1zA0g59Ok4=
Subject key identifier:   E5:09:8C:8B:BC:EA:32:AB:29:DA:79:64:C5:CA:53:0C:33:3B:00:96
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Certificate issuer:       /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial:       01940645F69EF6D8480AFD241D41879CBB25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
Manifest number:          13C9
Signing time:             Fri 27 Dec 2024 04:00:35 +0000
Manifest this update:     Fri 27 Dec 2024 04:00:35 +0000
Manifest next update:     Sat 28 Dec 2024 04:00:35 +0000
Files and hashes:         1: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: 4z17DIWJsBnE2OacdAyUhjE8QUA8/e40f9rAnZ+jU1s=)
                          2: AvvM0eVJUwQ18tJsn1Z8nhhL5CU.roa (hash: gNe/KShYJ72tRHOZLQOiL3Cox6p8sfs17url9uX/GGc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:45:f6:9e:f6:d8:48:0a:fd:24:1d:41:87:9c:bb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
        Validity
            Not Before: Dec 27 04:00:35 2024 GMT
            Not After : Dec 28 04:00:35 2024 GMT
        Subject: CN=e5098c8bbcea32ab29da7964c5ca530c333b0096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:4f:1a:da:80:51:e4:78:ca:35:76:b3:00:
                    e2:69:19:1e:63:7c:cd:1b:d7:0c:16:db:ec:12:51:
                    36:a9:4b:d5:02:7a:8c:51:14:b1:10:53:92:d9:df:
                    39:c8:8f:86:53:37:e8:21:b9:73:26:e8:6e:8d:2d:
                    cf:0f:ad:09:5a:db:e4:9d:75:d4:26:9f:c1:c5:8b:
                    04:48:79:2e:f7:2e:d4:7b:fd:41:26:d5:a8:02:b9:
                    6c:8f:08:16:d9:65:32:36:71:ab:03:90:b3:f3:1b:
                    5d:8b:12:13:db:9e:b3:cc:86:55:84:a5:c4:6f:cd:
                    8f:02:e1:70:3f:03:60:8a:30:1f:01:68:9e:32:26:
                    14:83:ad:13:b4:e4:4c:8a:19:46:2d:2d:c1:5c:7d:
                    f9:c2:03:b2:55:d4:cd:aa:a6:0f:82:d6:ae:10:10:
                    49:fd:86:a0:6f:f0:18:24:47:e2:1e:09:04:56:45:
                    1b:2b:0c:d6:1a:46:bc:d9:16:78:3e:d5:65:0a:69:
                    aa:33:5f:3f:b9:11:15:26:d7:dd:a9:da:12:79:08:
                    e6:cd:ca:f5:a3:da:e0:d0:3b:13:18:11:59:8b:e7:
                    00:70:a0:c3:d5:5a:33:6c:29:b0:a0:50:4f:eb:dc:
                    22:17:36:09:eb:8e:35:00:b6:5d:ea:06:b5:c6:5f:
                    c6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:09:8C:8B:BC:EA:32:AB:29:DA:79:64:C5:CA:53:0C:33:3B:00:96
            X509v3 Authority Key Identifier:
                keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:50:2c:f0:fd:ef:4a:5e:9d:01:eb:f6:f4:c4:8e:87:ae:43:
         ab:a8:d5:99:5c:59:e4:3d:ab:51:5f:9c:01:66:21:fe:20:0b:
         c7:b5:df:d3:bf:fc:25:47:7f:08:7a:ca:c5:4b:da:9d:b6:07:
         8d:71:d0:5e:20:e4:d6:69:a3:ca:84:82:71:cb:1e:9d:aa:59:
         fc:cd:96:d3:8f:69:98:eb:0f:3a:f4:8c:a4:1c:36:73:dd:46:
         86:ea:73:6a:58:bc:0c:29:02:4f:a3:59:a0:5c:65:41:96:58:
         06:be:f9:e2:f6:ea:3c:df:f5:c7:9a:b8:e4:eb:c6:b1:bb:09:
         3a:5c:64:53:45:c3:fb:93:ba:49:19:c1:c8:84:b6:1b:4d:b4:
         9c:1f:d5:1e:ae:91:83:bb:cd:8b:48:d1:b3:af:bb:a4:2a:c2:
         7e:3a:e1:ab:7c:2d:88:e2:53:8f:8b:29:de:11:66:f8:8e:2a:
         87:72:8f:99:7e:ea:3c:cc:72:67:e4:01:bd:34:87:ee:fd:ed:
         88:2e:91:3d:70:f3:a9:7e:0c:09:46:76:e3:19:e8:c0:99:e6:
         16:dc:f2:89:c8:af:fa:a5:77:74:57:21:4d:03:91:25:b8:08:
         61:78:de:3f:f1:ff:be:93:b7:bd:e1:c0:1e:b6:7c:86:d3:4f:
         92:7f:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:58:22 2024 by rpki-client on console-fra.rpki-client.org