Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
File:                     L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft (raw, json)
Hash identifier:          5ADknIpgbcHcgTWOCZbDjtYpwelvGGOzOJQ4j1xxUDM=
Subject key identifier:   AE:B6:18:EC:95:69:D9:CB:F4:9B:9E:6F:F7:42:D6:FE:C0:26:64:C9
Authority key identifier: 2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64
Certificate issuer:       /CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
Certificate serial:       0192102C44E3736674FCC8A1906ED6368EC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
Manifest number:          12C6
Signing time:             Fri 20 Sep 2024 16:03:09 +0000
Manifest this update:     Fri 20 Sep 2024 16:03:09 +0000
Manifest next update:     Sat 21 Sep 2024 16:03:09 +0000
Files and hashes:         1: L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl (hash: SjUYaedYrr8I/VEpS/9T0eSt4fN6s8kwgkwEDyENcCQ=)
                          2: dH4KGCzel1ha5oRK00ZHD6_b004.roa (hash: pEVGxuLIW3MoSsI19dmysq77nBHRShIJlt29OyPaoHQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:10:2c:44:e3:73:66:74:fc:c8:a1:90:6e:d6:36:8e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcc934652842b7bd9a7cec002c77c1ca13f1064
        Validity
            Not Before: Sep 20 16:03:09 2024 GMT
            Not After : Sep 21 16:03:09 2024 GMT
        Subject: CN=aeb618ec9569d9cbf49b9e6ff742d6fec02664c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a4:96:b5:fa:cb:de:43:40:85:82:5d:95:29:
                    3d:e3:1e:15:dc:6c:97:35:fa:06:9b:e2:a5:ea:bf:
                    2d:e9:8e:8a:bc:cc:34:c0:fc:60:b2:d0:e2:4b:65:
                    53:0f:e0:34:d0:d2:89:24:f7:9d:1b:0e:0f:d0:2a:
                    b0:13:d0:6f:e5:42:25:b8:98:8a:90:f0:bc:1d:a6:
                    4a:34:23:1e:0f:4d:f6:05:f5:63:b2:fa:ea:b5:40:
                    aa:61:1e:40:77:94:30:f0:d3:49:9e:50:f9:ed:35:
                    e4:a9:c3:22:f6:1c:43:25:28:7f:c8:fc:b4:52:64:
                    52:a0:26:1b:2f:37:6d:95:37:7e:56:48:ec:bd:07:
                    01:6b:f8:8b:58:39:43:ef:0c:f2:42:c6:ff:c6:24:
                    6c:ed:41:42:23:e0:80:33:19:b8:6f:a3:ab:ae:89:
                    bd:e8:37:a7:c0:c0:bd:a7:16:50:9e:0d:8a:22:c7:
                    ec:2c:8c:6a:61:25:0a:2c:2e:d5:58:29:f3:f6:2f:
                    89:33:2d:9c:73:a7:8e:11:c0:1c:ef:5c:9d:0c:a9:
                    db:98:91:34:88:5d:20:d1:1e:3e:6f:06:6d:ea:2e:
                    56:7a:39:71:35:05:5f:ee:60:2f:48:8d:9b:79:dc:
                    85:f2:99:2b:70:aa:c0:d2:02:8f:2e:1d:7d:22:a0:
                    8b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B6:18:EC:95:69:D9:CB:F4:9B:9E:6F:F7:42:D6:FE:C0:26:64:C9
            X509v3 Authority Key Identifier:
                keyid:2F:CC:93:46:52:84:2B:7B:D9:A7:CE:C0:02:C7:7C:1C:A1:3F:10:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8yTRlKEK3vZp87AAsd8HKE_EGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bb70d3-632e-4eff-84ff-6dcf7c3849bc/1/L8yTRlKEK3vZp87AAsd8HKE_EGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:68:9f:b6:c6:03:28:1c:2d:28:29:5d:2c:28:6e:9b:ae:99:
         37:4c:a1:5e:98:80:1b:7f:71:b5:23:bf:62:27:d8:84:70:da:
         5c:d8:93:99:c6:4e:2f:56:25:fd:d9:38:0f:0e:55:89:25:13:
         73:36:d2:8e:ac:4a:00:92:3a:1a:ed:49:20:a2:8f:80:f2:34:
         49:bd:a9:f8:b5:45:c5:36:84:89:8f:35:55:e7:cb:1e:2d:4b:
         9f:db:90:ec:bc:71:78:dc:1e:bd:c2:93:4f:36:63:c1:3a:54:
         dc:e4:4a:30:51:3f:be:e9:29:52:bc:96:21:82:35:6e:de:cc:
         e4:7b:9d:ef:c7:5f:68:35:f8:7b:92:05:9e:e7:e1:29:cd:42:
         de:03:21:3a:aa:b2:1b:41:56:a3:0e:9b:b5:85:5c:34:b0:64:
         c8:e0:0d:90:35:2e:ba:a2:3b:a6:8e:c3:e1:6d:ea:8d:92:89:
         39:df:92:5d:2e:43:54:59:6f:07:66:12:40:10:c2:6d:d1:ea:
         55:d6:0d:c5:61:df:5f:1f:f8:fd:71:17:d9:97:fe:e1:cd:5e:
         4b:0b:95:f8:4b:e8:1c:7b:c1:1b:f2:69:36:c2:1e:4a:e7:53:
         1c:a0:2e:93:49:a8:8e:4e:ed:c3:2e:3d:56:76:8a:1b:15:7c:
         ee:7d:f5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 21:24:23 2024 by rpki-client on console-ams.rpki-client.org