Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File:                     E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier:          1+K6JoL/l2g/C2K2Xu9iYKwlMBeuojfPBhrngA+rtko=
Subject key identifier:   D8:2C:BC:64:90:F1:78:02:71:59:34:9D:EB:49:50:7B:79:1A:6B:F8
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer:       /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial:       01923994439CA1327978C9DF95F0BAAA99D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number:          09C4
Signing time:             Sat 28 Sep 2024 17:01:10 +0000
Manifest this update:     Sat 28 Sep 2024 17:01:10 +0000
Manifest next update:     Sun 29 Sep 2024 17:01:10 +0000
Files and hashes:         1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: 0C7cNfkNAZnpk+xoBzTwo6gePPfvvjCMqGt4CmsDLmo=)
                          2: qr5OzRU3rTBB5qgau-pysqvZD3Q.roa (hash: xVVoEovg2WqwuD9J2nahT5O4GWQz80js6OdjVgn2uNI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:43:9c:a1:32:79:78:c9:df:95:f0:ba:aa:99:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
        Validity
            Not Before: Sep 28 17:01:10 2024 GMT
            Not After : Sep 29 17:01:10 2024 GMT
        Subject: CN=d82cbc6490f178027159349deb49507b791a6bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:dc:ec:c7:13:5d:2d:40:39:54:22:3c:70:
                    a0:3c:0f:b3:d6:c5:51:cd:54:81:1a:5a:94:47:72:
                    f2:0d:02:19:cd:57:f6:b3:50:29:d9:95:51:c0:b8:
                    b9:ad:25:25:1d:66:be:74:9f:e0:1c:28:3f:b6:6e:
                    25:49:ae:eb:aa:5d:c9:16:39:16:31:81:ca:bd:7b:
                    49:fc:27:94:96:f3:7e:2c:08:31:5c:99:77:dd:73:
                    dd:96:3f:05:33:28:ea:46:94:28:99:17:7c:cb:6d:
                    5c:24:48:cc:79:ee:0c:59:c6:ec:2e:bf:fc:95:37:
                    68:e9:3f:62:ad:57:7d:91:bc:1c:f9:2b:cc:98:2b:
                    a6:85:fc:3b:66:75:f3:2f:ea:72:2a:e1:21:84:50:
                    a1:71:fd:3e:8a:10:fd:32:5f:ed:74:1f:02:27:fd:
                    c0:e1:5d:5f:a0:53:2e:33:80:82:ad:59:00:bd:f4:
                    43:0c:9e:8a:1a:16:72:e4:1b:53:86:be:ee:5e:be:
                    a2:55:de:6b:99:a7:c1:f5:7d:6d:12:5d:62:fe:e3:
                    4b:13:12:5e:cc:5f:ea:6a:92:8f:3a:92:f9:a1:2b:
                    46:bb:56:76:2e:97:ed:db:55:d6:18:99:6a:79:66:
                    78:2c:a5:95:f4:f0:3e:2e:0f:bb:16:f5:fb:1a:aa:
                    fc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2C:BC:64:90:F1:78:02:71:59:34:9D:EB:49:50:7B:79:1A:6B:F8
            X509v3 Authority Key Identifier:
                keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0a:00:6d:66:30:05:be:41:b8:cb:5b:6a:ca:4a:fd:b0:e1:
         92:35:42:ba:68:3d:63:8f:3d:ec:fa:ef:69:e5:8f:04:c8:b3:
         92:22:97:d2:60:25:a5:b0:7a:cb:a7:0d:f9:7f:c1:8f:26:bf:
         79:6c:2b:ef:aa:1d:23:e2:9c:79:5b:97:fa:af:15:44:2e:e1:
         21:fa:f7:e9:6a:aa:b5:00:ee:84:ed:bd:bd:d8:a4:6b:2d:fb:
         83:fa:9a:b5:a2:e4:ed:37:04:2a:74:93:a6:36:d6:b4:1f:f8:
         b3:6f:20:cc:74:f8:e0:53:59:be:5c:68:28:e1:29:52:d6:50:
         78:f6:59:a0:89:9c:3b:81:58:99:6f:b7:f4:8b:d4:c7:b9:1a:
         fe:d4:6d:2e:66:ae:0d:39:d2:72:89:3f:b2:d5:3e:f6:68:11:
         52:67:87:f4:6b:d4:93:e0:bd:68:ff:16:28:02:51:a8:95:63:
         16:06:3c:0a:db:e9:87:01:ba:74:ea:de:8f:b3:db:d3:17:bd:
         78:c3:5b:a8:4e:89:75:04:d6:47:0f:7f:32:0e:ad:36:02:fe:
         ad:7f:22:bf:e7:7f:88:ff:7e:a4:18:c8:e6:7c:c7:50:3b:c6:
         f5:dc:66:14:e0:2a:f3:31:cf:6e:5a:15:0e:8b:39:c6:5b:80:
         fa:8f:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:40:52 2024 by rpki-client on console-fra.rpki-client.org