Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
File:                     KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json)
Hash identifier:          Q9PCCAHIsoBqhC7JezArueGF55rh5lKdowGYpMZ1slc=
Subject key identifier:   CA:2A:DE:84:64:47:34:51:12:91:5B:E7:D0:7A:09:38:D4:F5:1E:30
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Certificate issuer:       /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial:       0191FB59EAF10C0E8D10B70304046FCC9A40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
Manifest number:          C3
Signing time:             Mon 16 Sep 2024 15:00:59 +0000
Manifest this update:     Mon 16 Sep 2024 15:00:59 +0000
Manifest next update:     Tue 17 Sep 2024 15:00:59 +0000
Files and hashes:         1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: kvNPeBDFPh5ZS88kba4vbS0hvRr39YGL6oqKmE1g2y8=)
                          2: cxFZLdQgw5W_QXSFgXv9rK6qw6o.roa (hash: qRlll9ajP6zjTVNfNMJ/S0uvQU1HatiKueIbEgCBaX8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:59:ea:f1:0c:0e:8d:10:b7:03:04:04:6f:cc:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
        Validity
            Not Before: Sep 16 15:00:59 2024 GMT
            Not After : Sep 17 15:00:59 2024 GMT
        Subject: CN=ca2ade846447345112915be7d07a0938d4f51e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:39:53:0a:5a:88:fe:c3:53:9c:cb:9e:59:
                    7b:7a:ae:02:6c:92:c0:16:ca:d6:eb:c4:b4:32:81:
                    47:e0:19:c2:a8:9e:ef:8f:0a:3f:f0:39:bd:3d:48:
                    7f:13:a0:20:c8:21:91:00:4b:4b:55:19:bf:f8:5e:
                    22:6f:5e:1c:6d:5c:d0:14:53:4f:72:90:aa:7a:c8:
                    75:1f:2e:b5:76:9d:2b:3c:18:d7:66:d2:dd:a9:9b:
                    bb:dd:2a:36:31:9a:d5:49:7b:c5:36:3a:3b:13:d5:
                    7b:31:6d:a0:50:73:fe:94:2e:80:b6:31:08:e4:6e:
                    a8:51:a4:97:c5:85:0a:7a:f7:26:08:1a:58:7e:50:
                    be:91:b3:7e:bb:9d:b7:a2:b4:8d:cf:64:6f:e2:83:
                    6a:a8:b2:1e:78:a6:f4:73:f1:26:09:0b:1d:ae:9d:
                    f3:7a:85:d0:14:02:60:dc:5e:fb:17:4a:6b:64:61:
                    09:48:06:27:53:25:2b:dc:0d:d1:55:62:db:92:59:
                    5b:86:dc:83:3a:a0:f8:b4:4e:ec:d9:b5:0b:6a:f3:
                    d9:da:ae:71:55:34:9f:8f:97:ae:b5:11:ab:5d:b3:
                    f1:df:ea:96:44:d5:7d:f7:0e:04:85:d4:81:9e:92:
                    60:c9:ad:8b:50:b6:c8:f5:56:2c:65:19:73:cf:2c:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2A:DE:84:64:47:34:51:12:91:5B:E7:D0:7A:09:38:D4:F5:1E:30
            X509v3 Authority Key Identifier:
                keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9d:12:43:1c:03:64:96:ee:04:66:01:93:eb:66:c9:35:38:
         81:6f:2e:b2:e9:e8:4f:09:90:2f:2a:09:1b:e8:c0:22:25:3c:
         70:53:64:6f:93:ab:0f:30:1b:e0:e4:00:dc:b5:06:ad:f7:5a:
         c5:9d:fe:39:3a:8e:fd:3d:4f:37:47:9e:e3:2e:99:53:18:79:
         b7:d3:43:4b:ea:71:18:35:57:df:79:23:47:73:fb:ab:50:b6:
         6d:77:9d:60:3b:b1:58:29:b3:2a:b0:1a:fc:a9:b5:c4:a7:29:
         ea:ef:cc:41:e3:36:14:68:35:7d:91:e1:34:38:73:8b:bd:41:
         29:0d:26:1d:7c:73:fc:b5:d1:83:2e:af:d7:1b:40:72:89:0a:
         a3:cd:cf:0a:1f:6e:eb:a4:1f:41:b5:97:4b:70:3a:98:69:dc:
         5d:51:bc:f3:1a:bf:91:17:1c:0b:10:14:3d:ab:0e:d8:98:ee:
         03:53:f6:96:2c:24:a9:f6:0d:4f:51:d5:d7:56:96:b0:0e:22:
         00:49:0b:3f:5a:bd:6d:27:d1:3d:cb:20:88:4c:9e:48:ec:29:
         c4:6e:5b:0d:ea:ce:44:0d:b5:3c:84:04:72:37:4c:3a:2c:ec:
         b3:ef:cd:bc:c2:31:45:52:df:ea:d4:a8:44:42:85:d8:f1:dd:
         3c:e9:63:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:32:39 2024 by rpki-client on console-ams.rpki-client.org