Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
File:                     IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft (raw, json)
Hash identifier:          WZleBai3GvhhpSAySbDe4dJV+OcXldwoWtyy35v4shU=
Subject key identifier:   AB:E7:DA:D3:AD:FC:FC:79:37:40:CD:0A:91:7B:BE:C9:F4:DE:96:7A
Authority key identifier: 21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53
Certificate issuer:       /CN=2146e560a3f5cac7c64fe0f13be663d94c871453
Certificate serial:       0192399480F07D7A903B6647D6C49B2FCFF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
Manifest number:          0161
Signing time:             Sat 28 Sep 2024 17:01:26 +0000
Manifest this update:     Sat 28 Sep 2024 17:01:26 +0000
Manifest next update:     Sun 29 Sep 2024 17:01:26 +0000
Files and hashes:         1: IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl (hash: pkwn6IbMt+1ZuJ/VF4iFvHKvDDJUkPwXoPlbp/tIljo=)
                          2: vhqJsExlP6cH_j-Bp3dDbLXzdWA.roa (hash: ph4NIcz44Nbj2aLKeKkMYEdQ7opA/r0JVv9U+fuBDuw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:80:f0:7d:7a:90:3b:66:47:d6:c4:9b:2f:cf:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2146e560a3f5cac7c64fe0f13be663d94c871453
        Validity
            Not Before: Sep 28 17:01:26 2024 GMT
            Not After : Sep 29 17:01:26 2024 GMT
        Subject: CN=abe7dad3adfcfc793740cd0a917bbec9f4de967a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:a5:af:80:82:ff:7e:c1:86:db:f8:f4:da:
                    ec:71:73:e7:b3:ae:4b:e7:29:fe:d5:2a:b6:6a:67:
                    63:61:45:af:ea:db:40:7e:88:ca:fa:6c:12:bf:ca:
                    e5:b7:3c:d1:03:47:3a:65:54:32:df:19:f1:7a:6d:
                    44:fa:50:66:c9:ba:7b:7f:e5:32:de:df:d1:9f:6a:
                    33:87:f1:c2:69:19:97:58:1d:ce:ff:07:6b:9d:f3:
                    21:38:d7:5a:1a:25:66:e1:b7:8a:fb:00:2f:f8:6f:
                    c8:0f:03:16:0f:b4:74:96:31:16:6e:0c:08:9e:b3:
                    1a:56:2f:bb:a4:a1:4e:c5:2f:20:ed:79:00:a1:22:
                    96:2d:d5:ff:a8:b9:99:ce:4f:cf:78:47:c4:56:62:
                    66:30:90:d1:35:2b:d9:29:ff:48:ab:64:1d:c2:fc:
                    85:8c:80:79:a1:bf:b8:67:5d:93:6f:44:f5:2a:ad:
                    a5:c7:0f:e7:4f:ec:68:51:8e:88:b5:64:73:41:93:
                    02:dd:a9:df:42:cf:1e:4f:3c:2f:63:8c:72:86:62:
                    f3:3f:46:16:4f:02:27:9e:ca:4a:e5:83:90:48:95:
                    d0:86:cd:43:af:39:b9:f4:6a:52:2f:ce:09:6d:87:
                    0e:12:5c:dc:58:a3:43:72:65:4f:80:f2:6b:e5:c3:
                    88:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E7:DA:D3:AD:FC:FC:79:37:40:CD:0A:91:7B:BE:C9:F4:DE:96:7A
            X509v3 Authority Key Identifier:
                keyid:21:46:E5:60:A3:F5:CA:C7:C6:4F:E0:F1:3B:E6:63:D9:4C:87:14:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUblYKP1ysfGT-DxO-Zj2UyHFFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b27ead-96bf-4537-9a99-5be4674b467c/1/IUblYKP1ysfGT-DxO-Zj2UyHFFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:12:1d:6f:cb:67:be:0e:ba:31:a7:88:0f:58:d9:9f:45:e9:
         e2:78:f6:9d:a1:4f:ad:a8:1b:77:61:2d:53:5f:3e:4d:a6:6d:
         a8:45:f3:e9:e4:fc:0b:93:36:a9:55:1e:27:fb:3e:5e:cf:6f:
         7f:7a:3a:e6:7c:5b:73:0a:0f:bd:2e:90:80:1c:fa:d6:b9:0c:
         95:ea:75:77:83:9f:42:60:0e:79:09:eb:91:5e:de:00:3b:0a:
         62:00:c9:ff:59:ff:e8:b6:ea:f1:22:e8:16:b0:d8:dd:f8:c3:
         4d:c4:df:b5:b9:44:e2:4f:04:fc:19:6e:87:6b:fb:83:ac:c9:
         9f:84:e8:27:fc:06:35:44:e6:e6:5e:fc:93:cf:2b:68:58:d1:
         c7:14:96:60:d4:89:92:13:4d:f2:5e:d0:03:8a:05:1d:02:f6:
         1f:32:ae:3b:9b:cd:dc:ac:87:25:24:2e:09:ce:c5:fc:5c:2e:
         bd:73:3f:7d:7a:d2:6b:c5:ad:84:47:c4:43:6e:6c:6e:af:71:
         a8:3a:0b:a4:7f:db:42:ab:0d:64:55:db:49:5b:80:f6:ea:23:
         f1:04:48:61:21:17:34:d6:89:36:47:9e:2c:fc:6c:09:82:ba:
         75:8f:b6:95:f2:22:f5:10:d6:46:b9:f0:ad:ac:86:e3:af:56:
         26:99:39:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:23:52 2024 by rpki-client on console-ams.rpki-client.org