Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File:                     84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier:          Me5qp4YYkCceUGY1mQAGOf6uaECk2QqdhsLFfgDRH/o=
Subject key identifier:   D9:9A:86:5F:F9:A1:AC:E0:DE:68:0E:49:87:05:52:0F:BD:C7:E7:5E
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer:       /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial:       01940648154268180F314E5C3E3EDE96EA10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number:          13CD
Signing time:             Fri 27 Dec 2024 04:02:54 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:54 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:54 +0000
Files and hashes:         1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: JoP/7PnKv3KO6k2o3klhxsOMdx4TcCL53GF/wVXBrm8=)
                          2: mDz0g-hfHcZzdtKwR4T6L878DUc.roa (hash: hM/uZCQKAIckOFf+ervxvaOnyXSb51GekwdxJww/apw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 04:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:48:15:42:68:18:0f:31:4e:5c:3e:3e:de:96:ea:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
        Validity
            Not Before: Dec 27 04:02:54 2024 GMT
            Not After : Dec 28 04:02:54 2024 GMT
        Subject: CN=d99a865ff9a1ace0de680e498705520fbdc7e75e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:fd:b9:62:cd:d8:54:7c:9e:93:1b:cc:e2:
                    12:8a:42:b5:a6:85:ed:6a:26:8b:8f:fb:c4:08:63:
                    a5:6d:a2:d2:f4:c5:17:e1:05:df:d7:3f:e7:b4:f7:
                    3b:f5:98:1a:4a:fd:7f:2a:0a:50:a7:a8:57:a3:36:
                    f9:ac:f6:91:96:17:4f:64:c6:9f:53:9e:bb:16:b1:
                    cf:ee:e6:cf:74:11:5f:a3:4a:6c:ff:77:24:84:98:
                    35:a0:04:43:00:61:ef:3b:fb:93:2c:31:19:e1:d9:
                    ce:1b:b4:9c:4b:08:67:0d:60:4f:23:51:5c:61:c4:
                    15:d9:f8:1c:f3:1a:e6:6b:7f:b9:02:0c:76:92:86:
                    75:db:fb:11:13:42:be:29:50:9f:20:92:11:ca:73:
                    ed:0f:b9:b0:08:a6:fa:42:a3:86:84:5c:51:7c:39:
                    2f:e1:60:23:22:72:5f:02:db:8b:c5:30:6e:ee:0f:
                    4b:a1:1d:d1:3e:4a:3f:13:39:23:b3:54:22:e5:5c:
                    f2:1f:ef:8e:71:2c:4f:0b:ec:b9:97:d7:bc:c0:f5:
                    40:e8:c1:c1:61:7c:3b:e8:41:15:6e:5e:01:46:d8:
                    62:d2:8c:1c:b5:b6:9b:67:58:46:06:fd:01:da:cb:
                    53:e8:1b:9c:06:b9:c9:26:7c:82:8d:7c:b7:30:3e:
                    4b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9A:86:5F:F9:A1:AC:E0:DE:68:0E:49:87:05:52:0F:BD:C7:E7:5E
            X509v3 Authority Key Identifier:
                keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d3:98:cb:bc:01:df:0d:44:30:d1:a4:d9:47:23:a1:29:c2:
         a5:62:fa:43:73:14:18:31:77:13:bf:82:2f:4d:e9:e6:bb:59:
         9a:30:e3:44:d6:21:b2:98:39:6a:a0:df:c5:f1:6b:62:26:a5:
         6d:79:8d:e5:1e:91:d2:97:98:bf:f8:47:7a:e4:7c:a3:75:78:
         09:d0:86:2f:e3:a7:42:9d:d9:e6:60:d2:0e:a2:38:31:a1:15:
         bf:21:08:36:5b:6e:85:ab:69:b1:27:f3:fb:af:98:6f:6e:99:
         fe:44:ca:3d:9f:37:65:f2:e5:0c:61:aa:00:e7:63:30:61:2d:
         ef:87:c2:e4:57:a5:a1:29:6a:77:2c:41:04:fd:9e:75:3b:2f:
         61:78:d0:41:ab:aa:a9:bc:aa:9e:96:af:ae:79:e0:81:72:4b:
         c1:4e:56:52:19:ea:36:04:3a:23:bc:8f:1d:8f:c5:8b:e5:eb:
         58:03:07:05:ab:c4:fc:c8:77:1b:0a:57:e9:49:a9:4d:d1:c9:
         67:c2:4e:75:3d:f7:7e:63:9b:a4:23:7b:f9:c3:0c:b7:2e:d6:
         00:7c:11:0b:61:c3:08:ac:d8:d1:15:cf:d8:33:53:5d:bc:58:
         0d:a1:ff:fd:4e:2e:23:5e:3a:a9:82:48:bf:21:6d:74:60:72:
         76:29:ec:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:09:12 2024 by rpki-client on console-fra.rpki-client.org