Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
File:                     LxXXiyVtKEWbhptybyMpSrP_Fz8.mft (raw, json)
Hash identifier:          PgHkfgS1z9rIbe40apQONR8Yc/HBuW9ECs16DPTxUm0=
Subject key identifier:   5F:AF:25:C7:1E:CB:71:08:FB:74:9B:06:AD:AC:E9:C7:60:82:56:04
Authority key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Certificate issuer:       /CN=2f15d78b256d28459b869b726f23294ab3ff173f
Certificate serial:       01920C4FF7043001B781BC66E6780DE40B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
Manifest number:          02EB
Signing time:             Thu 19 Sep 2024 22:03:39 +0000
Manifest this update:     Thu 19 Sep 2024 22:03:39 +0000
Manifest next update:     Fri 20 Sep 2024 22:03:39 +0000
Files and hashes:         1: LxXXiyVtKEWbhptybyMpSrP_Fz8.crl (hash: 9hiCP5Tj5ZTSHxZE59jLhj64f6UXuJf2+E6aQlEOCYI=)
                          2: sA34ONw0A3RdOQPI1EDC3Nh91z8.roa (hash: 0vEOHECAyiIeKd+CP9TWS9/O4ANgCuQS5O9q4xKYNvk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 20:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0c:4f:f7:04:30:01:b7:81:bc:66:e6:78:0d:e4:0b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f15d78b256d28459b869b726f23294ab3ff173f
        Validity
            Not Before: Sep 19 22:03:39 2024 GMT
            Not After : Sep 20 22:03:39 2024 GMT
        Subject: CN=5faf25c71ecb7108fb749b06adace9c760825604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1e:88:17:07:3a:4a:94:a6:b8:1d:63:ad:bc:
                    47:b3:7d:3f:4a:4b:ac:88:ce:cb:95:64:d5:ad:b9:
                    ad:ee:74:60:1a:f1:80:6e:95:3b:8a:44:fb:0e:c7:
                    5e:60:1c:6c:17:14:0f:01:1b:c0:25:7f:9f:ab:ef:
                    a2:b3:bf:76:e7:68:c5:1a:87:c3:35:de:10:2b:e5:
                    50:49:6c:2b:1b:d5:c9:0d:16:58:63:6c:2e:ce:0e:
                    5d:28:60:17:9c:9e:94:93:e9:50:cd:1f:01:bd:97:
                    6f:19:22:a7:04:bd:5a:e2:f8:27:61:aa:35:41:dd:
                    18:76:e3:76:b0:11:da:67:6d:43:35:a9:22:e6:d6:
                    c8:1b:f3:71:da:6b:0e:17:c4:89:14:fb:27:3b:b2:
                    05:35:7b:62:5f:9d:ed:5c:02:9e:cd:77:fc:1c:a8:
                    56:cd:82:81:2a:02:34:01:55:ba:e2:cc:37:1c:95:
                    cc:c8:07:12:bf:7e:a2:d6:50:32:37:24:bc:c4:70:
                    a5:95:de:7c:42:86:e3:c2:76:dd:80:3a:e1:d5:02:
                    b8:3c:51:5a:4e:dd:02:d4:ad:a1:bb:8a:49:ff:7c:
                    e7:4b:2f:1d:a6:6d:fb:a1:39:c9:96:76:a0:1b:e5:
                    50:42:a2:7f:80:61:ea:eb:3a:fa:47:f7:2d:64:ad:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AF:25:C7:1E:CB:71:08:FB:74:9B:06:AD:AC:E9:C7:60:82:56:04
            X509v3 Authority Key Identifier:
                keyid:2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ae:dd:e6:1e:27:1d:bf:50:6d:85:0b:23:84:65:a2:a8:7b:
         97:1e:9f:b3:14:02:64:4c:db:4c:cd:24:98:f0:dd:ca:22:88:
         79:75:3e:46:26:a7:9a:f0:d1:54:ec:f8:9e:2c:36:99:ab:ef:
         7e:d2:05:24:a9:a9:92:42:61:6d:47:e5:be:33:95:bf:7a:99:
         4c:1d:cf:46:91:de:3b:d6:73:7c:a5:92:5b:28:e2:75:e1:6a:
         4a:dd:9f:a9:3d:48:e8:f7:11:3d:80:93:e3:64:7c:94:09:9e:
         cd:9c:90:8c:fb:be:ce:52:5c:58:b8:6b:61:e8:24:39:09:e3:
         f8:6a:83:be:26:41:11:28:f3:9d:7b:e9:b8:99:99:43:6b:6b:
         b5:60:00:49:63:7d:9a:a6:4a:08:ef:1d:28:30:bc:ad:b1:37:
         19:6c:5a:94:4d:42:78:4c:f9:5a:af:9d:e3:05:28:69:e2:b1:
         cb:32:38:b3:d3:b3:82:80:d3:7d:ec:21:8e:4c:b7:08:35:12:
         f4:15:27:c2:8b:32:35:09:cc:86:5d:5f:9b:3d:ad:33:bf:23:
         4b:d9:06:8b:5b:4e:2c:5a:0d:a4:c7:ec:8b:36:47:eb:4b:b0:
         69:fd:d5:61:80:cd:8b:d3:1a:c0:18:26:48:b7:4f:b6:77:87:
         2a:3a:5d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 00:23:54 2024 by rpki-client on console-fra.rpki-client.org