Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File:                     1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier:          EVf+PSRkWE+d1zYuWP2jkZ/ecFzEY8dWykYMTGCxufA=
Subject key identifier:   22:3D:EE:8C:92:1D:2A:0D:12:B4:10:FC:D6:49:42:4E:1A:0B:49:48
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer:       /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial:       0191FA7E0E2F9478A9EA937889E7C34D0E37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number:          B2
Signing time:             Mon 16 Sep 2024 11:00:50 +0000
Manifest this update:     Mon 16 Sep 2024 11:00:50 +0000
Manifest next update:     Tue 17 Sep 2024 11:00:50 +0000
Files and hashes:         1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: ZjnbffTCChOSeET22NDJBQw1zNivmNI+dUVHYjl9Qh4=)
                          2: m3AFnkXgkAql8a1VpLiY4aAry7k.roa (hash: zhggfsKqmgFBLw6rD2jlUYI+uJsAsBSeIfkAbfHiiOU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:0e:2f:94:78:a9:ea:93:78:89:e7:c3:4d:0e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
        Validity
            Not Before: Sep 16 11:00:50 2024 GMT
            Not After : Sep 17 11:00:50 2024 GMT
        Subject: CN=223dee8c921d2a0d12b410fcd649424e1a0b4948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:86:b5:05:57:8b:c7:36:dd:db:f4:12:01:8b:
                    46:ab:18:7e:59:0c:61:bd:d8:92:a4:0a:3b:d9:e6:
                    8a:7f:8d:42:2d:9f:a4:e4:b7:1d:74:fe:12:17:7d:
                    5a:75:28:9f:35:5a:71:81:5b:ae:79:f5:af:a3:bc:
                    08:ee:06:8b:44:74:8e:9d:4c:8c:d1:43:a6:aa:23:
                    86:da:fe:1e:7a:9b:88:f8:bb:86:cd:11:a7:c0:6b:
                    5d:e9:09:c8:41:b7:c9:f1:77:de:df:1a:d6:32:70:
                    4b:e5:c8:aa:7d:f9:dd:a7:68:8d:40:73:ca:2b:1f:
                    ce:53:b2:d2:0f:02:65:bb:1d:4a:a7:7a:a1:ef:43:
                    f0:dc:2f:ae:47:38:8a:0d:69:ad:29:be:bf:1f:8d:
                    fa:2b:13:53:0f:96:9c:d3:fe:a7:30:b6:c9:09:8e:
                    3c:2a:69:53:cc:60:22:8d:bb:83:ed:7c:5a:0f:39:
                    5e:ec:28:64:bd:f3:fe:64:b6:01:13:db:aa:da:65:
                    47:95:68:62:aa:f1:6c:34:75:56:e3:cf:a1:60:27:
                    ff:f2:2e:6c:03:58:98:f0:3a:dc:d0:b3:c0:b5:06:
                    d6:e0:58:e0:23:fa:3a:85:7b:09:8f:b4:0a:87:49:
                    b6:11:9e:87:d0:c5:3d:86:e0:e3:d7:8c:af:85:6b:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3D:EE:8C:92:1D:2A:0D:12:B4:10:FC:D6:49:42:4E:1A:0B:49:48
            X509v3 Authority Key Identifier:
                keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:7f:34:61:7f:cc:89:52:1b:1d:d2:00:c2:9b:c4:4a:a1:
         2d:22:a9:ad:bd:87:96:ea:63:e4:95:c4:14:b0:d8:85:e1:13:
         0b:bb:41:06:41:fe:d9:e7:c8:86:3f:fb:96:c3:e4:ed:2b:91:
         7f:07:98:e2:54:b9:f6:e5:72:00:30:6e:65:ad:f9:35:2d:a3:
         b5:04:76:9f:0d:13:74:6b:56:bd:46:e7:1b:97:e7:f8:c8:c3:
         b8:c2:49:61:20:5e:62:83:96:20:a0:8d:5d:4d:2a:77:53:e7:
         07:1a:e9:7c:e9:04:64:cd:1a:ea:cc:9f:41:6f:e8:7e:4f:b5:
         1e:72:3a:4c:2a:f1:ec:b7:44:ca:3b:2d:92:96:a5:62:48:a4:
         21:1e:c7:50:ba:9b:a9:bc:ef:42:2b:34:d8:39:45:57:4b:4a:
         16:11:0c:2c:2b:ac:bc:c0:99:71:09:b2:0a:ae:2b:fa:eb:4a:
         6c:f3:31:21:10:8a:23:54:21:e5:b1:4b:df:5f:34:3a:d3:95:
         c9:f6:b5:45:b0:6c:a4:54:36:8f:47:4d:d6:23:3c:f6:1c:26:
         71:0f:e9:f5:51:1d:84:f9:85:77:73:5c:31:c1:35:2f:aa:51:
         23:48:36:c5:9d:68:2f:ce:f9:d3:e3:b2:9b:b5:c5:6f:e3:30:
         ba:70:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 16:30:04 2024 by rpki-client on console-fra.rpki-client.org