Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
File:                     L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft (raw, json)
Hash identifier:          4hIMnHwE9QJ8fuKRL2llUKH38HpP7sM73ILULPoPgmA=
Subject key identifier:   BA:1B:EF:C6:7E:90:15:DB:83:35:5A:99:44:79:90:52:6C:0C:79:90
Authority key identifier: 2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C
Certificate issuer:       /CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
Certificate serial:       01923B82CB6DE70DE8F6631C488B145DC8D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
Manifest number:          12DC
Signing time:             Sun 29 Sep 2024 02:01:20 +0000
Manifest this update:     Sun 29 Sep 2024 02:01:20 +0000
Manifest next update:     Mon 30 Sep 2024 02:01:20 +0000
Files and hashes:         1: 2rv9Eb2J8eCjiP035SDSi8oIB2A.roa (hash: MYRtrZcxou7TReHNgjL3rKDGaK8yHahlqdfDkb9h1E8=)
                          2: L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl (hash: tkVzpeFWiON4SgocHcXIxv7Bq7Vpq6Pzck6lnOIi+so=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3b:82:cb:6d:e7:0d:e8:f6:63:1c:48:8b:14:5d:c8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f88a53fcb96777f99e02df8940dd040b454cd1c
        Validity
            Not Before: Sep 29 02:01:20 2024 GMT
            Not After : Sep 30 02:01:20 2024 GMT
        Subject: CN=ba1befc67e9015db83355a99447990526c0c7990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:60:89:5d:22:b5:d3:6c:70:28:75:54:26:a5:
                    73:2e:bf:e5:cd:1d:56:b0:f0:bc:a4:11:9a:f4:ef:
                    c0:09:76:78:ce:39:07:b2:b0:82:dc:cd:de:bd:f2:
                    0c:19:56:9e:77:a4:1f:e5:01:bd:f0:bf:f5:0c:cf:
                    53:6d:82:dd:36:35:91:af:5a:76:bc:37:0b:94:91:
                    b1:03:4d:b0:e6:7d:16:1a:9f:0c:76:4f:af:6a:b9:
                    05:73:a5:fd:ca:b0:11:dc:5f:93:72:ee:22:b8:0c:
                    b2:31:84:f2:e1:ae:ff:05:e7:fa:78:ad:f8:c2:8c:
                    6a:92:55:54:15:6b:80:b9:29:1b:7f:2c:ce:6a:99:
                    aa:9e:07:be:34:bb:3a:14:67:eb:50:98:d1:84:bd:
                    3c:11:6a:ee:da:84:5f:a4:62:c0:33:7f:d5:ed:f0:
                    48:12:e2:93:81:fe:2c:67:04:d7:14:21:54:d0:a0:
                    58:1b:8a:67:fa:19:4f:c6:c4:dd:9f:80:53:03:7d:
                    05:94:67:29:29:33:43:80:d3:a6:5e:97:ce:35:6c:
                    b7:d3:3b:2a:e4:0a:5e:70:d6:2a:f2:9d:cb:ea:de:
                    60:e5:6b:42:aa:86:4d:db:7e:8f:d7:8a:c7:c5:c2:
                    54:c5:8b:73:12:39:3d:67:66:40:fb:2c:c9:2f:9d:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1B:EF:C6:7E:90:15:DB:83:35:5A:99:44:79:90:52:6C:0C:79:90
            X509v3 Authority Key Identifier:
                keyid:2F:88:A5:3F:CB:96:77:7F:99:E0:2D:F8:94:0D:D0:40:B4:54:CD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4ilP8uWd3-Z4C34lA3QQLRUzRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/552f0d-01c2-418a-aa3c-acc4aac78d0d/1/L4ilP8uWd3-Z4C34lA3QQLRUzRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:93:61:54:e1:4a:e1:32:7c:5b:a5:99:6f:bd:03:72:e1:5f:
         14:68:69:71:e9:ba:c4:58:99:5e:f8:c4:9f:54:e3:47:50:ae:
         85:c7:71:3b:42:02:cc:ca:65:c4:db:ac:f4:d0:3e:ec:a7:05:
         83:91:5b:40:22:ca:b7:6b:77:42:c6:6f:54:cc:5e:92:24:3a:
         92:bd:cf:bd:1d:83:93:0a:80:f2:ee:32:c2:db:a5:f8:80:f4:
         27:8d:2d:b1:35:fd:ca:7e:ad:5d:d9:64:fe:3f:2e:a4:77:fb:
         db:39:bc:1f:72:9f:6c:98:14:4f:2e:b5:dd:e9:41:9a:86:a7:
         ed:ce:82:96:8c:a4:7e:e9:52:ff:8f:66:ce:7b:83:08:87:ce:
         13:d7:c3:70:a6:d0:77:50:50:b5:b6:3a:db:fe:92:0c:24:a4:
         d7:1d:37:a9:9a:d2:ed:60:59:6a:78:97:ee:2f:b3:2d:23:67:
         d6:96:2c:42:11:ca:0e:40:96:f1:06:c8:a2:92:ae:f7:f3:87:
         31:ae:aa:61:11:ef:ad:7e:df:9a:1e:8d:d7:50:e2:cc:96:3e:
         de:73:45:5f:ab:51:a5:bc:73:b6:8f:56:67:cf:d3:45:a2:63:
         99:64:de:a3:30:62:0a:7e:23:af:7c:cd:4b:e3:7f:8c:55:5a:
         bd:03:c7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 03:33:40 2024 by rpki-client on console-fra.rpki-client.org