Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File:                     i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier:          6rwbVHcwMQV7s9Abntrb0xUaZeJhZBLSMyMsBbKWwI8=
Subject key identifier:   B5:62:6C:DE:5F:BB:B8:4B:E1:60:FC:18:C7:5D:4B:A1:36:3C:ED:EF
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer:       /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial:       01923580D46D1EA426B608E6CE45C18E83D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number:          12DA
Signing time:             Fri 27 Sep 2024 22:01:28 +0000
Manifest this update:     Fri 27 Sep 2024 22:01:28 +0000
Manifest next update:     Sat 28 Sep 2024 22:01:28 +0000
Files and hashes:         1: Fa-PsUVAo2LCYN6vvOHtJu-hRO8.roa (hash: 3PMn0wf5gDjVCAJoNNCoitD7qjf7aIRgLADbRD8hAB0=)
                          2: _UG76Zz_SvoSvzF0m3BhxDDOzCg.roa (hash: jQ/ossc1Zd8YPMpjJDRVtuEk5GqWJYWZlr7AslrreLY=)
                          3: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: 85EaKUqRWrl/QjGWCozOu2qInncqyCz7KZguq2coTbk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 19:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:35:80:d4:6d:1e:a4:26:b6:08:e6:ce:45:c1:8e:83:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
        Validity
            Not Before: Sep 27 22:01:28 2024 GMT
            Not After : Sep 28 22:01:28 2024 GMT
        Subject: CN=b5626cde5fbbb84be160fc18c75d4ba1363cedef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:be:de:41:38:73:53:f1:3f:bc:cf:2a:f9:
                    fb:59:cb:63:f0:a2:2e:3b:4d:ea:51:41:73:09:cc:
                    f7:d8:d4:3d:17:8d:e4:5c:81:15:42:d4:72:fd:b1:
                    e2:86:65:15:e3:b0:0d:82:2d:e8:fc:6a:6c:70:d0:
                    e5:80:15:b8:0a:c6:dc:0f:d4:85:01:aa:49:0b:bc:
                    c9:21:e5:10:e1:b6:ef:22:3f:ec:39:fb:e9:01:ea:
                    5c:ac:1b:f9:8d:1f:07:6b:00:d2:4e:42:b5:34:c6:
                    e0:fb:d6:ed:c6:78:5d:90:b0:0f:0d:da:47:41:3a:
                    39:be:1c:81:0a:61:ca:7d:5f:e4:a5:1d:dd:90:94:
                    b6:9c:1d:c0:14:8e:f4:64:2f:32:c7:dc:53:2f:2a:
                    31:cc:22:16:a8:db:ea:0e:ed:77:8e:d5:7d:40:76:
                    3e:dd:fe:be:49:98:b0:29:60:29:23:d1:bc:8f:25:
                    97:16:28:41:5c:60:ea:b3:da:3c:94:21:cf:ed:22:
                    3f:0b:ae:72:d8:31:76:a0:2c:e0:07:45:dc:1f:5d:
                    0c:fe:1f:8a:95:ae:6d:67:3e:ef:15:c4:35:bf:c1:
                    ce:b4:87:30:12:78:08:32:39:0b:8f:e7:15:e6:d4:
                    c3:e1:2d:a1:0e:d9:02:b9:e4:c5:5d:2f:de:8e:b7:
                    bc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:62:6C:DE:5F:BB:B8:4B:E1:60:FC:18:C7:5D:4B:A1:36:3C:ED:EF
            X509v3 Authority Key Identifier:
                keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e6:97:05:5a:35:c0:2a:83:5b:0b:4a:5a:29:6b:25:7c:c5:
         94:8d:ef:03:65:d5:f4:48:26:8c:4f:ff:39:39:f2:f8:a9:0b:
         15:24:29:a6:09:a7:65:1c:f2:aa:71:52:07:6f:68:af:1e:59:
         14:2e:97:50:d6:91:8b:5d:4f:b3:b4:2d:92:15:b9:d5:00:24:
         58:e8:24:20:f3:89:c3:02:a1:b3:fc:81:71:a9:d6:91:a5:66:
         bc:22:91:8a:75:10:20:ed:dc:32:c2:d1:77:dc:23:29:ef:2f:
         03:77:63:cf:8d:bc:88:e9:2b:50:f7:3c:84:a1:1e:0b:a7:bb:
         48:af:7a:a4:f4:3a:c7:55:93:06:a6:cf:2c:9f:49:e5:a9:8a:
         4b:db:41:ee:36:3b:5b:af:ae:50:d8:cc:a1:f9:b1:0a:51:0f:
         44:bc:e8:f9:36:a0:5a:f1:b1:e0:d2:4d:23:52:72:1b:29:d8:
         9e:62:e0:6d:61:5a:27:cb:20:72:c8:1e:c2:8f:cd:8f:39:b3:
         52:77:7c:23:05:6c:a9:0d:18:75:bb:d1:fe:75:66:68:59:74:
         ea:8a:52:ba:45:ec:8b:36:d4:20:46:b0:a3:d2:40:a9:22:93:
         c7:a3:33:e1:16:5d:0a:17:82:16:64:d2:b5:4a:06:db:3e:6e:
         05:fd:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 23:36:05 2024 by rpki-client on console-fra.rpki-client.org