Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
File:                     _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json)
Hash identifier:          QtFJO5HmdZ4Yd3IEo/K6foOJQZQ2dPWyfbP7Psl8J90=
Subject key identifier:   1E:38:82:A8:36:4F:A4:96:CF:2D:C6:AE:C0:66:6D:F8:EE:DA:F4:3F
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Certificate issuer:       /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial:       01923AA80889E1478B5B0852B050152CC5ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
Manifest number:          0336
Signing time:             Sat 28 Sep 2024 22:02:23 +0000
Manifest this update:     Sat 28 Sep 2024 22:02:23 +0000
Manifest next update:     Sun 29 Sep 2024 22:02:23 +0000
Files and hashes:         1: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: qPu0BcgxE6+rPvlSzQJibz4dJIcW2+f0qKS0OXcyJuw=)
                          2: obbnpJcwObsgPqVoOWgDTPs3AtQ.roa (hash: tcNOq9QOOfes+AmRI1nPHzJBBLgPbrtTu/YUG3acBEE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a8:08:89:e1:47:8b:5b:08:52:b0:50:15:2c:c5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
        Validity
            Not Before: Sep 28 22:02:23 2024 GMT
            Not After : Sep 29 22:02:23 2024 GMT
        Subject: CN=1e3882a8364fa496cf2dc6aec0666df8eedaf43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:e9:97:f8:6d:c4:bc:53:05:23:78:c8:f9:
                    81:2e:8d:bc:88:28:16:58:12:32:1b:4a:ad:ce:d4:
                    7d:b2:3a:6a:7b:1a:ea:63:65:24:72:9d:c5:65:e5:
                    25:1a:3d:06:35:0e:7b:93:32:61:28:51:7b:fd:37:
                    18:8d:31:85:5f:23:56:86:83:61:fe:40:3a:ac:0e:
                    d3:b4:b1:3f:53:1e:30:b3:f9:75:33:ea:01:2f:0f:
                    d0:2d:c8:1c:43:6f:57:e6:9d:da:69:dc:33:64:bf:
                    35:ac:dc:dd:d5:a5:05:99:64:31:81:61:ef:b2:34:
                    3d:98:f3:72:f6:18:6f:a2:53:dd:27:41:db:e2:e1:
                    93:d2:b3:88:47:0a:92:8e:57:84:af:b4:0f:a6:2b:
                    3c:eb:4e:90:a0:76:0b:a7:b9:f5:01:ac:0a:2c:7b:
                    ec:14:46:19:d1:e9:49:1d:ed:3c:df:fd:e5:9f:18:
                    36:2a:9e:58:1b:6a:87:19:ed:54:52:d1:35:f0:25:
                    1a:d4:bb:c9:09:3d:36:9f:d5:12:78:35:10:30:bf:
                    f8:33:86:fe:b6:2c:f5:90:64:3b:86:97:e7:a8:c4:
                    86:81:87:b0:89:39:58:83:ff:5f:11:e5:ed:4d:ca:
                    53:29:08:3a:a2:5c:e3:51:58:68:5c:9e:c2:24:61:
                    70:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:38:82:A8:36:4F:A4:96:CF:2D:C6:AE:C0:66:6D:F8:EE:DA:F4:3F
            X509v3 Authority Key Identifier:
                keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:79:d9:fa:a4:31:bd:b6:b3:1b:dd:36:ce:85:f0:9b:63:
         a3:36:69:fb:22:c6:ee:c0:7f:3c:f9:16:6a:06:56:23:6a:8f:
         c5:c7:96:b4:69:73:6c:a7:bd:5d:98:79:66:a8:db:0c:4e:e4:
         7c:d7:fa:ea:00:72:d4:08:bd:8c:18:e9:9d:15:4c:27:5e:a2:
         ce:aa:d7:9a:f1:f1:d0:5c:51:d3:e7:d3:a5:18:ae:61:a9:b1:
         c2:ae:b5:cd:4c:f8:c9:02:ce:0e:73:b5:d3:52:59:64:c3:49:
         1e:9d:be:67:3e:4d:d8:dc:52:26:0e:97:5f:4d:ee:a8:4c:ff:
         08:15:0d:e3:bf:c6:04:43:da:00:cb:0e:20:af:09:19:a1:94:
         c7:0a:12:0c:8a:4e:34:82:50:68:68:3c:a8:77:54:ff:e8:46:
         24:96:ad:d6:8e:02:83:13:bd:49:9e:ee:5f:30:40:59:ae:f7:
         12:72:0e:9b:c4:f8:34:08:e7:e9:06:0e:46:a8:86:cd:a6:8c:
         05:ad:ba:10:97:f6:97:60:b2:09:34:60:d6:5e:28:26:93:ff:
         44:c2:19:ed:31:d7:32:58:dd:2a:80:42:77:2f:f2:a2:5b:17:
         3f:a0:b3:f1:08:be:05:33:70:8c:d1:bb:4d:7f:c1:d7:f4:e8:
         83:54:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:30:59 2024 by rpki-client on console-fra.rpki-client.org