Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File:                     2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier:          R9JEKT3kyEIVJTsCZzQLs59JiCU9krQ7gx8BpPLCEZk=
Subject key identifier:   2D:F4:05:9D:3A:C4:51:39:B2:02:01:56:82:A9:2C:F6:AE:53:AF:DB
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer:       /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial:       0191FA10618A5D37F0F52722C7F5F437121C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number:          C7
Signing time:             Mon 16 Sep 2024 09:01:03 +0000
Manifest this update:     Mon 16 Sep 2024 09:01:03 +0000
Manifest next update:     Tue 17 Sep 2024 09:01:03 +0000
Files and hashes:         1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: 6Gxb8dglwBchcDaP+57xoW/lfJa36SOaHYTEgkZjiww=)
                          2: RgO-ockD6WgwYrTAoXEjptE-bYc.roa (hash: 7gLorKZY6Y1guOsTicTohcjrXyC2DZgLgDlRQgk5HuE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 09:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:10:61:8a:5d:37:f0:f5:27:22:c7:f5:f4:37:12:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
        Validity
            Not Before: Sep 16 09:01:03 2024 GMT
            Not After : Sep 17 09:01:03 2024 GMT
        Subject: CN=2df4059d3ac45139b202015682a92cf6ae53afdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:b8:1d:a2:d4:82:e2:45:0e:16:81:93:60:
                    a2:6b:5a:d5:3a:3f:75:cb:d7:95:fc:3b:19:29:7f:
                    f0:96:65:a9:cc:61:3e:9c:f3:fd:16:fb:93:72:7c:
                    fa:c4:01:cc:d8:6b:56:67:5f:a3:8c:ee:d4:a2:ba:
                    ad:cd:fb:68:ed:d0:50:a9:10:d8:86:89:01:81:7d:
                    83:2c:1a:3f:66:7d:ad:ae:c7:14:6e:b3:24:65:ef:
                    a6:a5:12:30:fd:23:44:69:73:19:36:fe:9e:93:b3:
                    f3:00:53:9f:2a:a1:33:61:76:51:20:91:34:26:3c:
                    3c:ae:e1:27:49:2b:2b:da:cb:dd:3e:04:e6:c0:d0:
                    96:eb:14:9b:a5:a3:82:37:cc:09:90:af:85:57:74:
                    7a:e3:38:b7:85:bc:e4:d0:55:cb:81:90:a5:f4:40:
                    1f:48:5e:47:0d:0e:4d:7b:25:41:8e:af:f6:06:f7:
                    0e:cd:12:61:36:a8:9d:d2:15:84:d3:66:0f:17:eb:
                    7c:7a:32:83:fa:ca:51:88:30:7f:67:8f:a7:48:3e:
                    59:ea:fe:66:46:72:3a:f5:71:54:1d:69:66:c7:00:
                    ef:d0:58:52:1c:8e:16:c0:0e:2e:e9:21:cc:d0:d7:
                    4d:4c:b2:0f:9b:17:4a:02:cf:b7:17:a8:6e:31:99:
                    a4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F4:05:9D:3A:C4:51:39:B2:02:01:56:82:A9:2C:F6:AE:53:AF:DB
            X509v3 Authority Key Identifier:
                keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:2f:6c:ab:85:d4:25:da:54:22:d1:a0:0d:8f:6d:df:5d:66:
         a4:94:63:5b:6d:34:9f:74:6b:be:58:10:ff:7a:b7:f4:0d:bb:
         dc:25:c8:64:19:0e:52:9a:77:2f:90:5c:ab:45:51:07:60:7f:
         dc:33:55:f2:aa:7a:5c:06:9b:64:f6:85:99:ea:12:d6:df:43:
         1a:a1:93:70:c7:ec:0e:aa:f2:8f:1a:78:90:56:91:1a:fd:7c:
         eb:5d:11:51:54:18:13:1b:7c:87:33:30:61:0d:ce:01:21:4c:
         fa:d5:7e:98:e5:90:e1:4a:35:60:1b:dc:22:15:91:81:e8:6c:
         f4:bc:13:85:d3:33:d5:b2:be:e6:35:82:2c:d5:77:5e:53:06:
         1d:48:fe:6c:65:43:6f:96:da:57:52:62:69:d8:dd:8e:bc:3d:
         80:65:ca:5e:7b:64:92:a9:e6:06:ce:3b:6b:ab:98:0f:4d:ce:
         20:34:16:53:fe:fe:4d:09:e5:54:f1:dd:29:47:87:5b:68:24:
         ef:68:22:fc:33:7f:22:8b:bb:04:56:96:86:87:f3:54:1c:c6:
         08:5d:d6:69:2c:a6:0b:fa:13:4b:c1:0b:bb:ff:b7:c7:70:8a:
         0c:29:8b:1a:6d:0d:72:49:4b:f3:b3:25:05:8b:a5:ae:cb:77:
         55:09:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:36:22 2024 by rpki-client on console-ams.rpki-client.org