Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
File:                     i7i2EnIdTUwtB8v-LklemGoPAm0.mft (raw, json)
Hash identifier:          QyuaGkL5IiRq7uAURICSxxVqnKd/bBb7MW/z8GwJj2c=
Subject key identifier:   74:B7:DA:48:47:C0:C8:7A:DD:16:4D:E5:AA:1F:32:57:AC:AC:8E:94
Authority key identifier: 8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D
Certificate issuer:       /CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
Certificate serial:       019239948C6B0B7C16A760C821A9B6FE3FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
Manifest number:          02BE
Signing time:             Sat 28 Sep 2024 17:01:29 +0000
Manifest this update:     Sat 28 Sep 2024 17:01:29 +0000
Manifest next update:     Sun 29 Sep 2024 17:01:29 +0000
Files and hashes:         1: 46FMEFgZLYBUOgCb-rzRvudk7rU.roa (hash: 6s+XziY+2z5jtnJczdnLliQjzVUM6i/KYEQryVt+OKI=)
                          2: i7i2EnIdTUwtB8v-LklemGoPAm0.crl (hash: fjTN0aXZ1N3la7KCxjH/aRFToaSQkSa/ft19aEedmes=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 14:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:39:94:8c:6b:0b:7c:16:a7:60:c8:21:a9:b6:fe:3f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb8b612721d4d4c2d07cbfe2e495e986a0f026d
        Validity
            Not Before: Sep 28 17:01:29 2024 GMT
            Not After : Sep 29 17:01:29 2024 GMT
        Subject: CN=74b7da4847c0c87add164de5aa1f3257acac8e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:08:ef:fa:1f:e1:93:f1:f0:45:ae:c4:30:ac:
                    e0:8f:82:e7:24:89:90:1e:d1:21:23:76:d5:d3:50:
                    a8:7a:9f:ca:4b:25:31:94:ba:93:16:fa:00:84:3d:
                    01:84:a3:ae:64:02:a4:4e:71:b0:65:c0:f0:60:6b:
                    2d:ec:bc:d5:51:94:ec:63:e5:b0:8d:d3:88:ba:cb:
                    67:d9:d7:8a:7b:d7:c7:86:a4:b0:18:de:4d:4f:5f:
                    53:72:03:05:ee:4b:f0:e2:82:9a:42:99:ad:4d:83:
                    0f:80:f6:c3:bd:e0:0a:6a:c1:31:9f:04:eb:e0:5c:
                    e5:ba:dc:df:e9:6a:b9:06:00:8a:51:4a:10:38:86:
                    49:d3:44:b1:06:1f:3b:30:2a:8d:78:6c:67:19:d0:
                    09:16:b4:e5:81:fa:8a:9f:7b:82:c5:30:ff:d3:03:
                    e5:76:9d:11:8a:2c:8e:dd:cb:9b:68:a5:67:be:80:
                    42:fc:90:46:91:6e:e2:f6:e8:77:57:d4:c4:ad:26:
                    04:b8:30:b5:89:bf:15:3a:3e:f0:8f:90:d1:8c:e3:
                    93:cc:8f:92:50:93:ec:6e:2a:7c:66:94:31:69:80:
                    1c:d3:1b:10:5a:92:6b:49:fe:34:a5:29:63:2d:45:
                    b3:0b:a4:a8:76:90:62:45:9a:35:26:0f:1d:69:60:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B7:DA:48:47:C0:C8:7A:DD:16:4D:E5:AA:1F:32:57:AC:AC:8E:94
            X509v3 Authority Key Identifier:
                keyid:8B:B8:B6:12:72:1D:4D:4C:2D:07:CB:FE:2E:49:5E:98:6A:0F:02:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7i2EnIdTUwtB8v-LklemGoPAm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7192c2-a788-4f56-be6b-bb493c46df3e/1/i7i2EnIdTUwtB8v-LklemGoPAm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:5e:3c:f8:fd:74:c2:6c:d3:71:c1:42:90:c8:98:2e:5b:c4:
         20:9b:c6:61:4f:32:90:57:35:8f:f5:eb:58:be:05:71:2a:9b:
         37:27:bd:f3:b9:8b:4e:43:b8:d7:12:cb:ae:7b:1c:56:dd:22:
         1f:e4:bf:ef:d8:34:db:ce:d2:8c:d3:01:3e:31:a3:ee:5a:27:
         75:11:49:17:92:f8:c3:34:f8:49:82:78:fb:5a:19:a7:16:7d:
         cb:1f:2e:c2:62:f1:e2:72:55:04:cb:02:f1:71:51:93:27:89:
         cb:4e:42:1f:36:21:fd:f5:c5:0c:ff:b3:d8:df:56:16:20:5c:
         2f:a4:a2:ee:b7:8e:8f:8d:31:70:2f:50:93:54:ff:9c:59:36:
         cb:38:b1:d1:85:49:fe:b8:2c:d4:85:e0:d8:09:20:2d:12:32:
         99:4b:b5:7b:5a:a6:0b:d4:75:db:a8:1f:8b:ef:46:97:52:10:
         72:f9:11:9f:3d:51:91:f1:e5:c2:5c:57:e1:84:63:ec:05:da:
         35:dd:9d:9c:19:3a:02:89:a1:b3:73:93:2f:71:db:1e:1c:2c:
         9b:1f:a3:d2:5d:93:43:ec:ea:96:52:35:9c:0a:b0:3c:31:c3:
         32:a0:0c:d2:8d:97:24:33:ec:65:e2:2d:02:43:67:7e:4f:8d:
         6b:b1:b4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:24:58 2024 by rpki-client on console-ams.rpki-client.org