Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
File:                     jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft (raw, json)
Hash identifier:          F/Edw94RpmBiM2nbQCOz8kxLckNLmIgIQIgybtLsBmQ=
Subject key identifier:   4F:49:AE:21:64:7B:39:EE:DA:6D:3C:0B:8C:74:80:55:44:9B:44:89
Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29
Certificate issuer:       /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
Certificate serial:       019369D950ED7FACB14D2F59DC6C6D2411F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
Manifest number:          1194
Signing time:             Tue 26 Nov 2024 19:01:09 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:09 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:09 +0000
Files and hashes:         1: i8GvaR3gptFHvmvUaqFBBfjK1ig.roa (hash: rGktInduqJOxqSb0GxwB81MW6MRFBQWr39gsdA1IjEg=)
                          2: jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl (hash: wg6xpVVyhSdpDSV13DHTZetNrgRcuxDYmb42WT8dPdE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:50:ed:7f:ac:b1:4d:2f:59:dc:6c:6d:24:11:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129
        Validity
            Not Before: Nov 26 19:01:09 2024 GMT
            Not After : Nov 27 19:01:09 2024 GMT
        Subject: CN=4f49ae21647b39eeda6d3c0b8c748055449b4489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:cb:3b:98:0a:42:d3:b9:2f:32:00:78:19:
                    c9:89:37:17:fe:c3:0e:07:34:b6:c2:37:92:8a:51:
                    fc:b1:e8:6c:bd:20:58:9b:20:03:0b:d9:cf:d5:0e:
                    c9:09:ef:cb:4a:6b:13:9f:c0:23:95:6f:19:fc:e0:
                    fc:bf:00:45:78:04:07:ae:81:8c:7e:38:5a:fd:b9:
                    a3:78:cc:f0:5d:a3:38:a6:31:8b:95:14:7c:26:16:
                    20:ca:a1:33:8f:9e:46:52:c9:16:06:a3:e8:78:46:
                    5b:67:d9:bf:31:22:bf:c5:66:11:0f:13:a2:45:4f:
                    5c:40:fc:93:62:d6:ac:65:b6:76:69:37:47:c8:01:
                    02:23:fb:79:75:76:aa:21:1c:aa:b9:b0:06:3e:b8:
                    dd:2b:20:2a:f6:32:f2:1c:05:31:95:c6:05:d4:86:
                    ec:bb:a2:00:f9:3c:13:92:8c:ba:b7:a5:7d:f0:a9:
                    50:b0:32:96:43:4a:d6:63:75:e4:3f:5a:0c:f3:65:
                    20:b8:7e:c7:25:52:3a:f2:bc:c1:fb:7d:5d:d9:5a:
                    13:41:70:4f:44:3b:ed:99:43:38:c4:29:c3:6e:81:
                    e8:9e:f9:61:00:56:e6:11:3b:77:ed:77:3d:ce:44:
                    1f:42:74:75:ae:68:69:47:0c:b3:7b:62:c7:fe:80:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:49:AE:21:64:7B:39:EE:DA:6D:3C:0B:8C:74:80:55:44:9B:44:89
            X509v3 Authority Key Identifier:
                keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a2:a3:d0:eb:a9:4e:06:ef:6d:57:12:9e:12:3c:6b:68:4c:
         54:b8:e6:94:d0:3e:ce:84:35:2b:ad:a7:27:01:fb:b5:0c:99:
         78:9b:b9:0c:1d:db:92:2b:8b:ca:fe:ca:9a:29:c4:39:b4:88:
         a0:c6:0d:0d:2c:44:31:88:b7:5a:84:8e:c3:7d:d5:75:d8:b8:
         98:33:fe:fe:0f:c0:77:88:16:0a:6f:df:d0:8a:25:1d:d3:76:
         eb:ac:e2:68:73:26:75:a4:8d:23:d2:ca:fd:26:3b:8f:96:32:
         9b:5f:fc:d5:96:f6:a3:22:af:b3:b4:c4:95:ed:f7:b4:b3:fa:
         09:53:80:93:70:a3:e6:a2:a5:48:f3:e4:b4:fe:79:2a:e8:4a:
         c8:0b:ad:cb:f8:4e:e0:45:58:34:8a:4a:98:de:51:62:cd:cb:
         76:3c:5d:27:16:99:ff:e5:d8:a3:2c:38:ba:26:26:60:67:84:
         db:88:ad:c1:30:64:6c:87:e5:fc:8e:ac:ff:e9:84:60:c0:a3:
         9c:03:88:8c:38:3c:34:8c:28:d6:81:81:81:79:40:95:cf:0f:
         39:fb:2c:8e:57:9c:a2:d8:42:53:28:0b:71:c5:51:a2:26:f1:
         65:b6:71:3e:10:3e:1a:95:52:86:9c:9a:a9:6e:2c:11:c9:96:
         7f:6d:ae:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:11:14 2024 by rpki-client on console-fra.rpki-client.org