Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File:                     1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier:          T+5fYoOAU2Z6Zp3EMmg5XyXH+j87lFlVA+R8fdPKbhA=
Subject key identifier:   08:8F:E7:39:38:B2:DA:80:E7:83:B7:F3:9D:34:1B:16:6C:67:56:68
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer:       /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial:       019406481DAFA89378C2D9A7AB963FE40614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number:          13CB
Signing time:             Fri 27 Dec 2024 04:02:56 +0000
Manifest this update:     Fri 27 Dec 2024 04:02:56 +0000
Manifest next update:     Sat 28 Dec 2024 04:02:56 +0000
Files and hashes:         1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: W3r8BK02iNsZYWP/VHjpv9WzcB+wbAekVhN6fSDt/LI=)
                          2: 6ivJZU8zBDIEewWwCSIMFAfwsmc.roa (hash: 7mSbGFpVls9w3PSImLFZcA8TJwAT4kphcJVlpxv486A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:48:1d:af:a8:93:78:c2:d9:a7:ab:96:3f:e4:06:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
        Validity
            Not Before: Dec 27 04:02:56 2024 GMT
            Not After : Dec 28 04:02:56 2024 GMT
        Subject: CN=088fe73938b2da80e783b7f39d341b166c675668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:14:69:a3:bf:98:cc:af:2c:7c:d4:d9:5f:1c:
                    e8:6c:3b:78:8d:59:91:b0:01:50:71:06:af:98:76:
                    1f:e3:72:95:16:57:74:4b:f0:a8:85:2f:f7:5a:73:
                    3e:a6:93:58:25:7f:37:ff:ce:52:49:04:02:9f:4c:
                    e1:bd:1b:f0:d6:d8:78:77:ba:3e:88:07:40:a5:0e:
                    e6:fa:92:fb:a9:fa:2e:b5:de:4f:db:b0:56:78:53:
                    35:b3:17:d4:76:61:90:47:3c:e0:26:86:1d:70:a5:
                    ef:0a:a5:36:13:cc:52:6b:80:77:04:bd:b7:5c:d2:
                    db:d3:04:34:0d:6f:69:34:de:f6:a8:57:76:e6:af:
                    e7:df:2d:f9:4a:3e:71:0f:b3:c5:4c:33:11:44:78:
                    7d:47:05:81:81:da:17:72:da:87:df:ed:7a:ba:bc:
                    56:76:01:13:11:58:3a:43:c4:06:8a:64:45:3f:be:
                    6d:d6:ec:68:f2:d5:dd:c0:4e:6b:54:9a:29:45:0d:
                    88:df:cc:57:4e:b4:89:96:50:78:8f:b7:68:3b:24:
                    31:ca:1b:f8:50:98:89:40:94:ac:c2:89:a2:f4:db:
                    ef:ba:72:2a:c3:6f:3b:4c:5f:8e:de:41:62:5f:6e:
                    c4:82:bb:ff:4e:15:51:dc:9b:59:44:f7:4a:0a:eb:
                    93:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8F:E7:39:38:B2:DA:80:E7:83:B7:F3:9D:34:1B:16:6C:67:56:68
            X509v3 Authority Key Identifier:
                keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:21:14:22:46:2b:b5:ae:65:ce:c9:0f:bf:5e:26:6a:06:
         47:cf:bb:20:9c:6c:25:0c:af:52:b7:7d:4b:4c:b3:dc:93:cd:
         d8:3f:30:8a:fa:35:eb:cc:87:69:b3:34:16:25:4c:79:82:ec:
         d8:22:b8:48:e9:4a:aa:f1:7c:bb:60:04:84:0c:f8:77:c0:96:
         6b:b7:8c:2b:e8:91:81:b3:63:3e:5b:32:ba:80:fb:c0:a9:2c:
         21:31:bb:1b:23:4c:6e:b7:12:e1:8b:95:31:ac:10:d8:96:e6:
         fe:bc:54:65:a9:c3:31:16:9d:ca:11:28:d8:8f:31:76:ad:9f:
         2e:13:82:da:55:25:85:31:5e:9e:09:fc:d5:ed:6d:91:39:3d:
         4a:20:ae:17:ac:70:65:ed:ae:e5:0e:04:91:02:62:e5:2d:9b:
         8e:21:f5:a5:22:a2:e7:2c:e1:15:a5:81:c3:5e:43:37:8a:f9:
         14:6f:06:d6:d9:c8:4c:0a:0b:c7:84:9a:a4:a7:0d:c6:6d:a4:
         78:89:55:d4:98:1c:65:88:82:3b:3a:63:99:d2:9d:26:cf:af:
         60:5d:d0:40:00:c3:86:62:05:a5:57:e9:ba:cf:76:7c:16:1e:
         58:a4:df:79:f8:29:fd:c1:bd:46:92:2e:90:e8:59:96:3b:ad:
         fa:97:6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:38:32 2024 by rpki-client on console-ams.rpki-client.org