Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File:                     sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier:          TGV+47iFLtAL5LVNVspAzbmwEtZZidivrdBxq7QZtjw=
Subject key identifier:   30:06:C0:02:DF:83:5E:1B:18:42:A3:AF:FA:D5:86:E4:F4:0A:BD:7B
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer:       /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial:       01936AB4D0F61DFB1FAB5709A2FD03446E8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number:          0C13
Signing time:             Tue 26 Nov 2024 23:00:54 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:54 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:54 +0000
Files and hashes:         1: EpbVXDNuUExOwnTLJb2CgGRynSQ.roa (hash: 2I1nNLjR59j/XALA3pPyQ/Z/XzQoKYD7XZKcIK7g5XY=)
                          2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: bv9m5nwU1PZYohmO+BE/Q0bH9F4LKrPe1IYDEsqJV3M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:d0:f6:1d:fb:1f:ab:57:09:a2:fd:03:44:6e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
        Validity
            Not Before: Nov 26 23:00:54 2024 GMT
            Not After : Nov 27 23:00:54 2024 GMT
        Subject: CN=3006c002df835e1b1842a3affad586e4f40abd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:6f:c9:28:19:b5:d2:b1:d3:51:cc:e9:03:
                    e2:95:e9:a9:4b:bd:f9:6b:29:90:71:5b:36:d4:0f:
                    6d:d5:c8:bc:ce:6f:0d:8a:15:8e:d8:58:c9:e8:51:
                    c3:9e:d3:6f:36:fd:f9:2e:d8:91:89:47:a1:34:4f:
                    9e:28:4e:96:a8:8f:9e:a4:8b:f2:35:21:d5:e4:40:
                    0c:c2:92:5c:93:7c:d0:48:2c:97:c2:4c:52:95:2d:
                    f7:f7:d7:4b:43:0f:5e:51:0c:ef:ca:8a:62:3b:8c:
                    a5:9e:ab:44:51:c2:b1:e4:39:dd:82:ef:ba:5d:ed:
                    2c:ba:a9:c7:84:5b:05:be:80:f9:c9:06:f4:d5:27:
                    9c:dc:f5:a3:af:67:4f:71:c1:4a:7b:72:16:d1:6b:
                    03:41:c5:60:c4:03:50:b0:44:d2:cf:24:6c:08:4e:
                    94:3b:ce:67:16:52:8b:5c:18:16:7e:8e:04:ab:2e:
                    24:2e:30:0b:6e:bd:dc:62:8e:51:e7:87:3b:88:a1:
                    ee:9d:03:3c:26:0a:49:50:e6:42:e0:07:80:cd:1b:
                    b3:d4:f3:fb:fa:c8:a6:0f:b5:6b:6b:44:eb:68:c1:
                    5e:95:ef:49:10:1b:60:94:bb:d3:27:58:b9:54:34:
                    d1:6c:0e:5d:b8:2e:af:85:9e:cc:22:dd:1a:b7:9f:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:06:C0:02:DF:83:5E:1B:18:42:A3:AF:FA:D5:86:E4:F4:0A:BD:7B
            X509v3 Authority Key Identifier:
                keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:58:8c:7c:ad:a8:45:27:69:a0:48:b6:95:13:42:8e:09:2d:
         93:91:a2:65:61:fe:d7:0e:6c:15:36:b5:98:8e:2c:66:a1:47:
         2d:a4:2f:77:16:10:ea:22:5c:51:d4:7c:e3:e8:5f:32:ac:2f:
         f0:40:4f:9c:02:16:fd:73:d6:97:fd:d8:03:d2:8d:ae:95:89:
         7d:3b:a5:ad:40:59:c4:69:88:50:c8:0b:8c:68:eb:c7:ed:1e:
         f1:07:da:49:fc:d6:90:37:a1:f2:b0:86:96:f9:6b:d3:1d:ee:
         5a:d6:c5:c0:7b:ed:38:6a:52:58:43:8e:f7:15:da:93:8c:c8:
         d4:ff:f4:4d:ac:c3:70:29:77:eb:36:8f:7a:23:74:c7:0c:d0:
         98:a1:76:d8:f2:9a:6b:1c:a9:e7:06:98:37:42:4e:09:36:b9:
         47:53:28:06:f3:5c:cb:7f:3c:50:f5:6b:55:82:16:e7:13:85:
         76:70:97:df:81:1a:48:46:e6:02:10:3c:0a:62:40:9c:3d:f3:
         62:39:c1:04:fd:9d:ed:3e:2f:cc:e7:6b:bd:56:c3:6a:1f:6e:
         34:cb:55:a3:76:12:39:76:39:51:7a:cc:de:91:9e:94:16:c5:
         87:a9:fc:fd:b0:12:a6:8c:74:7e:50:f9:ee:92:5c:ad:2f:60:
         31:43:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:24 2024 by rpki-client on console-ams.rpki-client.org