Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File:                     1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier:          Z4FVwiePYE3W+W1/ZER2JrPXPXv7C4OBDDTeF55RnvY=
Subject key identifier:   6A:E3:CD:9F:03:16:24:1C:0D:88:1B:98:C4:74:0A:09:CC:94:CD:3B
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer:       /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial:       019369D9C98A04F515E531F0EBC3784476B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number:          1261
Signing time:             Tue 26 Nov 2024 19:01:40 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:40 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:40 +0000
Files and hashes:         1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: wJbkxEFVr0y+RSMYH+jz6vI9LiRoevxtMq3qUxz58P4=)
                          2: Sj7kQmGWwis0_Z4aey9WthHGAtk.roa (hash: Viv5kwUsJuVapisMYhoEDTd2iumBrgm7dbMdPz8q7aY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:c9:8a:04:f5:15:e5:31:f0:eb:c3:78:44:76:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
        Validity
            Not Before: Nov 26 19:01:40 2024 GMT
            Not After : Nov 27 19:01:40 2024 GMT
        Subject: CN=6ae3cd9f0316241c0d881b98c4740a09cc94cd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:90:5d:68:f4:59:5d:a6:ba:1d:f4:79:a3:62:
                    26:64:a2:53:ce:24:06:83:c4:1a:9c:04:86:83:09:
                    cf:06:09:5f:9d:80:f0:d8:22:17:37:8f:93:91:bd:
                    d3:c2:57:84:3e:6a:7b:d0:7d:30:6b:47:56:21:cc:
                    bb:bb:99:33:15:25:d5:fa:bb:b5:99:ba:d6:53:70:
                    87:a1:f0:0c:1e:ff:4e:de:7f:aa:4d:9b:7d:cf:89:
                    58:3a:ca:0e:4c:a7:5d:0c:dd:9c:48:e8:e1:e0:cb:
                    87:57:e3:23:bb:c7:56:62:d0:f6:8d:df:e1:a6:eb:
                    62:44:96:07:c0:ae:99:8c:30:fe:fe:3e:7d:25:84:
                    78:1d:f7:b6:36:fe:ed:99:c1:4e:d2:dd:e9:69:ad:
                    a0:d8:31:9f:93:6a:32:d1:b3:10:68:88:c8:27:fe:
                    40:5a:f7:d8:56:58:e5:94:c3:f0:a3:d7:f1:67:43:
                    18:29:e7:cf:e9:ac:b6:af:00:2b:c8:be:a1:d9:7b:
                    99:b5:1c:b9:4e:7b:f1:7d:9d:b4:e5:bb:e3:bf:40:
                    bd:3b:a0:13:8b:a3:94:08:80:2c:f1:24:d1:9e:e2:
                    10:59:2c:34:57:ca:bd:4b:63:ab:94:2f:c2:1e:c5:
                    04:99:d8:d1:b8:66:f7:66:b1:b9:56:2f:2c:d1:07:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E3:CD:9F:03:16:24:1C:0D:88:1B:98:C4:74:0A:09:CC:94:CD:3B
            X509v3 Authority Key Identifier:
                keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d9:6c:ab:0f:8c:74:ae:0e:a8:14:95:cc:d7:bc:df:2e:2f:
         f8:19:6a:9c:9d:8e:31:78:83:0a:4d:de:e8:8a:46:a9:05:20:
         eb:14:30:3f:95:72:21:1c:2d:51:ca:e3:41:8a:1d:e3:a7:70:
         a1:19:a8:b3:91:4c:cf:1c:74:fa:cf:47:bc:0e:4d:57:c8:db:
         69:63:7c:35:90:a9:85:43:a2:4f:3b:4b:5c:7f:33:50:cf:95:
         b0:5b:4c:a2:fe:da:e4:8a:9b:e2:ae:7a:69:39:05:ea:3c:80:
         63:a4:31:af:bf:09:4e:22:50:e1:b4:49:35:8a:3f:17:54:97:
         5f:66:2b:a9:65:d9:c1:97:5c:7a:7f:aa:f8:f7:89:88:d2:21:
         83:c9:65:53:96:2e:f4:3e:4e:5e:5f:d5:1e:30:dc:51:8e:a6:
         f4:bc:88:01:29:20:75:f2:fd:df:e9:02:48:69:64:ff:c3:68:
         95:e5:7a:fb:3c:26:b2:5e:e0:b1:de:24:3f:94:57:4a:80:a5:
         02:c5:c8:be:e6:78:83:ed:2e:02:e1:57:14:1c:b6:f5:9e:09:
         9b:85:3b:ff:80:7c:c9:5f:90:41:a7:3d:e6:76:e9:13:7d:63:
         fe:cb:a0:92:5a:20:98:ad:26:37:5c:f9:80:39:e1:17:71:49:
         0c:8b:f4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:38 2024 by rpki-client on console-ams.rpki-client.org