Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
File:                     fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json)
Hash identifier:          4TADt9Hcqwx4bKfk4XzEawfgU0BA6Gu/sSmjxANKkH4=
Subject key identifier:   CC:2B:BC:8F:3B:B6:25:D8:E0:14:F4:10:AD:62:AC:26:99:80:83:6A
Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6
Certificate issuer:       /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
Certificate serial:       019352AD3BA11625A1081C1323FF7FD24180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
Manifest number:          0E72
Signing time:             Fri 22 Nov 2024 07:01:44 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:44 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:44 +0000
Files and hashes:         1: 0KurSdigvJml1q7FhHNJubFdhUw.roa (hash: 3Ra/PqXca+RK+HXr/l4jEBjBhFVcGLW0N+FnUmPfUXA=)
                          2: LhU7Df9fhKwVrEGoWFqy2at33LA.roa (hash: 1oOFZ7o00/UMBaggFRbDdxDb2dA6tqDMGLVvKeFhHhQ=)
                          3: fGmJGWvvMU-rkGJLJnGfcUXkiuo.roa (hash: /Brt+QQRyO0PJqFdX9TiS/PXLIRtrz8JjdqXW3XAdpo=)
                          4: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: WqOKsDoFDezdCzAImecnCSyE4rEVHvInSvSkmglmtsU=)
                          5: j-c4Ty9GGoeUD7q5ZaNnLoHe0F4.roa (hash: 7CvH5w4RnwTyRklaia0ATx/cY98dYsFuLTuX/8vHOsg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:3b:a1:16:25:a1:08:1c:13:23:ff:7f:d2:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6
        Validity
            Not Before: Nov 22 07:01:44 2024 GMT
            Not After : Nov 23 07:01:44 2024 GMT
        Subject: CN=cc2bbc8f3bb625d8e014f410ad62ac269980836a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:4d:67:d5:96:9d:cf:c2:3a:19:8c:0a:41:
                    f6:0f:4c:94:7f:f7:f3:ff:ba:a2:36:fd:b2:97:e6:
                    fa:e9:9a:85:07:45:32:ec:c1:d0:1e:44:49:b3:9b:
                    30:46:40:d3:23:15:1e:af:91:fc:de:d5:b9:d4:f9:
                    10:97:98:21:30:7b:a8:b6:53:04:87:3e:82:6c:e4:
                    ec:22:1d:10:70:5c:44:82:b1:9d:5b:7a:9d:ee:e9:
                    5f:d8:ee:35:4e:9d:67:35:0c:fd:1b:30:88:c0:83:
                    cf:2a:6b:0e:52:a3:44:cc:2b:8e:7a:fd:13:f0:61:
                    50:db:7e:b9:a1:ae:80:02:c1:65:2e:37:dd:f3:d8:
                    65:7b:27:9c:83:66:b3:ea:f2:cf:f5:30:3b:06:e7:
                    97:cf:cd:cd:62:97:c8:75:b4:e9:bb:1b:34:65:6e:
                    b7:8c:79:36:bb:c4:d5:76:e4:06:ea:8e:57:33:7f:
                    62:09:cd:b6:4a:76:95:c9:cb:9b:ad:57:93:cb:4d:
                    a4:63:d8:d3:6b:d3:7c:3d:be:1a:82:d4:29:6b:83:
                    d8:0c:30:e0:77:c7:5e:12:b1:87:05:be:e1:28:b7:
                    e8:35:84:f6:a1:36:1e:31:07:fb:b8:db:12:6a:af:
                    51:0e:e2:0a:f3:41:80:7f:27:1e:94:a3:48:fe:ff:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2B:BC:8F:3B:B6:25:D8:E0:14:F4:10:AD:62:AC:26:99:80:83:6A
            X509v3 Authority Key Identifier:
                keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:ef:b7:12:38:89:03:ea:37:ac:14:47:68:66:03:80:1d:79:
         e2:f1:f2:8b:6d:6a:01:5e:eb:a4:d9:d9:64:0b:4c:b9:56:f8:
         da:16:1f:4b:23:0d:ff:14:85:55:3f:0c:d2:67:2c:71:d9:bd:
         43:88:07:14:72:a1:b5:5d:fd:99:37:00:4f:7d:b6:bb:b8:8d:
         d4:66:3a:59:38:2d:2f:b7:40:88:92:cd:b2:11:fb:92:6b:34:
         e9:eb:66:34:14:b5:42:e7:d6:46:41:f3:70:b8:8f:03:fb:e8:
         ec:29:19:15:a9:a5:b7:3e:68:68:f9:9c:15:ae:8f:bc:6d:79:
         ca:d3:85:23:8c:64:be:6a:3a:51:be:1d:a5:a2:87:0d:49:d0:
         a1:7f:3d:5f:25:72:87:84:bf:17:b2:57:d6:cb:21:31:f7:85:
         99:66:a4:53:3f:4a:09:ba:63:6f:19:02:3c:e7:56:23:92:9e:
         e7:10:36:10:a6:4d:18:38:eb:de:8a:36:b1:9e:5c:8a:cc:66:
         2e:d1:26:e2:c6:51:6e:45:cf:a7:9d:51:4b:06:3d:6d:50:b5:
         3d:56:40:d1:97:aa:3b:7c:39:bb:5f:15:58:a3:a8:50:40:79:
         bb:f7:63:4a:92:03:12:f3:34:7f:c9:8a:b3:f2:72:7e:93:c5:
         8b:45:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:16:17 2024 by rpki-client on console-fra.rpki-client.org