Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File:                     JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier:          7DwAGWLV0oQs3W/leJ7Md8JUD7reUjbRMsOTXLOzjOc=
Subject key identifier:   6C:83:2A:30:67:27:50:97:B0:76:1A:F4:AC:74:63:F9:EC:A6:28:21
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer:       /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial:       01936A7DAC3FCB47C714429298103EE5BB97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number:          0950
Signing time:             Tue 26 Nov 2024 22:00:41 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:41 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:41 +0000
Files and hashes:         1: Ia8BRBnZIo-G6GmQdCcTpOlqqYY.roa (hash: f7KaSJ1BG2aGyigS2gIUfQ1/3lKqNDCF4s0avuMVX5A=)
                          2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: 3yVgpznbvS2MZLiUzYrlm8mpjHWrXNzkd8M4T6DtXK0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:ac:3f:cb:47:c7:14:42:92:98:10:3e:e5:bb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
        Validity
            Not Before: Nov 26 22:00:41 2024 GMT
            Not After : Nov 27 22:00:41 2024 GMT
        Subject: CN=6c832a3067275097b0761af4ac7463f9eca62821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:15:08:5d:96:96:92:ad:2c:d1:81:a9:90:
                    cb:8a:57:08:cb:8a:54:24:84:d4:82:d5:d9:05:40:
                    b7:1a:6a:6c:8c:33:6a:5d:e9:7f:80:18:2c:05:12:
                    39:41:5a:70:10:ae:b6:bf:ee:04:4b:30:ed:b6:c4:
                    b4:ef:58:5f:15:28:4e:8a:d7:5c:4a:48:1d:c8:c3:
                    a0:a5:32:a7:5a:77:e7:d1:56:22:9a:fc:cf:d2:3f:
                    0e:53:16:e2:d7:e3:2a:76:19:50:7d:40:5e:b8:75:
                    d9:e3:49:98:1e:79:46:9b:13:89:94:66:f3:31:b2:
                    12:83:62:46:c2:f7:d6:22:9b:b3:ca:aa:6f:d1:7f:
                    a9:e2:c2:95:41:a7:7a:12:72:25:bd:77:30:6b:51:
                    82:1d:a2:f4:a7:9f:19:fa:ab:79:46:7b:86:90:40:
                    0d:d9:de:cc:bc:ef:84:3a:48:85:96:dc:d8:3f:90:
                    d7:a6:1a:72:d6:b8:55:83:99:f9:49:46:b1:19:06:
                    b2:b4:7b:e5:98:36:d6:c1:7f:5c:5a:69:d8:70:65:
                    54:e0:f8:be:35:3a:ed:1b:0a:c7:69:32:aa:67:89:
                    23:86:d2:3c:5f:b5:d0:61:e7:4f:09:fd:af:45:b9:
                    18:83:39:d3:87:83:78:43:f4:d8:64:3f:0f:32:59:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:83:2A:30:67:27:50:97:B0:76:1A:F4:AC:74:63:F9:EC:A6:28:21
            X509v3 Authority Key Identifier:
                keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:27:c6:25:97:6d:6d:37:0b:5d:f7:59:05:ea:18:eb:96:e6:
         3f:d4:18:36:72:70:ae:de:fa:fa:9b:a2:97:e7:76:09:a6:6e:
         96:44:e7:6c:1b:29:ef:8d:b8:b3:00:bd:95:c5:ca:93:64:4f:
         d9:db:d4:d1:2f:9e:47:ff:5b:ed:3c:26:3b:5b:e8:3f:b5:a0:
         1f:f4:87:20:2d:56:78:46:b8:77:20:65:5c:81:b3:3b:b9:2f:
         80:73:f0:c5:45:f4:cf:48:f2:9d:6c:86:75:75:c7:4f:5a:1b:
         f1:1e:b1:04:44:3b:de:8e:54:e0:32:a4:fb:ea:97:ce:1f:f1:
         71:69:26:49:be:c7:e2:e3:c9:83:1d:b1:87:1d:d8:c6:31:75:
         bb:43:c4:76:12:ba:f5:b7:22:01:40:78:c6:96:a4:da:8b:e3:
         6f:ff:e5:df:f2:41:70:9a:59:86:13:33:f8:c5:91:80:76:02:
         b3:05:35:c0:dd:77:24:7a:70:2e:58:e9:7a:3b:21:53:15:39:
         c4:7f:e7:a7:f3:83:51:50:d4:e4:1d:b3:92:19:67:ec:2c:32:
         58:b8:15:a2:5e:02:21:df:19:de:6e:80:6e:c6:7c:2b:ef:40:
         e4:92:1d:8e:b9:1b:30:b6:ae:9f:f4:89:17:fb:c5:56:c5:16:
         a9:52:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:51 2024 by rpki-client on console-ams.rpki-client.org