Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
File:                     fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json)
Hash identifier:          4LXnGRRsm2DaZxYBE5vafUNurL4UTMIBqonYUFDDU3M=
Subject key identifier:   EB:1E:73:EA:9A:05:7D:B5:0A:42:52:B2:E8:E8:D8:D9:5F:71:8A:60
Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04
Certificate issuer:       /CN=7e058377510a3a9245ce72cbe88e0efa19719204
Certificate serial:       019355088C0449A87EC8AA9A55B87A6419EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
Manifest number:          0DB7
Signing time:             Fri 22 Nov 2024 18:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 18:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 18:00:43 +0000
Files and hashes:         1: ZJ9-EKplM2AFUnCS89s4FNXC0q8.roa (hash: fN0oCwdbwbGBk3h9fmGI4oqj4+POczOu/4iHK0UIr+M=)
                          2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: R47Hr1kHEVMOJEhdfQM4Et6xhYaHeRabTmzOKxklg90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:08:8c:04:49:a8:7e:c8:aa:9a:55:b8:7a:64:19:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204
        Validity
            Not Before: Nov 22 18:00:43 2024 GMT
            Not After : Nov 23 18:00:43 2024 GMT
        Subject: CN=eb1e73ea9a057db50a4252b2e8e8d8d95f718a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:65:af:f1:4e:24:bc:3d:d8:a3:29:85:20:33:
                    02:25:c4:24:b3:43:4a:2b:15:7f:2d:4c:0e:fe:e3:
                    2e:35:2e:7d:77:c8:a8:76:ec:05:2d:04:94:f3:7a:
                    11:59:37:47:36:da:a0:28:10:7e:07:5b:ef:49:49:
                    48:5c:91:9a:74:d6:72:43:db:54:cb:b8:ba:6d:3d:
                    5f:a9:97:bb:6e:6f:2a:de:a9:a0:cb:f8:8a:ad:db:
                    91:21:56:41:46:4f:98:be:ef:48:4d:45:00:9a:78:
                    71:b8:79:05:1f:94:e4:b4:11:87:f7:a7:a9:e8:9b:
                    d8:77:5f:93:b5:74:e7:60:fc:fe:ba:99:88:da:bc:
                    ae:b2:ba:68:6d:23:24:7c:6c:d2:1f:17:98:37:e8:
                    5c:7b:2b:70:c4:1f:3e:b8:57:18:06:1c:b4:79:1b:
                    ad:7a:48:36:e3:a9:63:a6:b1:17:e0:bd:7a:9c:2c:
                    33:1e:14:56:d4:b5:08:f8:75:fb:d5:fc:55:52:fb:
                    55:85:f9:f3:81:1b:6a:da:b4:17:97:cd:5b:97:c6:
                    7c:ce:dc:af:96:a9:b7:3e:74:6f:52:19:85:1e:2b:
                    4d:dc:cd:27:c8:66:e6:33:6d:5d:b7:4e:11:e1:08:
                    d3:c5:76:18:bf:e1:0e:ce:49:76:2e:bd:49:51:b2:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1E:73:EA:9A:05:7D:B5:0A:42:52:B2:E8:E8:D8:D9:5F:71:8A:60
            X509v3 Authority Key Identifier:
                keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:7e:4b:fa:47:82:f9:1b:5d:af:56:65:34:86:2b:0c:7c:
         d6:bd:44:68:ce:3b:99:f6:73:21:3b:58:55:26:57:30:d3:df:
         c8:ca:70:f0:5a:13:28:52:2b:1d:69:28:1a:ce:c8:c3:66:44:
         df:7e:90:34:86:4f:e6:4a:ec:b8:9b:a4:d0:a9:99:1c:b0:18:
         8b:20:51:83:98:d1:0e:4e:69:9d:12:a8:9a:a1:f7:a8:74:4d:
         a5:0d:7a:50:3b:43:88:bd:be:ef:ca:9e:11:11:29:61:2e:d9:
         09:cd:fe:da:85:e4:36:59:19:32:d2:d7:62:a4:6a:d2:f3:98:
         0a:76:a7:a6:55:fc:b9:17:4c:8b:01:f9:b4:5f:84:ea:4a:c6:
         c9:e1:bd:7f:ab:6d:11:fc:2c:a6:59:2d:9a:92:b7:d9:7c:ca:
         78:27:11:c2:d4:36:ad:0f:25:3c:8a:7e:f6:83:aa:37:e7:2c:
         7a:b8:cb:03:e1:44:dc:74:58:97:90:23:e7:45:f7:c8:98:82:
         a3:e4:89:0c:fa:12:0a:87:ae:c5:bb:f3:7d:5c:e9:41:2d:09:
         e1:b4:79:4c:d5:f9:45:65:86:70:2a:37:a7:c3:b5:8f:99:25:
         37:35:e2:87:fd:b2:57:4c:db:de:12:90:06:0f:07:7a:5c:a3:
         71:4a:66:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:59:12 2024 by rpki-client on console-ams.rpki-client.org