Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
File:                     s_7bUAlSbwxrrUI_AM2gigkzt4s.mft (raw, json)
Hash identifier:          tXSBdU3KtuWGYcW52dDG7QB5WN7Q90qU2nvomtKE51k=
Subject key identifier:   25:39:D6:7A:9D:D6:98:47:BF:0E:B4:F5:75:C5:CD:7F:11:71:C4:C4
Authority key identifier: B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B
Certificate issuer:       /CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
Certificate serial:       019355762AC13BC0F41E17A0C5D7F816EEA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 20:00:27 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:27 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:27 +0000
Files and hashes:         1: Ru0tL3cYY9dgBMr2AsOFSvoQANo.roa (hash: 80MVz2tdsRkYLyzzK/H2tl72l35v9hg2F3x9/bvVVyc=)
                          2: s_7bUAlSbwxrrUI_AM2gigkzt4s.crl (hash: CM921LUaUKXdKXQel7OwHPBn32UN1wo9wv8CZXiMI7I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:2a:c1:3b:c0:f4:1e:17:a0:c5:d7:f8:16:ee:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3fedb5009526f0c6bad423f00cda08a0933b78b
        Validity
            Not Before: Nov 22 20:00:27 2024 GMT
            Not After : Nov 23 20:00:27 2024 GMT
        Subject: CN=2539d67a9dd69847bf0eb4f575c5cd7f1171c4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:f1:8a:39:47:93:91:19:fe:e9:c5:9f:1f:
                    48:c2:6e:ce:f1:c1:1d:12:5f:4f:b1:d4:9c:3b:db:
                    0c:4b:ce:00:c9:a2:43:6b:8f:66:6a:64:b2:18:cc:
                    f1:09:97:cd:dd:47:2e:cf:91:e5:d0:d2:2c:11:b9:
                    2f:c3:96:a2:51:c7:68:62:41:d6:d2:61:bb:4b:8d:
                    71:f2:30:36:c6:9b:d6:8d:6d:77:f3:09:8d:db:97:
                    0f:8b:21:11:14:8d:05:ef:31:a0:ff:50:e5:70:e2:
                    1d:0a:42:f9:5c:0f:a3:d6:9a:35:47:58:3f:d9:4b:
                    7f:72:c7:7e:b3:90:85:5d:00:61:14:6c:d2:1c:ae:
                    78:f6:30:ce:cb:48:2c:5c:63:f7:1d:26:56:3b:13:
                    c9:c0:bd:ac:c2:d9:7e:c7:5e:5a:9d:8f:51:c6:95:
                    d2:42:7b:07:c1:e7:50:ac:36:1a:ea:96:92:7d:cc:
                    71:30:e7:fd:78:92:b1:1e:cc:b6:49:8a:20:33:38:
                    13:81:7c:fd:3d:4a:6f:9c:e0:81:38:a9:3e:da:63:
                    cf:d7:9b:28:f6:30:cb:2b:f7:9c:5e:58:12:56:b1:
                    c9:ca:52:09:72:9c:a0:9a:f9:e1:ba:c7:03:5c:7b:
                    b3:1a:94:34:c1:0e:ca:b9:36:b0:89:e7:5a:bb:0e:
                    2a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:39:D6:7A:9D:D6:98:47:BF:0E:B4:F5:75:C5:CD:7F:11:71:C4:C4
            X509v3 Authority Key Identifier:
                keyid:B3:FE:DB:50:09:52:6F:0C:6B:AD:42:3F:00:CD:A0:8A:09:33:B7:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s_7bUAlSbwxrrUI_AM2gigkzt4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5cedc-bf61-4cbc-ab36-ad0953f7fd49/1/s_7bUAlSbwxrrUI_AM2gigkzt4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5e:5c:28:b0:16:d9:b3:69:86:8a:92:6b:6f:3a:ba:bc:ca:
         ba:e9:b8:ae:ba:47:db:13:0e:2e:72:b7:ac:03:0f:fb:fa:5e:
         c2:75:e0:fb:af:84:ff:ae:2c:7c:07:41:e4:98:ff:5e:e4:ba:
         46:7b:67:26:3c:62:87:39:18:82:69:ad:b9:fd:99:46:7d:83:
         45:7a:90:b9:9c:fa:d9:de:f2:5b:ea:aa:83:9b:1c:2b:65:88:
         d9:cb:8b:96:fd:c6:0e:b9:b5:59:21:01:c3:2d:21:2f:2d:7b:
         46:5f:49:f0:d0:1a:52:58:28:18:fa:49:63:b3:98:ac:a7:43:
         6c:43:83:55:1e:df:ec:29:01:02:75:55:17:b5:64:0e:8d:d3:
         7c:cf:a4:04:57:dc:90:b0:e3:97:1d:ee:af:cf:68:c0:87:22:
         f4:f0:1c:cf:d7:b6:a0:d9:f9:f7:25:63:f3:ac:43:69:48:50:
         5a:9a:f0:c0:80:f1:89:18:94:ca:89:1d:a4:07:25:29:e7:2b:
         c1:01:ac:b5:66:7a:a6:34:3d:20:c0:4c:92:64:02:c8:e0:c3:
         60:06:58:39:60:8a:ac:f6:c6:10:8f:8d:cf:0b:22:19:f9:49:
         b4:30:ba:80:46:83:b3:d5:ad:5e:7e:e3:16:57:ca:1b:06:fe:
         8b:c5:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:14:30 2024 by rpki-client on console-fra.rpki-client.org