Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
File:                     hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json)
Hash identifier:          r+qwqyXuIm33R5PeT0MSGQxwD+jIM/WWrESVTiZjvHY=
Subject key identifier:   A7:54:D6:17:05:F0:C5:C9:7E:3D:BD:6E:CA:8E:37:5E:B4:50:55:33
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Certificate issuer:       /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial:       019352ABE75ABB4B87A78495EFC47556AB16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
Manifest number:          06CC
Signing time:             Fri 22 Nov 2024 07:00:17 +0000
Manifest this update:     Fri 22 Nov 2024 07:00:17 +0000
Manifest next update:     Sat 23 Nov 2024 07:00:17 +0000
Files and hashes:         1: _N1VG_MfPkRf6LRJh6ZkbqWPeuE.roa (hash: WLjLLyTPonTHZiNrohpAodN+eZ5NQtyD3825duOCmlg=)
                          2: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: XyBeryoDf12rq2/EQ+Jg5zqabMFMDZXkkIRiRyyN2Q4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ab:e7:5a:bb:4b:87:a7:84:95:ef:c4:75:56:ab:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
        Validity
            Not Before: Nov 22 07:00:17 2024 GMT
            Not After : Nov 23 07:00:17 2024 GMT
        Subject: CN=a754d61705f0c5c97e3dbd6eca8e375eb4505533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:4d:e3:b7:61:71:06:aa:9c:5f:ee:6c:d4:
                    32:b0:84:82:61:b7:86:55:71:c0:c4:8a:03:c3:f8:
                    3a:d6:da:4e:3b:83:b4:e9:2b:bc:e7:8f:e4:65:48:
                    a9:e4:bb:cd:d3:2d:a1:88:dd:17:ea:0f:2f:8e:48:
                    43:19:4f:93:d3:a1:02:83:05:42:4d:36:ab:f1:93:
                    b4:11:ac:38:df:f3:03:cd:01:e4:7f:9a:e3:59:c3:
                    f4:74:fd:0e:1d:cf:69:27:f7:55:8f:7d:af:bf:b1:
                    75:b9:ae:22:ea:08:7b:6d:d5:75:07:ed:00:91:11:
                    14:7f:70:db:02:ff:44:53:57:71:4f:ca:c0:fd:b8:
                    5b:67:d1:e7:59:ae:0f:b2:f2:c4:1f:4d:27:41:60:
                    52:15:58:a5:c6:c9:98:a7:d6:4b:00:67:35:0e:d2:
                    09:19:0a:11:f8:e4:69:d7:05:6b:e6:01:83:af:a9:
                    9b:34:bd:05:92:18:6c:4c:b6:e3:73:c3:bc:88:6c:
                    09:35:70:47:a4:8e:5c:05:29:74:59:f8:d9:2d:7e:
                    de:53:71:cf:44:8d:02:c4:87:a2:4a:59:84:84:10:
                    7d:22:74:a1:6e:07:65:71:f9:8b:9d:35:fc:62:42:
                    a3:c0:3e:86:5b:ed:ca:fb:82:96:83:95:ad:65:6d:
                    d1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:54:D6:17:05:F0:C5:C9:7E:3D:BD:6E:CA:8E:37:5E:B4:50:55:33
            X509v3 Authority Key Identifier:
                keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:16:c2:eb:67:bd:4a:38:cc:01:6c:25:87:5c:80:5b:4f:70:
         4e:cd:71:f9:44:75:aa:7d:89:c2:8d:43:22:f1:78:d9:22:8f:
         6f:60:ae:c0:d5:c4:9c:3e:49:bf:22:a9:4a:f4:83:f1:c1:38:
         bf:e5:9d:6b:34:97:14:57:d2:fa:1a:e8:07:39:b1:5d:a8:20:
         6c:fe:72:a0:ec:60:0e:ef:6e:89:ab:b6:6f:0f:4a:5a:51:00:
         67:9d:cf:67:b9:f2:3f:69:fd:86:4d:0e:79:94:1c:58:e7:67:
         2a:85:49:dd:dc:d5:0a:4a:f5:6b:0b:3d:d7:33:99:b7:6e:b2:
         73:6b:ed:28:04:fe:d8:26:74:1b:2e:6e:ae:a8:6a:15:0a:d6:
         ab:9f:86:66:b1:f2:f5:a2:7d:05:da:f7:88:82:13:dd:07:0d:
         0e:6e:22:28:f9:ef:3f:b1:b4:3f:2d:ad:51:61:40:af:9c:ef:
         eb:79:3c:bb:0f:c2:d6:0e:bc:c7:2a:5d:39:23:17:56:eb:02:
         e3:55:82:20:a0:d1:bd:ee:42:59:8f:86:60:5b:d5:72:22:fa:
         00:2a:70:c6:de:54:d7:35:2b:6a:68:42:83:f9:ec:14:2d:55:
         05:c2:5d:f4:3b:a7:d1:c1:b7:16:2d:f3:00:74:79:d2:6d:5b:
         4e:4e:2c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:40:41 2024 by rpki-client on console-fra.rpki-client.org