Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
File:                     j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json)
Hash identifier:          BsXZSkuFaTrSs7PFSH5Ecjg1RfPG7rQjbv6eusWQ84s=
Subject key identifier:   9B:1C:E3:80:FE:EA:5A:33:DA:BE:7C:D1:BE:CF:CF:3B:C0:69:11:2D
Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
Certificate issuer:       /CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Certificate serial:       019357D2521646A3AD4F19D332AB6240C7B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
Manifest number:          0197
Signing time:             Sat 23 Nov 2024 07:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:21 +0000
Files and hashes:         1: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: PSvSc4Sj4VrbVEQR1yKbTIxXFXItTk7H7if3PVp7yHU=)
                          2: nxQNVL8HFDSK_-kzlx3hiJO09xw.roa (hash: x2vVZBurVMaIC/UD00kd0kcr5m82nCIlkBIcBII0zLI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:52:16:46:a3:ad:4f:19:d3:32:ab:62:40:c7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96
        Validity
            Not Before: Nov 23 07:00:21 2024 GMT
            Not After : Nov 24 07:00:21 2024 GMT
        Subject: CN=9b1ce380feea5a33dabe7cd1becfcf3bc069112d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:38:d8:11:ec:1d:5b:be:36:56:93:95:b4:
                    ac:82:96:b6:85:8c:30:78:00:bf:36:cf:d6:73:94:
                    7f:33:bd:08:2d:55:b0:4e:0b:c8:bf:5f:21:b8:db:
                    b1:01:83:5a:cc:9f:e9:2c:af:de:21:aa:8a:c1:5c:
                    48:60:b8:47:3f:c3:39:a7:bc:56:c0:32:16:3e:88:
                    4b:26:2c:fa:70:41:d9:93:2b:9a:c6:f5:2c:92:b4:
                    ac:dc:ba:3d:eb:2c:22:de:5f:e3:99:ba:e2:ba:a0:
                    53:71:c8:7b:28:07:c5:ea:ee:4e:87:9c:85:54:18:
                    c9:eb:14:ad:77:17:65:7c:46:28:82:9b:eb:40:22:
                    85:0a:b9:0f:98:25:70:28:4c:3f:74:7a:97:d5:bd:
                    2d:ad:9c:bf:5d:de:55:c5:78:93:98:6a:14:5e:9d:
                    b4:f3:2d:28:58:a1:71:16:95:0d:8a:c3:3a:05:09:
                    ef:61:ca:ee:53:68:b6:e1:7f:81:93:6b:a4:d2:78:
                    d6:ef:5f:5c:a1:88:e0:57:4a:ef:60:9a:49:b5:1b:
                    de:26:35:26:76:ef:21:67:ef:6f:76:af:77:db:be:
                    6b:f4:a0:35:b8:60:a1:57:f8:b7:63:8e:23:b4:e0:
                    33:03:6b:90:f2:cb:af:b8:69:93:a8:10:7a:5a:6e:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1C:E3:80:FE:EA:5A:33:DA:BE:7C:D1:BE:CF:CF:3B:C0:69:11:2D
            X509v3 Authority Key Identifier:
                keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:7a:91:4f:f0:9c:60:e2:ca:2b:92:54:36:96:86:dc:b0:5e:
         2d:f5:95:43:08:b5:ee:d7:0d:2f:6d:8f:ec:08:ac:06:ee:f8:
         ca:e0:eb:4f:a9:c7:0a:de:61:70:2a:b8:d8:60:5f:9b:02:88:
         77:64:ad:2b:3e:63:b0:1c:e8:73:0d:e2:92:2d:bd:40:02:a1:
         09:18:6e:3b:d8:db:75:91:df:88:17:4f:bd:7b:46:53:dd:02:
         a7:d0:26:50:5e:a8:4a:9b:42:e8:d2:93:95:d6:4b:71:93:36:
         b3:72:a4:4a:1e:a7:8d:b1:af:40:1e:fe:ea:0e:d7:d3:ec:9b:
         ff:d1:fc:fd:b3:fe:3d:8f:3f:80:86:9d:e0:3a:8e:89:44:28:
         f4:a6:a6:97:98:50:47:5a:f5:e0:ff:6f:f2:7b:fd:59:2b:f3:
         9b:a2:7d:45:09:e7:97:b7:7f:cb:79:c0:cf:f1:f1:f5:69:1e:
         2b:b3:a4:59:73:6e:da:6b:4f:76:d8:13:79:3b:74:c1:9f:56:
         a1:e4:c0:f9:1e:e2:fd:da:47:f4:c8:c0:c3:b9:f3:01:3f:99:
         6c:3c:c0:e0:d9:18:46:ba:75:b6:24:25:13:8f:10:a9:ce:cd:
         95:2c:95:89:8d:78:b3:38:dc:27:5f:13:a3:a1:c0:64:7f:80:
         00:8e:06:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:32 2024 by rpki-client on console-ams.rpki-client.org