Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File:                     FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier:          fyyzQn6Q7vW498IDx+He5/FX3WPAT+itCIRfkuuePNs=
Subject key identifier:   C1:11:6C:D1:DF:9E:DA:16:BB:A5:DE:F8:8C:3A:46:47:88:14:45:2B
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer:       /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial:       01936A0F8C470F48B426918978D53056DEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number:          1380
Signing time:             Tue 26 Nov 2024 20:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:24 +0000
Files and hashes:         1: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: SbDJ8yFxbjwlQE3Jm1aZe+5aeqJZ58eQUAd0hZXx1zw=)
                          2: Tac1p3sbAfrTkW7YEygrsh6fmiE.roa (hash: osx0td2CrYDy6xedDvO+8aNDe2ZCoUHB+MIXHlLsk8M=)
                          3: ahGB3zVct9yGN-ECECVq-u1WXc4.roa (hash: NtLbGqxmZyJqf9seo1V7gxCGMBWum1Oagy2Lm6PUqgc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:8c:47:0f:48:b4:26:91:89:78:d5:30:56:de:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
        Validity
            Not Before: Nov 26 20:00:24 2024 GMT
            Not After : Nov 27 20:00:24 2024 GMT
        Subject: CN=c1116cd1df9eda16bba5def88c3a46478814452b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7f:0a:45:4a:4b:ff:98:59:3a:cd:cf:1d:53:
                    e8:fd:cb:de:21:7b:64:61:1b:c9:27:36:24:c0:03:
                    13:ba:35:8d:e3:af:da:53:58:74:31:88:11:29:06:
                    2d:50:3f:34:de:b8:01:1c:a6:d3:28:5c:70:6d:28:
                    b1:cf:31:78:16:85:c8:b6:44:18:5f:ca:a1:58:39:
                    50:59:1d:f1:1d:29:ca:2d:d0:47:85:87:09:50:85:
                    5b:8c:b7:30:9a:97:eb:72:5e:e2:74:a1:ba:3e:4c:
                    ab:2a:7e:af:60:b4:63:17:d2:eb:3c:80:b0:69:22:
                    8b:3b:99:35:f6:b2:20:f1:12:ab:f8:5f:39:a3:73:
                    18:b2:85:c5:35:27:14:ce:f0:a5:33:cf:72:a7:9a:
                    32:db:ec:cc:11:fc:81:36:87:1b:a5:1d:ad:c0:fd:
                    bf:91:78:32:70:4e:83:e6:68:13:1e:e0:81:3f:05:
                    82:99:b3:30:34:96:b5:ee:5d:1f:c8:1a:da:fd:db:
                    fc:23:e6:08:b7:2b:90:1c:ad:a7:3e:c6:8d:94:82:
                    35:ad:b1:b9:2a:6f:f0:54:19:55:81:27:07:52:10:
                    79:eb:fe:b1:b0:6a:43:58:40:32:a1:16:8c:7f:4f:
                    02:d2:91:d6:82:ec:4b:9b:30:bf:cd:fe:a1:b9:50:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:11:6C:D1:DF:9E:DA:16:BB:A5:DE:F8:8C:3A:46:47:88:14:45:2B
            X509v3 Authority Key Identifier:
                keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:82:42:23:2a:58:b0:9d:b3:63:2f:01:30:a5:16:d1:37:9a:
         2a:ef:67:7c:b0:9f:e2:64:3d:22:4c:3e:00:2f:3b:c3:e2:a5:
         e0:05:10:54:c7:a6:bd:61:37:22:ff:39:e4:fb:bd:5a:d8:32:
         25:e3:b8:63:1c:e0:d3:6b:e1:72:75:98:66:8c:07:be:52:87:
         d5:a2:9f:6a:85:5f:39:f8:38:7d:c9:98:be:d9:56:b9:cf:e3:
         64:10:ca:68:e6:10:ca:92:cb:5b:e3:4c:fb:0c:83:69:1d:12:
         a3:a0:22:65:aa:da:fc:ca:e3:e7:d0:af:8e:73:62:8a:4d:3b:
         36:68:6f:cf:6f:d5:61:75:03:b8:77:47:4e:a2:12:8f:0a:0e:
         16:ff:4b:00:bd:94:2d:96:26:cf:9c:9d:f2:b8:82:73:ba:0c:
         b5:b1:1e:87:e6:92:5f:a9:bf:a7:87:c8:54:d4:65:cf:cc:c3:
         52:24:f5:a0:3c:eb:be:a0:f3:de:c6:1b:01:6f:d5:0f:96:bc:
         3f:47:f8:de:ba:8b:da:5d:99:14:8b:3b:28:2d:bd:04:47:a4:
         0a:21:dd:78:ee:39:22:b6:47:bb:5c:4a:f7:99:37:d7:16:f2:
         9d:68:04:c8:20:68:d8:1e:d1:63:8d:20:71:54:cd:f4:8a:7d:
         24:8a:e5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:19 2024 by rpki-client on console-ams.rpki-client.org