Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
File:                     1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft (raw, json)
Hash identifier:          MWwa3+jyxTHnNXYjHKTl8NsFSg8GOvNeHeL/0cYQrO0=
Subject key identifier:   55:41:4F:A0:CE:E1:7F:3E:16:BB:48:93:E9:3C:83:7A:78:1E:42:77
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Certificate issuer:       /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial:       019369D8E72435ABC4B57FB0D73EC53DCD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
Manifest number:          122D
Signing time:             Tue 26 Nov 2024 19:00:42 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:42 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:42 +0000
Files and hashes:         1: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl (hash: W3CJIrGkGFx4KigUo4kYX/51EdoV4F6mZbYeubrFYqM=)
                          2: vn8c2dOQ-6-r-DCWHbprUAVUNM4.roa (hash: 341h+d4mJY0vTQFiCwszBSqkth6gqLwitAnSQTHBx8E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:e7:24:35:ab:c4:b5:7f:b0:d7:3e:c5:3d:cd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
        Validity
            Not Before: Nov 26 19:00:42 2024 GMT
            Not After : Nov 27 19:00:42 2024 GMT
        Subject: CN=55414fa0cee17f3e16bb4893e93c837a781e4277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:63:fc:67:c2:f1:ac:4a:c7:88:3f:1f:08:
                    ee:aa:ad:7d:69:a1:7b:17:4a:a3:45:f6:93:10:74:
                    48:be:57:e1:29:48:68:5b:43:b5:9b:f1:5d:36:83:
                    b6:1f:e2:e4:4d:a8:86:9d:76:6b:8d:71:7a:46:57:
                    c4:43:c3:ac:b7:a3:98:81:3c:40:7e:d0:2b:7e:c0:
                    bd:8d:04:79:2b:5b:33:e4:19:99:23:d6:94:66:76:
                    08:9d:95:90:e7:46:aa:c1:1c:37:85:44:8b:83:1b:
                    3c:39:78:96:c0:7e:5c:f6:56:6b:e8:bb:c7:e6:ec:
                    f5:b8:fe:ad:f7:79:7c:dd:ef:a0:cb:c3:1b:d1:4f:
                    65:0b:dd:bb:b6:da:3c:e1:87:26:f1:3d:8d:0f:b6:
                    65:47:59:f1:63:80:97:30:ee:47:cd:e6:ca:8d:b2:
                    dd:84:61:48:5f:4c:95:a4:ed:9b:85:ea:3f:91:ca:
                    4e:b4:84:15:67:33:a7:27:39:6c:2c:ae:9c:17:f9:
                    e6:a0:5f:d3:45:7d:1c:96:49:6e:78:ef:c3:25:86:
                    25:03:65:78:0e:f6:6a:4f:d9:0f:4d:c6:88:a9:b1:
                    45:50:62:e6:25:b2:5c:7b:14:d3:98:8e:19:fd:03:
                    94:dd:8e:9b:01:99:ae:4c:77:ba:8a:45:25:a4:80:
                    44:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:41:4F:A0:CE:E1:7F:3E:16:BB:48:93:E9:3C:83:7A:78:1E:42:77
            X509v3 Authority Key Identifier:
                keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f2:89:c7:0b:ee:68:40:4a:06:b7:95:56:f8:0c:1e:8c:f6:
         95:b9:8a:56:2f:d4:f3:54:aa:35:76:bc:26:a6:31:a6:a4:c8:
         c0:8e:09:86:c4:11:a6:4e:95:d3:02:22:aa:f2:60:e5:36:5e:
         49:cd:22:e2:93:58:87:ca:b4:f4:96:9d:86:94:37:08:8f:f1:
         06:95:18:27:6d:59:b0:94:cd:cb:a5:e1:d6:ea:ec:60:e9:d3:
         23:0c:34:0c:b1:71:b4:3d:61:c3:7b:2c:71:b5:63:54:14:e5:
         eb:65:30:10:80:44:8e:80:74:c2:87:8f:78:a4:25:5e:a2:5b:
         83:34:c2:e2:4b:d0:4a:46:6c:f2:8e:4f:77:b4:cc:ca:eb:43:
         42:60:75:ac:ae:4c:a8:82:0b:05:fb:16:d3:c1:f2:a7:e6:1f:
         87:1c:65:5d:3f:3a:ac:e1:26:8a:e4:b4:97:82:1f:76:91:a9:
         1f:bc:9b:c9:09:97:cb:63:fa:07:56:ca:85:3c:dc:5d:ad:7f:
         1b:f2:7d:78:cb:80:4f:6d:29:87:d3:3f:ba:44:a6:7b:97:23:
         3f:1e:46:dc:09:9e:32:7f:da:1d:9f:01:c4:3d:6f:28:a5:6b:
         50:28:0f:5b:58:83:07:29:ca:f2:47:51:91:e2:ac:a9:2d:fd:
         56:98:06:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:26 2024 by rpki-client on console-ams.rpki-client.org