Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File:                     J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier:          RFhB+yLXfM175b6j0dPIfjb6yYlpEvKmXoXL/pfg+3U=
Subject key identifier:   19:E7:A4:4A:9C:00:2C:21:01:C3:65:C3:76:BE:3B:0B:56:FC:E9:75
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer:       /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial:       019359C0F62B416B6A6EC97DD9B87865F992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number:          11CC
Signing time:             Sat 23 Nov 2024 16:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:38 +0000
Files and hashes:         1: 1-qkXwvYlvGgsuqI5uJO1P8oDAs0.roa (hash: 2D+pnv+26fi7n3xTTwFI7y631G0VukVYTnUNnxy9W/U=)
                          2: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: sHekGWd05TevMjJGb70/jeGseDtW05AWyS8v4gzje/8=)
                          3: fcOZrsQdNAZNPjzuV6-pnOKNwEI.roa (hash: 8ViOAIcslnlzDsfhAL3pZAa61EXBUCo2ayW001xkWxw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c0:f6:2b:41:6b:6a:6e:c9:7d:d9:b8:78:65:f9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
        Validity
            Not Before: Nov 23 16:00:38 2024 GMT
            Not After : Nov 24 16:00:38 2024 GMT
        Subject: CN=19e7a44a9c002c2101c365c376be3b0b56fce975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:0b:7f:8b:07:a2:64:83:98:73:9f:99:c0:
                    8b:0f:e9:d0:74:ad:67:cc:d7:52:91:a7:e8:9c:f3:
                    f1:bf:b8:23:1a:dc:b0:be:3b:37:65:36:23:9b:89:
                    d5:cc:94:7a:6e:23:02:a8:e6:06:3e:e3:0e:a3:3b:
                    87:8a:7d:dc:ca:11:2d:ed:66:df:2e:0f:37:66:b3:
                    01:7b:c6:7a:d0:20:b3:bc:06:86:d3:dc:ab:a5:47:
                    ec:20:9a:eb:5e:fc:7b:fb:8b:19:19:53:f0:02:0f:
                    a5:4d:0d:c1:91:d3:a1:f7:3a:01:9c:15:b7:7a:d3:
                    e1:1c:fa:a4:67:33:6e:d8:51:7e:79:fe:8b:52:c7:
                    19:b3:57:c7:8a:94:f8:1a:c6:04:84:51:44:51:2a:
                    89:b4:ba:a1:d2:8b:f1:97:8f:6a:60:54:c1:1e:56:
                    24:ee:52:51:65:06:d1:3c:4b:d1:c8:1f:42:4f:bf:
                    a5:fe:51:ab:86:73:ea:5d:26:ef:aa:1e:7a:5d:9c:
                    25:05:9d:00:de:ee:f7:ae:f5:36:11:54:49:7d:bf:
                    0f:8f:60:f5:06:48:00:0b:4b:a6:c8:04:cc:7b:6f:
                    2c:25:3e:d2:2a:b8:59:1e:f2:12:d9:8b:8a:c8:90:
                    cf:6c:0b:f7:36:a0:6b:33:14:63:49:41:10:bc:73:
                    91:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E7:A4:4A:9C:00:2C:21:01:C3:65:C3:76:BE:3B:0B:56:FC:E9:75
            X509v3 Authority Key Identifier:
                keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:fa:b3:86:4d:8d:76:c3:5e:a0:49:a5:02:ae:fd:1c:fa:85:
         b5:60:20:ff:6e:ce:75:a2:3d:c0:47:be:e2:22:a0:8c:37:4b:
         62:5c:94:f4:01:a7:fe:83:88:10:73:eb:31:bb:49:60:e5:e0:
         b6:33:92:d4:a8:cd:82:0f:83:c4:f5:c2:48:f8:a1:5e:31:1b:
         33:82:7b:9c:48:64:32:82:12:1f:8c:ea:5c:f1:c6:ba:1a:0c:
         96:be:b1:1c:41:52:3c:55:a2:0a:ac:ce:45:b4:de:7e:6c:59:
         2b:bf:da:ec:72:fc:e9:59:31:0a:e5:b6:2a:00:36:a8:51:a4:
         45:a1:2e:38:d1:d1:f9:d5:f8:a0:eb:c4:a9:dc:0e:52:74:88:
         c7:6b:20:3f:b2:b6:32:5e:e6:9c:9d:01:69:d0:f7:80:63:ef:
         0e:b0:a2:37:eb:9f:d2:53:16:0e:72:09:9a:78:0c:c2:e7:3a:
         52:7e:4d:e9:9f:ab:25:f7:e4:2b:8b:00:e6:fb:88:59:27:dd:
         3c:4b:da:bc:fb:f5:d1:59:66:91:0d:3d:f7:95:93:6f:3e:59:
         22:18:c9:c3:1c:75:ad:cd:ec:a1:ce:a6:07:5c:c5:e5:3e:06:
         38:75:9e:47:1d:c5:00:22:fe:75:84:83:86:be:9e:67:69:f3:
         03:fa:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:57:00 2024 by rpki-client on console-fra.rpki-client.org