Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File:                     h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier:          OULs7aRqg/ISrU5Et4emHaJJuNHneiBCleJYdnKKVGY=
Subject key identifier:   3E:C4:C8:FC:4A:33:49:41:11:67:EB:0F:56:12:34:E2:D8:F6:74:91
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer:       /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial:       019351D0836232B46FA7E13A7FE9F61FB54B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number:          0F1B
Signing time:             Fri 22 Nov 2024 03:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:39 +0000
Files and hashes:         1: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: UnIGEN13hM6YPadOyXgFqKaqIWdMf+q68djysJibQ9g=)
                          2: qaBgEtkEILSyiSp2CfSL3PCeWxc.roa (hash: L5JB71Hh5ikwYnHj0Xo/dUDSAkGNAQgs1COc9y6Ru68=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:83:62:32:b4:6f:a7:e1:3a:7f:e9:f6:1f:b5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
        Validity
            Not Before: Nov 22 03:00:39 2024 GMT
            Not After : Nov 23 03:00:39 2024 GMT
        Subject: CN=3ec4c8fc4a3349411167eb0f561234e2d8f67491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:a8:aa:41:0c:de:39:50:51:26:00:53:2c:
                    7c:82:6f:d2:88:d5:2a:60:e3:3d:78:1c:0e:53:9e:
                    65:57:ed:57:42:55:ff:19:03:c3:bc:5f:30:b6:02:
                    c7:d2:09:68:db:07:20:92:d2:50:71:92:fa:8c:d2:
                    c1:ce:8b:80:31:06:45:60:2f:d3:d8:65:10:d1:3b:
                    bf:57:25:dd:44:7f:8b:b4:50:f7:79:d0:d9:48:fa:
                    01:2a:46:ad:73:70:03:8b:62:73:90:32:5e:57:8e:
                    32:62:7e:94:13:80:81:56:3b:6f:1a:c2:1d:5b:b2:
                    4e:0a:5e:75:04:4c:3a:85:e4:2c:5d:aa:37:5b:06:
                    83:99:04:b8:db:02:33:88:ec:2b:b2:e5:92:b8:80:
                    4c:4f:8c:c8:00:21:14:5a:1f:db:2f:35:3f:f9:e2:
                    f4:28:5c:82:48:6c:15:4e:b6:bd:0a:dd:77:2f:e2:
                    4a:59:86:ba:e8:62:58:d7:5d:0f:b6:39:0c:22:aa:
                    46:1c:f9:da:97:43:f1:fd:f8:af:07:76:67:34:0e:
                    73:ad:85:c5:28:37:68:7d:84:96:92:15:6a:28:01:
                    d0:ee:53:19:b0:d5:ba:25:2e:a8:6a:b7:3f:90:91:
                    db:33:8f:ae:9d:aa:63:89:43:8d:65:0d:c1:ae:3d:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C4:C8:FC:4A:33:49:41:11:67:EB:0F:56:12:34:E2:D8:F6:74:91
            X509v3 Authority Key Identifier:
                keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:fb:40:66:c6:28:ee:9c:e6:c3:64:2d:3c:fe:70:e3:fd:12:
         88:cc:b6:d7:9a:15:84:5d:af:9f:ec:b9:81:3f:21:9c:00:c2:
         79:5b:0b:76:7a:0a:7c:37:85:ce:e2:8b:6d:f2:c8:a7:73:c3:
         1b:06:f4:58:3a:29:2d:c6:2a:6a:5e:bb:ef:8f:99:67:00:b7:
         41:c6:31:ec:ad:a5:db:00:ed:6c:3d:9b:25:0e:c7:eb:f3:ba:
         eb:8c:a9:79:96:32:9d:5a:b5:79:ac:ae:cb:0c:43:58:b1:2b:
         46:50:4c:a5:b7:58:36:9f:f7:ce:d1:8b:8e:90:fc:c7:f3:a3:
         f2:48:67:ff:1a:6f:19:34:20:e1:3c:a1:4a:ea:94:2f:a5:e6:
         4a:c2:27:dd:f5:90:37:cf:99:df:1d:61:1d:ed:db:14:98:be:
         d7:27:0c:ad:ca:84:96:90:18:0e:c2:11:9f:34:e5:2c:7c:b9:
         72:f4:d6:d4:4d:5f:30:76:6b:44:a0:4b:8e:71:c1:d8:66:bc:
         9f:22:16:41:75:b8:5d:cb:7c:a7:c6:f7:f4:5f:40:60:cf:6b:
         d6:88:78:ca:8d:55:e3:09:04:75:3b:18:61:22:17:f9:ae:83:
         f8:65:b1:e8:22:96:3b:39:2a:47:3f:23:c0:bc:ae:88:1e:1b:
         4e:a1:2e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:35:44 2024 by rpki-client on console-fra.rpki-client.org