Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File:                     RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier:          bj7+nIYSTq0fTV85Ozb+QXD4fAqSbRHtCDM/BFfXolk=
Subject key identifier:   41:03:0C:A2:09:A4:61:4B:54:25:26:FE:05:04:C4:6A:4B:22:D7:F9
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer:       /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial:       01936A46AC9A0F76CF3BE3B597FAE57AA6BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number:          034B
Signing time:             Tue 26 Nov 2024 21:00:36 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:36 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:36 +0000
Files and hashes:         1: DorSvCqXbbQQ7tpjdUX9GjGzSSs.roa (hash: qJl0LOo7Bo7HO3bA7xKaocBQguJ7xqbKZvwkdl4VZDI=)
                          2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: rpdA47w7VKwB/WWniq1OH+i/iYEz0NXkmK+ZA+UwALo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:ac:9a:0f:76:cf:3b:e3:b5:97:fa:e5:7a:a6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
        Validity
            Not Before: Nov 26 21:00:36 2024 GMT
            Not After : Nov 27 21:00:36 2024 GMT
        Subject: CN=41030ca209a4614b542526fe0504c46a4b22d7f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:4a:7e:d0:77:c8:f0:fd:a8:2f:a7:56:02:
                    af:e6:79:0b:d2:13:5b:50:7c:21:75:85:b6:3a:f4:
                    3b:33:4d:43:a0:bd:20:da:22:d1:75:15:21:a0:cb:
                    c6:3d:e8:4f:94:16:55:17:15:ed:b0:31:17:5a:62:
                    02:12:94:35:5f:8a:78:a2:b1:f4:4a:0e:34:61:bc:
                    8d:ee:69:aa:9d:fb:74:fa:1c:2a:2e:db:f9:aa:20:
                    d0:f2:dc:8d:74:02:a6:6e:bc:88:d8:6e:b7:59:71:
                    11:72:20:62:d9:55:42:c1:ce:04:8e:58:96:72:c4:
                    61:ca:b8:8e:a2:f0:12:86:fc:65:1f:7b:c5:49:9a:
                    aa:e4:fb:e3:0e:25:96:a1:33:68:87:68:5c:dc:c2:
                    dc:33:31:c1:c3:57:03:57:73:93:59:79:95:5c:4f:
                    9d:c5:a2:38:f4:56:d0:52:f3:3e:eb:48:c8:76:15:
                    be:95:5e:f8:f6:c9:81:9d:1b:41:1f:a5:bf:b0:d2:
                    ee:52:36:c3:3e:08:76:7b:18:73:0d:b0:15:16:2c:
                    b2:ae:e5:26:c2:a8:c8:ec:ec:73:4a:f3:99:e8:3b:
                    f9:a7:97:ec:aa:07:51:0c:a3:2c:0c:c8:65:1e:60:
                    f4:d9:30:03:ac:2e:f4:10:15:f2:6a:87:f8:f3:74:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:03:0C:A2:09:A4:61:4B:54:25:26:FE:05:04:C4:6A:4B:22:D7:F9
            X509v3 Authority Key Identifier:
                keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ac:03:12:c6:fd:cf:cc:9c:b8:5c:0d:c6:ae:34:a1:eb:e1:
         9d:f6:49:df:32:49:b4:00:66:f8:0e:82:23:28:ea:b5:c2:07:
         0a:d1:24:10:7f:9e:78:40:76:6d:91:eb:4f:ca:05:24:49:e2:
         4c:fb:a3:db:59:35:ce:e3:ef:c4:a4:de:64:ad:63:fc:b9:af:
         f0:3d:1b:7f:b6:01:0d:f6:d1:82:3a:1b:56:7d:45:93:cd:5e:
         9e:b7:72:a3:66:e4:da:de:0b:f9:3f:24:17:08:80:3b:4c:80:
         9e:15:08:7c:5f:8d:23:0e:cb:9c:0c:97:02:f1:d6:7b:3d:39:
         e8:d5:e0:36:d6:6c:7c:de:e4:9a:8f:39:dc:0a:8d:ae:9f:18:
         b6:5c:e8:3b:a8:1e:50:ee:46:ca:ca:30:f1:c5:ab:fb:9c:d5:
         a4:9e:ff:e2:7c:91:8a:20:1a:4a:2e:f5:36:53:22:34:9b:53:
         4d:f7:5c:07:29:bf:61:88:13:89:b8:06:c9:d1:fe:4a:83:44:
         15:a6:10:a3:cf:7a:03:63:61:40:fe:1f:1c:62:05:fa:fa:8b:
         45:19:70:6f:e5:3d:d3:d8:98:4e:04:8b:f6:11:08:97:ee:0b:
         6a:c3:6a:03:4b:4a:bc:d3:f3:1e:da:6b:9a:bf:b6:da:a0:14:
         9f:6d:5f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:53:58 2024 by rpki-client on console-fra.rpki-client.org