Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
File:                     _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json)
Hash identifier:          //fPmFvWHdpp5oou3NauVt1KFzqwvrrN8SPTgZ5FKxc=
Subject key identifier:   97:EA:B5:DD:3A:89:60:A2:52:BE:34:99:90:55:54:89:81:FD:1B:B5
Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
Certificate issuer:       /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Certificate serial:       01936A46B6F5BF926BDF737C32BF3D7B6B5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
Manifest number:          02ED
Signing time:             Tue 26 Nov 2024 21:00:39 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:39 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:39 +0000
Files and hashes:         1: NxUd1uPxVzgqL7jjc2NV_jRMK-Y.roa (hash: T006zJSUSGPu4G6IvsEI8BIsPr7SnI2Q7wdauZtKCOw=)
                          2: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: rJuIV9/m0O8VVZp5QrJWCUKheS4K2hDuKIq+jfYYE80=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:b6:f5:bf:92:6b:df:73:7c:32:bf:3d:7b:6b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
        Validity
            Not Before: Nov 26 21:00:39 2024 GMT
            Not After : Nov 27 21:00:39 2024 GMT
        Subject: CN=97eab5dd3a8960a252be34999055548981fd1bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:f3:c4:aa:73:88:5e:3c:8a:82:2c:42:58:
                    d9:1a:f3:81:b1:a8:3c:38:eb:87:42:a5:e0:b4:ca:
                    bb:95:9c:b0:51:a4:a3:02:dc:93:38:fd:a8:fc:95:
                    49:fd:f7:3e:b2:b8:23:fc:6f:3d:85:1c:48:6e:1d:
                    66:0b:24:9b:0f:bd:98:d5:79:4a:0a:53:c9:16:f3:
                    2a:38:6d:67:21:c3:2c:96:46:36:3f:5a:6e:e8:ef:
                    68:08:e4:fa:d3:ba:04:39:e0:0e:fe:95:32:59:50:
                    3d:35:f8:76:b2:dd:ed:96:8f:be:2b:b7:ac:6d:d4:
                    10:fc:4b:3c:ea:fc:fc:f3:c9:42:ac:21:0d:46:6e:
                    c2:cb:06:ca:42:6c:06:42:62:95:39:54:a1:8b:db:
                    c3:d0:c5:04:79:78:70:fe:b0:45:e8:c4:63:51:82:
                    95:02:58:ef:4f:3c:2b:67:76:14:a7:6d:e2:78:d7:
                    1c:dc:2e:d2:ba:a3:f0:86:be:7d:66:98:32:bc:ff:
                    f0:20:5e:0b:24:9d:13:78:b7:15:de:75:f4:9f:7c:
                    b5:75:dd:de:a0:93:c0:78:dd:6e:90:36:40:24:59:
                    48:d4:50:13:6e:dc:8a:34:09:cd:d0:92:c6:be:5f:
                    84:c3:13:e0:fd:8f:a4:52:6f:90:3f:d1:c8:3a:5c:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EA:B5:DD:3A:89:60:A2:52:BE:34:99:90:55:54:89:81:FD:1B:B5
            X509v3 Authority Key Identifier:
                keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:50:23:31:15:61:f9:23:df:67:9e:9f:7d:f4:5d:9f:39:75:
         d7:c9:76:42:c2:0f:07:a0:f0:dd:66:a2:d5:a7:eb:5f:58:8e:
         b1:b1:91:00:91:22:3a:11:6c:01:b2:a6:b8:8c:54:23:56:aa:
         16:22:90:8a:0b:50:16:b4:42:0e:a5:ee:49:31:40:35:d8:70:
         6e:54:43:15:a8:0e:1a:b9:8b:0f:f3:1e:76:ed:32:3f:fa:c6:
         1a:13:ea:0c:76:ef:43:17:bf:a4:9d:d1:11:f2:64:1b:77:0b:
         df:36:e6:60:68:01:b0:5f:31:17:f4:46:06:27:dc:07:09:1c:
         aa:99:c4:8a:df:20:bc:84:b2:7b:f7:f0:a7:4e:82:7b:fb:53:
         57:28:85:38:e7:67:44:ce:6b:a6:4d:f1:aa:25:e8:ca:0d:4f:
         4b:af:ee:78:59:d5:d7:c9:11:fc:f1:32:10:d6:9f:36:49:ec:
         33:5c:56:dc:a4:d4:25:d5:33:85:67:70:74:9c:47:e7:6d:70:
         c0:97:9f:8f:32:44:b1:96:d9:53:ca:f4:e3:4a:b9:33:f9:be:
         0b:1f:36:a2:78:10:be:fe:4c:a8:2b:6d:0a:c2:f4:16:5e:06:
         46:49:88:60:50:c7:f5:f0:91:a3:10:95:2b:fb:af:82:66:d0:
         47:61:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:53:58 2024 by rpki-client on console-fra.rpki-client.org