Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File:                     Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier:          MOsJg+3JHrxgDCVcO+VLafrSWrkz9Zrl6Lz75IWRYh0=
Subject key identifier:   27:C6:B0:57:34:4E:0B:64:9C:9F:14:BE:ED:5B:69:70:31:ED:C2:4B
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer:       /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial:       019355AD1BACA7DBD5650983BF161F4514B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number:          0708
Signing time:             Fri 22 Nov 2024 21:00:28 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:28 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:28 +0000
Files and hashes:         1: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: 1TBxniO0CK0zGZdQl+FDPs2chf7bJGe/HxEcgQ3NRC0=)
                          2: bLjE5wAHnF2kq32TOEADdiuaw5M.roa (hash: 2EDBk1BN57T4Ds/T83v/WfMzE+mBoGkkME3GtfAghQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:1b:ac:a7:db:d5:65:09:83:bf:16:1f:45:14:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
        Validity
            Not Before: Nov 22 21:00:28 2024 GMT
            Not After : Nov 23 21:00:28 2024 GMT
        Subject: CN=27c6b057344e0b649c9f14beed5b697031edc24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:17:db:c7:42:ef:bb:e1:44:42:0d:10:4b:
                    ee:14:da:0d:a3:ae:bd:fd:8f:c5:cf:06:40:ea:e7:
                    a5:47:42:70:f4:7f:37:f8:c8:17:8c:a9:a3:60:cc:
                    ed:bb:e6:a8:dd:46:65:0c:7d:a7:6b:d9:d1:69:40:
                    d3:35:33:91:34:bc:f5:e6:85:1d:4a:78:f9:ee:6f:
                    0e:43:08:16:d1:6e:02:d1:8f:97:9f:e6:57:df:6a:
                    b3:b3:13:37:23:f0:d2:54:4e:7e:09:23:a5:1f:34:
                    33:96:68:8b:94:0d:c4:07:5c:36:f7:09:90:2a:eb:
                    08:74:52:ca:15:dc:02:1d:58:c3:ab:39:61:f4:55:
                    55:76:b6:33:eb:70:38:ab:7f:ec:1c:88:08:77:2e:
                    f7:1e:9b:22:6d:a5:f7:8a:8f:1f:e2:90:8e:45:48:
                    6f:16:9f:94:49:e9:76:bc:e9:63:71:78:d6:51:77:
                    bc:ac:b5:22:e5:d3:59:79:04:a9:0b:ab:e9:32:df:
                    12:e8:bc:a8:c5:01:22:ea:f2:45:c3:7d:e1:14:4c:
                    a5:e2:2e:ee:b4:a3:4a:d3:3c:f1:06:56:d9:1c:6a:
                    76:5c:36:a2:78:0d:ce:51:ea:89:71:b1:54:8b:a1:
                    d4:53:a5:3b:35:32:8a:b7:01:c6:31:79:5c:0f:67:
                    06:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:B0:57:34:4E:0B:64:9C:9F:14:BE:ED:5B:69:70:31:ED:C2:4B
            X509v3 Authority Key Identifier:
                keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:39:d2:10:12:37:4a:8a:ab:29:31:e0:35:42:d4:07:46:7f:
         9b:0f:3b:8d:cb:20:28:e5:2b:c1:e0:a2:f7:0c:41:3b:5e:84:
         37:a4:9b:dc:9d:7a:b3:68:2f:1d:b1:d1:da:cf:51:c9:f9:3c:
         67:58:bf:ce:28:cb:6d:6d:51:c9:20:91:31:25:13:cc:b2:fd:
         c1:4a:2c:42:0b:60:53:3f:4c:5c:5b:c3:f7:b2:76:e5:68:f8:
         6d:b1:7e:48:c5:1a:27:59:f7:bb:8a:f0:6d:b3:91:9d:d4:16:
         b0:a7:c0:78:a2:85:4e:e1:92:88:c2:51:55:cd:3a:84:2c:02:
         fd:28:62:1e:cf:db:a4:5c:fa:16:50:1c:6b:35:6f:52:b1:8d:
         f1:a1:36:85:5e:9d:06:06:2d:29:61:38:26:39:ea:f5:f6:00:
         de:4a:36:33:89:0c:63:c5:d7:f6:89:cd:97:4a:27:6e:5b:c8:
         6a:b2:e6:e1:37:3e:10:9c:c0:83:6a:27:91:68:51:18:30:9a:
         15:1b:23:73:62:27:07:fa:06:50:3c:a5:4d:3a:20:3e:77:f1:
         1d:e8:a0:2c:d7:18:2b:6e:33:0f:ec:93:b1:52:fb:b0:9a:c8:
         36:6a:3d:df:9e:da:1f:20:c1:4c:44:d6:c4:fb:4c:98:5d:85:
         2d:40:10:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:18 2024 by rpki-client on console-fra.rpki-client.org