Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File:                     cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier:          E16zoe6YofxVqnBYRsU+OPGpK5jRT6M68hus3hBSBWA=
Subject key identifier:   9E:85:EE:79:1A:8E:21:E1:7F:F6:61:EF:3B:5C:22:5D:8B:2F:AF:D2
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer:       /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial:       019369D9BC32F3F93D5CA164AF71EAB9FC55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number:          0F81
Signing time:             Tue 26 Nov 2024 19:01:37 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:37 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:37 +0000
Files and hashes:         1: bQGrRQYpdkn-sGYjT5ch7Xk8JqU.roa (hash: BgS3NmPWcWBqzHaNBXbWmdG/EnX7PQMv1x9H+jub4nU=)
                          2: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: IV8wraZTFKC5jjuTIDz0SAxvU2Uy5SAcpW6ROs0LsY8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:bc:32:f3:f9:3d:5c:a1:64:af:71:ea:b9:fc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716752b91747957dccff0e71da674f329d832de3
        Validity
            Not Before: Nov 26 19:01:37 2024 GMT
            Not After : Nov 27 19:01:37 2024 GMT
        Subject: CN=9e85ee791a8e21e17ff661ef3b5c225d8b2fafd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:8f:e1:b5:0a:ab:f8:02:6f:59:ed:56:fc:b0:
                    20:aa:7c:88:4b:72:77:3c:89:2f:d5:e8:59:ec:8d:
                    eb:6b:56:70:d2:6a:b3:fe:b6:88:04:d1:9e:a0:64:
                    98:08:e9:f2:a9:e9:e1:a4:cf:7e:da:29:9e:6f:43:
                    1b:5d:b4:16:cd:4b:88:e4:61:31:06:a7:d3:0c:5e:
                    a7:43:ce:ec:cc:c3:8a:4f:b3:5e:ff:90:a8:34:55:
                    9f:7b:32:dd:75:e4:3b:c1:80:40:ec:76:80:f0:1a:
                    16:c5:0c:27:c1:74:fc:e8:52:46:d8:3f:74:b1:fa:
                    eb:05:ac:64:e7:30:65:49:c5:9d:91:b5:ec:e0:81:
                    7a:7d:87:de:64:87:c0:9e:78:a1:d1:91:42:19:42:
                    41:87:35:7e:e7:96:67:52:15:bc:89:b1:d0:33:90:
                    59:e8:8e:8e:65:2a:67:70:36:c2:68:bc:88:45:3e:
                    b0:4d:1a:c7:ec:9b:5b:59:4b:76:ce:61:ff:29:8d:
                    e4:ba:24:3f:96:df:b2:41:a0:f3:55:9c:53:ef:6b:
                    b2:c2:64:42:5d:e8:db:ac:dc:a9:49:d0:33:f8:5a:
                    98:65:51:1c:5b:8f:6a:78:fe:2d:a1:aa:56:d5:8f:
                    9d:75:90:53:a2:b0:b4:78:bd:40:a4:24:ef:e9:16:
                    c4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:85:EE:79:1A:8E:21:E1:7F:F6:61:EF:3B:5C:22:5D:8B:2F:AF:D2
            X509v3 Authority Key Identifier:
                keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b0:d7:f3:b2:f1:fb:5f:23:7e:53:18:9c:a4:c1:6a:89:64:
         7b:9d:8f:ec:da:e2:1c:a7:c8:2b:8b:9c:20:b3:4e:df:1f:a4:
         24:40:44:3b:2b:43:5a:0a:0c:ed:94:a5:fd:c7:be:c9:72:fd:
         27:46:08:d8:8e:95:55:ea:aa:15:92:e1:7f:d2:c1:1f:f3:20:
         a3:20:1a:aa:1c:e9:33:63:80:f0:17:6a:4f:50:be:f1:66:a6:
         6a:50:44:e5:0f:c3:92:71:f6:62:3d:32:08:3f:3e:4d:35:e8:
         1b:74:85:25:53:77:f2:6b:ad:fb:d4:78:49:cd:03:a0:3f:52:
         46:bc:60:b7:40:83:69:7a:43:c1:0c:e8:a3:7f:dc:10:f7:ee:
         e6:d6:84:58:8c:45:f2:2f:1a:55:26:aa:75:2f:92:16:41:52:
         0e:f3:c1:02:23:75:50:63:0d:3f:85:9e:6a:c9:b4:47:d3:22:
         b4:2f:9a:d6:5d:3f:69:ab:9c:ae:b0:75:e2:b2:ac:6d:e9:72:
         ae:39:f6:6d:65:97:67:39:55:01:73:a4:91:e1:cf:8d:0c:26:
         26:5f:b5:ec:90:f3:d8:54:f7:f7:d7:18:2b:58:42:14:a1:97:
         e0:b7:5e:af:25:5e:58:bf:62:a0:9a:bb:38:e0:3a:61:7d:09:
         76:eb:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:42 2024 by rpki-client on console-fra.rpki-client.org