Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File:                     1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier:          oOJ5GZKj2sOUznOAV/UyGboYBS278vy0rMYCz2BpKsg=
Subject key identifier:   E7:0F:DB:F3:2F:59:EA:06:57:B2:93:AE:26:E6:DF:AD:49:05:AB:C4
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer:       /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial:       01935764FE50281EDD6C40EA2C767032B3F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 05:00:56 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:56 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:56 +0000
Files and hashes:         1: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: 1U2lIFY6WwVuOJ/kTXR4P6tZYx6lGTLJAOZNiShsfhY=)
                          2: Cg9jnniW3hl5JJn2PxWRGeld7Mg.roa (hash: R1Lw2M1Vj/8FcJ6CiGZdiX2llgLpA0gjO63OfdAJeJI=)
                          3: hMOfdz7IYRfRAquZke5ca-f2lS4.roa (hash: MNCxsQPuaTgXMceVCtAdg4znJP3oml1ywl3NLZrSODc=)
                          4: n92K3tBjYXFblQmDMty-rgdYRT4.roa (hash: HMyztyd4TbGG4K4DHbgAQLNvMb4S7gFlfUR2KeVtKW4=)
                          5: r-pWZtY6PHzZUtrLVHgmYVqhibs.roa (hash: dBntIJudF5zpzD/YcnJ5cFAEa85n70cQWOiQcj1F1cU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:fe:50:28:1e:dd:6c:40:ea:2c:76:70:32:b3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
        Validity
            Not Before: Nov 23 05:00:56 2024 GMT
            Not After : Nov 24 05:00:56 2024 GMT
        Subject: CN=e70fdbf32f59ea0657b293ae26e6dfad4905abc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:a2:28:10:a5:4b:b9:18:a3:e5:ac:9c:d0:
                    a0:f2:43:eb:1f:0e:7a:b0:1d:c6:d4:ba:94:c0:96:
                    2f:03:f0:52:b8:8a:ea:93:ee:22:1d:5e:f4:f3:3b:
                    70:e2:7c:b0:3b:be:d8:1b:a6:88:3f:f0:f1:69:23:
                    ce:d2:b3:de:74:10:1c:13:89:af:74:03:d1:a4:12:
                    87:dc:e1:91:ff:8a:92:8e:0a:e8:f5:ed:f1:25:32:
                    71:c4:6e:9c:08:3c:54:84:1d:fb:b2:71:e3:7c:8b:
                    4c:1d:23:a1:08:9e:57:43:1f:ab:a5:84:de:67:f0:
                    e6:d6:31:70:0f:47:28:dc:e9:dc:15:b0:74:25:de:
                    49:f3:1a:02:bf:81:12:57:b7:73:bc:66:bf:85:e3:
                    ca:48:19:36:8c:57:f5:16:cc:b9:79:83:6b:e6:dd:
                    64:b4:98:ac:e6:32:8e:ea:5d:9b:a5:cd:dd:c4:b9:
                    53:29:7a:34:76:83:a5:f6:c1:78:ca:fa:67:8d:74:
                    da:b8:57:c8:ae:58:1a:d5:d4:6e:1c:dd:ed:bf:07:
                    34:b7:23:fe:99:d5:e2:ab:62:da:12:b6:08:e8:d4:
                    80:56:ab:e2:64:b1:c1:d9:d3:2a:f6:ac:2a:41:0e:
                    b1:c8:a3:7e:62:ba:a8:85:0f:26:25:fb:cf:8f:ee:
                    27:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0F:DB:F3:2F:59:EA:06:57:B2:93:AE:26:E6:DF:AD:49:05:AB:C4
            X509v3 Authority Key Identifier:
                keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:75:c6:46:89:c8:d8:f8:d0:eb:20:2b:b8:0f:7f:1a:29:ea:
         f4:a8:55:98:1e:73:cb:9f:b9:2b:60:42:84:22:11:63:ed:b2:
         18:06:40:61:cf:3e:0a:76:8b:4b:65:83:4b:7f:fa:f2:6f:bb:
         a3:2a:9f:19:f5:5e:34:18:04:f8:a4:1f:ab:fe:13:25:80:74:
         bf:a8:52:ae:d7:ae:6f:f2:61:29:44:80:5b:d1:27:b2:37:55:
         ec:51:5a:3c:e3:96:34:47:ff:c8:ba:ab:b1:7f:ed:85:8a:ee:
         64:15:ec:90:38:8e:54:af:18:cf:05:3f:b0:dd:34:47:05:4c:
         ca:e1:34:da:2c:37:ef:63:4e:ce:e9:2f:f8:47:eb:31:ef:49:
         62:71:be:56:dd:f6:57:d5:f9:47:fc:0d:9f:f8:c2:15:89:4f:
         5a:23:33:ff:1c:3d:5b:cf:7c:c8:76:fe:d6:f3:48:21:04:90:
         a1:7c:f0:d4:da:da:ad:f8:2b:38:a3:2a:6c:80:05:73:b9:13:
         9d:12:1b:18:80:a4:f9:f3:aa:a2:7d:a9:fa:c2:5d:18:95:c9:
         0c:d9:df:17:17:9c:ce:b2:94:96:a0:27:18:95:8f:de:f7:45:
         ff:61:42:a5:c4:0f:43:af:e7:be:ff:9c:9e:21:59:ff:14:0a:
         ca:14:30:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:52 2024 by rpki-client on console-fra.rpki-client.org