Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File:                     e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier:          FHqHRJin5mc4HQ3xMltpGEOwIVDaepzJRNeZLE1YHs4=
Subject key identifier:   CB:36:FC:43:43:2F:E0:3B:3A:9D:28:60:71:EE:50:35:F2:80:85:EC
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer:       /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial:       019352E2EF756027795906F12E9A0A123C13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number:          08D1
Signing time:             Fri 22 Nov 2024 08:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 08:00:24 +0000
Files and hashes:         1: U7smoD3pihpz9SLM0FLSouRxS6U.roa (hash: 2NqVDJ+8pJPQN8+0K5us8Rs4RQpuz4mNrA3CBWcyqSI=)
                          2: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: OP67UGcDEgu7Csq+pVfMkKGeE+EHXgajxZcAyTKN/aM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:e2:ef:75:60:27:79:59:06:f1:2e:9a:0a:12:3c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
        Validity
            Not Before: Nov 22 08:00:24 2024 GMT
            Not After : Nov 23 08:00:24 2024 GMT
        Subject: CN=cb36fc43432fe03b3a9d286071ee5035f28085ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:16:e2:34:c7:d4:5c:85:27:65:90:9f:02:9f:
                    57:f8:ad:d4:73:34:36:4a:a2:2f:27:3f:f0:01:24:
                    52:f1:62:c3:fd:cf:44:4b:37:e9:00:7c:03:3b:95:
                    e4:9b:ba:e2:a4:b8:84:80:8c:0f:d9:ad:c4:b3:8b:
                    2a:d6:85:c1:0c:63:cf:3e:ee:aa:12:b1:b4:5f:17:
                    ce:2d:b6:6c:a1:11:4f:3f:5f:3f:d0:e5:16:88:25:
                    0f:1b:ec:9a:40:40:06:fe:1b:00:9b:6b:c4:38:6b:
                    d2:7a:d2:ef:db:8c:4a:03:b6:d4:3a:d5:ce:1b:37:
                    bc:a0:24:24:a5:ba:cd:aa:72:83:a0:d5:20:04:68:
                    a8:bd:c6:cc:ed:05:16:4e:b5:44:c9:6e:32:9f:39:
                    14:1f:7c:17:b4:d1:39:4f:ae:bf:a5:1e:0e:e0:4d:
                    3e:1e:c5:9c:39:10:c4:50:bb:95:bd:c9:93:6d:15:
                    82:77:d6:f2:db:3c:34:36:4e:e4:0b:20:e5:11:0a:
                    15:cf:61:47:6a:ba:3d:85:94:01:a3:c0:58:b1:06:
                    9b:08:23:d0:13:88:b6:4d:bc:a1:a7:67:96:b0:ca:
                    b5:c0:ad:a2:60:ca:be:97:03:f3:96:97:85:1a:57:
                    25:fe:e6:1a:a0:57:73:8d:37:be:4f:0f:d6:20:73:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:36:FC:43:43:2F:E0:3B:3A:9D:28:60:71:EE:50:35:F2:80:85:EC
            X509v3 Authority Key Identifier:
                keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:48:94:bf:53:7e:4d:d2:e9:e2:55:3a:61:78:f6:f0:94:50:
         1c:cd:fa:b5:82:9f:83:ce:8c:71:3e:8a:51:d2:c1:ce:4f:c3:
         b1:37:2e:33:eb:d3:b4:e1:fd:0f:d6:c7:7f:52:9e:45:91:19:
         49:02:90:c1:1c:b7:a3:8c:b8:87:64:88:6a:d0:72:39:50:9c:
         60:78:46:a3:c1:46:83:7e:23:1d:2f:f5:cc:1a:5a:92:a3:63:
         ca:81:52:46:e1:37:3e:a8:1c:1d:fa:a8:91:c6:53:0e:d5:5a:
         d9:55:51:7d:73:d7:c8:3c:d2:83:0e:d5:f8:39:35:90:29:1a:
         52:7e:4a:45:16:a2:2d:4d:69:b8:0b:12:2e:5c:a1:75:de:b1:
         c3:e4:e6:b9:31:55:c1:63:8b:f9:6a:f0:6d:f3:9f:37:d9:50:
         1d:36:09:9c:20:39:e1:81:d3:c9:83:32:2b:2b:8f:9d:61:3f:
         a2:c4:24:01:37:c1:de:ff:7c:f2:00:83:ee:16:2a:84:6c:5a:
         3c:d6:8c:55:b2:f7:da:d7:7e:72:8d:f3:5f:ad:ef:76:cf:2b:
         ad:4c:81:70:0f:04:de:b7:6b:cb:3f:76:0d:f3:80:4e:83:c7:
         93:ff:4f:4f:ec:ef:5d:3e:02:d9:cd:20:6a:24:aa:56:20:f1:
         50:57:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:46:00 2024 by rpki-client on console-ams.rpki-client.org