Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
File:                     Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft (raw, json)
Hash identifier:          KD8D6uHm8EeUo393tdbKqtXdbeZvBrHtLl9il3x7DnI=
Subject key identifier:   CC:C7:F8:A0:D1:64:4A:15:FE:61:23:B1:8F:5E:95:C5:59:C8:42:C3
Authority key identifier: 16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E
Certificate issuer:       /CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
Certificate serial:       019369DA960524E17707FD40A30A621947E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
Manifest number:          45
Signing time:             Tue 26 Nov 2024 19:02:33 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:33 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:33 +0000
Files and hashes:         1: Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl (hash: JoXDpn7IOt9AsZDU5SgmDi9I/2Et3tndN50od9a9XJs=)
                          2: PkbIcnjboVNFXCh_ucRLV5nqo1U.roa (hash: iW6LBTk8EcO6CTacxTpy8nY9XVOfqBjXLSWK/sajzaQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:96:05:24:e1:77:07:fd:40:a3:0a:62:19:47:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e
        Validity
            Not Before: Nov 26 19:02:33 2024 GMT
            Not After : Nov 27 19:02:33 2024 GMT
        Subject: CN=ccc7f8a0d1644a15fe6123b18f5e95c559c842c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:43:71:5b:cc:5e:40:d4:d2:da:d7:90:ab:
                    ef:32:14:36:8b:c0:83:14:28:db:c6:3e:69:6c:85:
                    48:7e:5d:60:d8:7b:c0:74:21:6b:e6:d1:ab:fc:12:
                    af:6b:a0:c5:cd:65:04:08:ad:7b:fe:e7:e1:de:0f:
                    0f:8b:35:e7:7a:a4:5f:3f:ee:a5:3f:f0:c3:28:46:
                    48:5a:da:db:c3:8b:cd:2f:a2:9b:2d:3d:9b:c3:e7:
                    5c:31:d5:00:60:c1:7d:8f:3e:e1:d4:97:fa:a1:5d:
                    7a:98:34:31:34:34:7e:35:0f:98:26:53:c0:39:6f:
                    19:f5:19:76:d9:d3:68:d7:50:3c:74:23:b0:08:6f:
                    c1:48:3c:4d:4d:84:7b:7a:5a:9c:66:62:7b:a0:1d:
                    15:4b:a7:c1:7e:28:c1:05:23:d0:47:bb:e8:49:96:
                    de:79:73:7d:b9:6c:0d:59:e7:22:bb:78:70:b0:9b:
                    a5:07:be:a6:e6:5f:1b:f3:aa:b7:d0:f0:35:67:ed:
                    71:61:c3:58:16:12:f9:80:76:4c:d0:d5:ba:dc:b1:
                    2b:ef:9a:88:4f:d1:2c:09:7d:b4:e1:0e:e9:bf:63:
                    20:4f:de:c5:04:8d:aa:f6:ce:54:1b:a8:42:31:f7:
                    a9:49:f8:f9:91:ec:50:72:ab:c0:29:d6:89:59:36:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C7:F8:A0:D1:64:4A:15:FE:61:23:B1:8F:5E:95:C5:59:C8:42:C3
            X509v3 Authority Key Identifier:
                keyid:16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a7:22:ad:5b:f5:57:38:32:6b:86:74:ed:e2:86:a5:9f:d0:
         81:4e:83:3a:5a:51:a3:05:1c:1e:cd:c5:b3:61:ed:c4:ed:29:
         44:85:d4:63:7a:fb:b5:9e:3b:09:ab:3c:08:af:00:b8:10:5c:
         ca:c9:3e:aa:81:3a:ad:0f:1c:3e:0a:19:47:89:17:12:f0:c0:
         8f:40:a0:47:1e:27:f3:2b:80:41:74:7f:03:d3:4e:ad:74:bd:
         b3:91:17:3b:1b:57:01:ba:4a:2c:3f:10:f7:98:e2:b6:b7:2c:
         fb:1b:79:f6:3e:8b:9b:f8:f9:a5:c1:f6:7e:bf:a6:30:d2:59:
         09:d8:8c:13:9b:eb:69:c8:a9:1c:57:2b:e0:18:03:5f:eb:4b:
         63:cf:2a:9b:79:a1:d7:5e:ed:77:d3:31:87:b2:32:a7:43:b1:
         8d:f3:6e:d5:a7:ef:0f:a9:f4:a9:27:60:11:c0:fb:a1:dc:83:
         c4:98:54:49:d5:3d:9a:bb:1b:1d:7d:14:34:76:f8:e9:5b:a7:
         a1:2d:71:97:85:47:d4:28:26:1b:59:2c:df:3d:3e:37:64:3f:
         b0:d3:0f:6a:86:cd:92:bd:bd:21:09:c0:a4:6a:db:bc:3e:24:
         97:f0:b2:9d:da:26:75:e6:69:b4:e9:78:2d:27:45:e9:82:f6:
         78:8e:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:28 2024 by rpki-client on console-ams.rpki-client.org