Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File:                     1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier:          6C2k0U4iwlR6fkrhwqd5mM/hPd2sV7PPLCfSneF2vVg=
Subject key identifier:   F0:5B:1B:27:63:66:25:BE:C7:82:B7:89:1B:A0:5D:DB:44:95:47:93
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer:       /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial:       0193568A66F6E8EB0F45FED48CFE7B899E2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number:          1072
Signing time:             Sat 23 Nov 2024 01:02:11 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:11 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:11 +0000
Files and hashes:         1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: XpaX+H6BPLL3OTwNpaorRzjYOY+fZC9ce82mmr5Wbis=)
                          2: GwWYe9-w65W8rmbjhpSTvEO04Gw.roa (hash: SXT0ReqIP5OoHcjSf/QA8ZSaMxz1Tg93ZhlytrVLBlc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:66:f6:e8:eb:0f:45:fe:d4:8c:fe:7b:89:9e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
        Validity
            Not Before: Nov 23 01:02:11 2024 GMT
            Not After : Nov 24 01:02:11 2024 GMT
        Subject: CN=f05b1b27636625bec782b7891ba05ddb44954793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:57:9b:8c:d1:ab:03:73:8e:15:d2:5d:61:3a:
                    5a:68:8c:a8:69:69:f4:a2:7b:13:7f:ef:ff:96:31:
                    0e:91:44:5e:19:e2:36:f3:cd:10:5e:a9:4e:7a:2a:
                    74:3a:71:4e:45:57:8e:c9:05:ce:45:9d:3e:79:ba:
                    b6:4e:e2:d0:1c:df:e7:18:b8:0d:8f:a4:69:5d:42:
                    3d:0b:f5:2a:d4:95:9e:8d:c8:1c:ae:46:87:30:34:
                    c4:d3:70:92:a7:16:80:ed:fa:eb:a8:f7:6f:2d:c1:
                    ab:cc:56:11:04:ad:92:67:15:1a:8d:b0:f6:05:9a:
                    32:94:17:e2:83:fb:b5:2a:86:6c:d3:11:9b:8d:cf:
                    99:5d:14:09:74:23:3a:e9:b3:04:a7:c2:6d:ca:e1:
                    79:c9:1a:ad:79:b5:89:00:2b:b5:f3:83:5f:f0:08:
                    f6:b3:c7:30:8b:71:ed:1d:08:06:e6:57:6e:95:e5:
                    de:12:fc:05:38:13:24:8c:ba:e4:f2:3a:c1:c7:fb:
                    b1:31:2d:62:a6:6a:0d:a4:84:27:04:a9:51:7b:d3:
                    22:8f:a5:e4:fc:36:88:3e:32:48:71:6a:31:e4:6e:
                    e5:d9:45:fb:db:96:b2:19:f3:bf:af:c4:a1:81:29:
                    1c:1f:81:42:77:9a:82:60:4f:1e:09:11:22:1d:c5:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5B:1B:27:63:66:25:BE:C7:82:B7:89:1B:A0:5D:DB:44:95:47:93
            X509v3 Authority Key Identifier:
                keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:01:38:5f:f0:2a:b7:d0:0e:a6:30:f2:51:7c:59:0b:81:6e:
         8f:26:44:46:f2:9a:9b:b9:c3:02:dd:ae:d6:3c:da:c1:d8:61:
         65:f1:a7:ce:3f:fc:11:55:5d:e7:60:ed:fa:f4:75:b2:09:a6:
         2e:9d:15:9e:c7:a3:dd:00:43:c5:ec:79:c1:e0:7c:3c:94:0e:
         6e:70:c6:cd:fb:6a:89:10:d9:56:3a:d5:b8:6b:e9:09:4f:7c:
         a9:a2:c0:d1:f4:d4:3c:08:dd:4a:aa:ab:bf:b7:b9:a9:a7:a6:
         2b:1e:c5:d0:6d:f2:cb:21:e8:04:f7:b5:aa:3d:75:84:fe:19:
         78:c4:33:d5:c9:c8:69:d4:20:59:35:ea:de:4f:a1:2e:dc:89:
         2c:98:8b:33:a3:a0:fd:c9:c7:43:a9:b2:51:3c:a2:a3:e9:ad:
         b7:59:8f:71:dc:ba:1b:de:a6:0c:a0:44:96:ce:5a:a7:d9:fb:
         af:f6:8a:f8:61:39:48:fa:0c:06:6d:77:d4:4b:f7:82:89:d2:
         2c:9d:fc:ff:1a:46:8d:a7:31:a4:0e:22:42:eb:fb:e6:20:7a:
         03:26:f8:b8:2b:f2:e7:0a:03:bd:1b:90:d6:14:8d:b8:f2:42:
         f0:03:4d:69:30:97:cb:d1:54:f9:5d:ec:1a:cb:de:9b:71:ac:
         be:a3:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:16:25 2024 by rpki-client on console-fra.rpki-client.org