Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File:                     JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier:          qbjiWFf0nOs0q2u7/HgWeOy6598fM2bT12g2Ld9KTD0=
Subject key identifier:   4D:AE:12:82:E1:9D:92:14:B3:B3:CC:E2:51:2F:AF:A7:6D:9B:72:F5
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer:       /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial:       0193568A083B1D88BE95B3958B766C6F48CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number:          077F
Signing time:             Sat 23 Nov 2024 01:01:46 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:46 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:46 +0000
Files and hashes:         1: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: B7NVQpEw+XrwCy3RC/6WMSp2LuWGd9oUpalfGftaUgM=)
                          2: mI6a7lpr2AeM3eUpTpqp4xIMbco.roa (hash: tSyI5yEDLVK/T4HTj8OFAYAadX48C/SNYk+L+YIj6kA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:08:3b:1d:88:be:95:b3:95:8b:76:6c:6f:48:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
        Validity
            Not Before: Nov 23 01:01:46 2024 GMT
            Not After : Nov 24 01:01:46 2024 GMT
        Subject: CN=4dae1282e19d9214b3b3cce2512fafa76d9b72f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:63:81:ad:35:ba:7f:30:b7:da:5e:51:7b:
                    69:ec:e8:33:b9:20:32:20:08:47:fd:bf:a2:3b:63:
                    ac:16:b8:50:a5:53:7b:4b:a4:4d:bc:bf:9d:42:30:
                    8d:d8:75:c3:ec:70:34:b4:ac:b9:e4:21:0d:00:ca:
                    34:48:1f:46:f4:ea:19:e4:9b:66:19:34:05:57:40:
                    46:6c:fd:dc:ec:fe:f8:82:98:01:be:05:b7:08:eb:
                    c8:5b:5b:4a:be:e4:f7:b8:ec:45:e0:48:6e:82:bf:
                    2b:c0:65:13:e3:be:51:ba:1a:05:b9:e3:a9:a0:22:
                    ba:62:dd:37:e7:f7:13:a2:38:dd:98:94:7d:bc:e1:
                    55:6a:eb:dc:12:e9:13:fc:9a:6c:91:3b:e5:0c:b9:
                    d6:a9:94:8a:97:95:fb:80:5b:cb:6a:7a:be:6a:f8:
                    23:fa:00:c6:f7:38:e9:94:36:36:5a:bb:21:4d:77:
                    c2:85:d3:5f:c0:7c:d2:fc:57:63:85:cd:84:45:e1:
                    7e:74:1a:9a:0f:14:6a:94:6a:dd:26:97:be:1c:2f:
                    2f:22:95:08:c1:12:e4:9e:f4:1c:d8:ca:b2:d5:7c:
                    bd:fb:14:ce:ba:59:38:d3:66:f5:ab:5a:7f:3f:af:
                    3d:ac:51:92:63:b5:34:d8:f0:86:d9:49:f1:3e:71:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AE:12:82:E1:9D:92:14:B3:B3:CC:E2:51:2F:AF:A7:6D:9B:72:F5
            X509v3 Authority Key Identifier:
                keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:aa:19:34:81:ba:67:0e:29:aa:f3:ae:7e:ab:fe:d7:e3:10:
         9e:ef:b1:82:02:be:b0:33:0c:77:92:fd:90:24:c2:3b:0c:ca:
         b4:8e:7c:5b:e5:a6:4b:b5:cc:7d:83:a2:bd:94:a1:4e:6b:6c:
         f8:4b:c2:d4:4a:b4:80:73:9b:55:58:c1:d4:8b:44:68:e9:ba:
         2a:00:02:17:00:76:6d:58:bb:e5:b0:e1:97:98:17:ba:d0:16:
         2d:87:00:22:cf:3e:e0:23:db:3c:1c:9b:4e:9f:10:3f:35:19:
         8f:c0:46:02:76:4f:4c:46:b4:62:61:8f:5f:db:58:ce:f8:63:
         ce:64:b3:dc:77:60:86:93:3c:6b:17:f6:78:8d:c5:0c:78:47:
         27:e1:ba:12:58:85:0a:57:34:c7:91:61:bd:aa:67:7d:dd:a7:
         f7:3f:86:7a:0e:9c:db:d3:cd:70:81:0a:91:4a:c5:46:bb:e2:
         20:6d:f1:e1:a7:6e:eb:d1:ed:6b:d6:cc:41:b4:05:94:c6:4e:
         a5:83:4b:5b:49:5d:e4:ce:a9:5e:9b:2f:4e:2f:1c:f6:ff:e1:
         41:20:95:68:05:22:27:73:af:27:8d:0c:a3:45:f2:56:06:46:
         22:42:42:c4:82:77:7e:10:ab:8b:04:72:66:88:0d:37:83:7b:
         f9:41:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:34 2024 by rpki-client on console-fra.rpki-client.org