Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File:                     sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier:          olTAFmboLy1OezsioZdTN634Uup1pziI6fii3HYaXLQ=
Subject key identifier:   8B:54:8A:22:69:67:28:F8:B8:60:83:E7:CA:83:BF:C8:EF:6A:93:72
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer:       /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial:       01936A7DAD9539C4246C295EBC69052B1284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number:          014B
Signing time:             Tue 26 Nov 2024 22:00:41 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:41 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:41 +0000
Files and hashes:         1: U1D_m81l2jgjA4juSSiHI1zbTlI.roa (hash: LDmDEyNEiY4UVFRoPUf/70s5SCJdcaPrc0vKgaKS86s=)
                          2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: qlxCO5s3BsdVWb4npX9r3LfXNxWa+yjEdP2XNHUfr54=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:ad:95:39:c4:24:6c:29:5e:bc:69:05:2b:12:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
        Validity
            Not Before: Nov 26 22:00:41 2024 GMT
            Not After : Nov 27 22:00:41 2024 GMT
        Subject: CN=8b548a22696728f8b86083e7ca83bfc8ef6a9372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1a:5c:a5:26:e2:c0:27:84:28:61:5e:78:c7:
                    7e:09:cc:0a:c7:1f:e5:20:a9:64:9f:e8:7f:55:55:
                    65:bb:6f:04:a5:88:ec:34:95:ac:a3:74:72:6a:a2:
                    6b:e6:31:3b:e3:97:21:e7:21:b9:1f:c5:ec:81:99:
                    78:a5:55:20:12:5b:2c:38:38:30:e4:62:3b:10:48:
                    41:e6:f7:2c:14:3a:ee:ed:5e:62:a0:4e:d0:9b:6c:
                    85:e2:5d:bc:6f:bb:49:76:8a:8a:68:b2:2f:49:25:
                    b7:d7:1e:bb:47:2f:7b:92:dc:53:24:1b:e9:85:e8:
                    75:91:aa:4d:e0:32:e8:20:ac:1a:84:7b:67:ad:12:
                    83:17:ce:1a:ae:26:f2:90:e8:02:56:44:6c:61:22:
                    c9:b4:b8:0e:8d:d9:d7:d8:b8:04:f6:04:9d:27:e3:
                    06:4a:ea:09:93:41:c3:1b:56:f6:d8:f2:df:59:41:
                    ed:5e:81:3d:2d:45:18:06:6d:69:20:cc:92:bd:6d:
                    f6:fe:74:10:59:a6:f3:6f:d3:5c:48:85:54:f7:1d:
                    66:2e:a6:04:40:ee:2d:ea:d2:e4:8f:7a:bb:d1:a9:
                    2e:88:c3:fb:c3:7d:5b:e4:b8:e6:51:2a:b4:0a:13:
                    44:9f:eb:95:f6:d3:9b:49:b8:3e:54:35:7f:2d:b3:
                    7a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:54:8A:22:69:67:28:F8:B8:60:83:E7:CA:83:BF:C8:EF:6A:93:72
            X509v3 Authority Key Identifier:
                keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:06:d3:74:3c:2d:74:d9:99:29:e9:8a:86:18:61:63:15:
         d5:c0:77:65:53:a1:05:64:27:c9:0d:d0:31:4e:4f:a3:7d:3e:
         c6:01:d6:16:80:68:aa:82:6d:ae:47:81:64:47:44:37:16:f9:
         59:ea:98:af:62:e8:92:92:ec:9e:81:05:96:0a:39:77:73:32:
         da:fd:ca:e9:28:05:c5:74:b8:e6:b6:48:86:7e:d5:e0:19:0d:
         30:3a:96:44:7a:52:a8:1d:32:d0:8d:3f:ad:77:b5:85:00:26:
         cd:f2:ea:d7:89:bf:47:2e:98:3c:31:d1:dc:7c:c4:4f:21:de:
         19:e3:10:89:57:25:9b:1e:b6:5a:24:5c:91:f1:2f:b0:c6:e6:
         56:0f:b6:b4:3a:e3:f4:e5:13:ab:35:e0:f8:c9:08:5c:7d:b6:
         b6:10:12:63:74:c7:35:e6:dc:7d:b5:b1:76:85:6f:b2:47:d3:
         40:8e:c6:00:92:f0:ec:71:f9:43:75:83:92:51:a1:51:b0:00:
         29:ab:25:ac:f5:a5:6d:87:5c:e0:1c:e6:05:4d:3f:ad:b5:5e:
         19:38:a4:85:a6:cb:6b:e0:c9:63:dd:28:fa:ec:3d:a1:b5:4a:
         ee:96:2a:66:52:af:48:77:60:6b:1d:57:69:66:95:e8:aa:de:
         0f:b1:ba:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:38:48 2024 by rpki-client on console-fra.rpki-client.org