Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File:                     hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier:          xaB6ERtzQY1O4HkWthbW4DJd+bRh1zmXnGI4DwJIHIk=
Subject key identifier:   C3:B7:F7:9C:DA:B3:0A:5F:AD:92:FD:B4:CB:B2:5D:01:DB:D6:1D:93
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer:       /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial:       019355765A20D774D44D1543C0EDA749A0ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number:          1203
Signing time:             Fri 22 Nov 2024 20:00:39 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:39 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:39 +0000
Files and hashes:         1: E_VL3YjT2X3pnFtf8LzWHDI6X9E.roa (hash: /nK+Si10TmCBzXjvOVW/Tk9b1HdRxrMMtk/4Lk2igHE=)
                          2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: hhovKWVhJdAYbOYYHkwgsydDWImIFWFYcVPWnwcZ0XU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:5a:20:d7:74:d4:4d:15:43:c0:ed:a7:49:a0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
        Validity
            Not Before: Nov 22 20:00:39 2024 GMT
            Not After : Nov 23 20:00:39 2024 GMT
        Subject: CN=c3b7f79cdab30a5fad92fdb4cbb25d01dbd61d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:01:6c:ce:97:67:58:5a:39:88:78:6b:f9:2b:
                    95:db:b7:94:c2:9c:8f:58:1a:bd:c7:6c:3f:b6:a4:
                    6b:24:34:8a:ba:7f:df:70:7a:26:96:e1:fc:51:d2:
                    28:6f:82:b2:9f:0d:ab:13:73:04:45:65:b9:2c:7f:
                    59:62:28:e2:98:49:99:26:57:b7:45:aa:9b:2a:31:
                    80:df:2c:5e:91:d4:a5:a3:31:a4:a1:03:ea:03:62:
                    06:26:86:c7:99:f1:65:e6:9d:f5:1e:44:4b:eb:41:
                    2b:65:01:a5:14:c6:b7:2b:d4:50:e1:57:7f:1a:b4:
                    c6:76:4e:d5:98:13:60:95:c6:70:04:88:69:7b:cb:
                    7d:a0:a5:e6:b7:f4:14:db:63:cd:10:93:d0:fa:fd:
                    f3:db:25:f9:f2:57:93:ea:fe:9d:06:15:4b:48:3b:
                    73:c7:97:b2:82:b3:79:a3:5b:35:02:ee:f5:30:e4:
                    00:14:91:15:0b:09:91:94:d6:4a:ff:1a:39:0e:37:
                    68:e6:bc:e5:09:81:08:6f:9d:0f:9b:8e:96:76:c9:
                    93:a3:cf:ac:8a:5c:9a:1e:4f:b8:aa:79:13:b7:c1:
                    d8:4f:0d:03:d1:43:32:3d:1a:a4:4c:83:5e:5c:18:
                    bc:15:a0:68:63:ea:f4:f5:04:f0:22:91:c8:bc:ee:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B7:F7:9C:DA:B3:0A:5F:AD:92:FD:B4:CB:B2:5D:01:DB:D6:1D:93
            X509v3 Authority Key Identifier:
                keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b0:5b:fe:b6:1d:29:f7:22:01:ed:9e:8b:24:7f:8c:33:2b:
         e2:1d:51:db:d9:4c:51:fd:20:5c:ab:3c:5b:9f:c6:b9:b7:76:
         b7:80:c9:0f:b9:43:d8:34:ec:36:30:ac:12:e1:03:e1:4f:fc:
         2c:bb:79:1d:2d:2c:aa:e0:f4:7b:89:9e:d7:ae:f9:96:ff:5b:
         31:7b:10:d8:48:e7:ca:55:91:51:7c:48:7a:4a:96:cd:1c:e0:
         6d:b5:f0:5e:a7:58:47:c8:0b:d6:c4:78:f2:70:35:62:8e:8d:
         f6:64:b0:aa:68:58:c2:9e:0b:26:50:9f:f6:61:a8:39:91:80:
         af:de:1f:ce:cc:7b:de:80:92:9b:9a:a0:38:8b:96:a2:b6:09:
         6b:e0:6d:28:04:91:3d:6e:87:27:a1:62:57:fd:f3:0c:11:ed:
         0b:69:f4:fb:9e:43:cd:c4:81:65:3e:32:74:97:32:78:90:b8:
         8f:2e:37:76:b8:ff:31:50:69:3b:c3:a8:d6:79:8e:c1:65:42:
         fa:ea:92:77:22:ac:7c:a7:10:d0:46:ca:62:04:61:3a:1f:56:
         43:bd:33:38:16:67:53:fb:3a:cb:ac:eb:83:5a:47:38:23:29:
         5d:1f:5a:9f:06:ef:92:e9:bb:96:ea:a3:ae:ce:5f:44:59:6a:
         39:af:6c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:01:32 2024 by rpki-client on console-ams.rpki-client.org