Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
File:                     Mss8BdaixRwv9S3Z3LnitVxASPk.mft (raw, json)
Hash identifier:          PFMtChcI+riQUu6VifOXOn5UF+rU+FugxFQLJcs62qs=
Subject key identifier:   FC:71:C2:2B:F3:57:1A:44:FD:90:42:51:F3:8D:20:E9:08:5A:8B:D6
Authority key identifier: 32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9
Certificate issuer:       /CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
Certificate serial:       0193572DBA270E1329B71CC72C100EFE154B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 04:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:34 +0000
Files and hashes:         1: Mss8BdaixRwv9S3Z3LnitVxASPk.crl (hash: s5iQIAE/XjkHAaj+sTcVUlep+MBW5mzj67Ir2DpcoVo=)
                          2: yTiEtYptXvB0BTg1nySDb_BXwyM.roa (hash: rx7KFJmZoHLiA0GZAQJhxPb6ORIiGjs3/tTqkH9fvyU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:ba:27:0e:13:29:b7:1c:c7:2c:10:0e:fe:15:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32cb3c05d6a2c51c2ff52dd9dcb9e2b55c4048f9
        Validity
            Not Before: Nov 23 04:00:34 2024 GMT
            Not After : Nov 24 04:00:34 2024 GMT
        Subject: CN=fc71c22bf3571a44fd904251f38d20e9085a8bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:39:fd:fd:c7:87:7b:66:66:36:39:2b:6f:
                    c1:6e:05:52:d6:ae:83:50:97:ed:bd:e6:f7:59:da:
                    f4:9b:ea:c2:e0:44:52:ac:c8:7f:92:ab:e4:08:05:
                    d8:6f:39:bf:68:14:a9:21:5f:ab:97:f3:e8:2a:ce:
                    dd:f8:b0:76:dd:67:a1:ef:53:6f:9a:b9:8c:21:12:
                    0f:4a:6d:49:73:e1:b9:94:c2:8a:94:03:21:44:f7:
                    03:93:e0:85:27:ab:34:77:10:61:a4:d8:b8:63:c9:
                    a5:24:7d:d5:08:af:fd:a1:30:ec:57:42:69:06:6b:
                    b8:f5:d4:8f:77:9f:6f:eb:81:5d:36:4e:29:80:fe:
                    71:d9:45:60:b4:03:36:2a:f3:64:23:1a:02:a4:1b:
                    60:3e:4f:43:e1:1b:a5:5a:46:33:c9:ef:48:84:7f:
                    2a:ef:22:74:b6:61:bb:06:15:22:c1:35:a7:3d:dd:
                    59:4b:8a:b7:ba:13:c4:17:47:f2:44:4f:55:c8:24:
                    65:49:c0:77:90:ea:0a:b2:7d:ba:c1:ed:fc:22:17:
                    85:4e:25:6e:3b:f8:f7:6c:45:f9:cb:24:dc:e6:01:
                    72:fa:e0:7b:be:a3:f7:44:b5:5a:42:92:6f:43:7a:
                    a8:8c:3c:1a:9f:3d:3a:71:d7:47:58:5c:cb:57:5f:
                    2c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:71:C2:2B:F3:57:1A:44:FD:90:42:51:F3:8D:20:E9:08:5A:8B:D6
            X509v3 Authority Key Identifier:
                keyid:32:CB:3C:05:D6:A2:C5:1C:2F:F5:2D:D9:DC:B9:E2:B5:5C:40:48:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mss8BdaixRwv9S3Z3LnitVxASPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9062e2-95ae-4656-b2ee-984a8eb51e45/1/Mss8BdaixRwv9S3Z3LnitVxASPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b1:c1:30:37:c2:64:b8:e5:0a:ab:76:90:7b:e9:ec:ec:13:
         7f:74:8d:02:5e:d9:c4:55:f1:1e:ce:f6:fc:23:7f:32:02:01:
         18:81:ee:ef:57:83:15:07:88:73:9e:3b:1b:d2:d5:af:26:e7:
         2f:59:0a:9d:0b:b0:dc:0d:31:f9:3c:8a:85:b4:c1:f0:d8:00:
         83:12:e1:eb:4c:1d:a3:e5:8f:f5:c4:f1:9a:b4:06:a5:5a:64:
         7b:b3:fa:c7:4a:92:b5:a8:a1:0e:37:9b:18:da:1f:1d:2b:c0:
         45:a7:58:5b:e6:f9:0b:da:67:30:28:62:60:4c:c7:f8:7a:53:
         46:4c:ed:57:43:ec:3c:28:0d:56:73:f2:cd:d4:63:ea:93:f0:
         6c:e1:5f:ac:eb:58:99:44:2f:09:c0:66:39:01:5d:cc:8c:51:
         3d:10:c1:17:54:7d:0d:1c:14:c0:41:be:e9:dc:72:55:81:1e:
         a6:8a:60:42:1f:25:a0:8c:6f:e0:30:f8:c5:47:0e:82:6b:97:
         b6:84:ce:07:8b:9c:40:24:12:d6:cc:db:c6:e8:e4:e6:e9:e1:
         15:74:9f:bc:3e:15:f5:72:ce:7c:09:2d:9c:68:6e:f8:c9:4e:
         6a:3c:cd:90:10:d5:8f:ef:5f:df:4a:8b:72:ef:f0:7d:50:c5:
         34:83:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:27 2024 by rpki-client on console-fra.rpki-client.org