Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File:                     H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier:          Ry1UlYMC7/CUHIYort6bLjYrKVwZi+WHWhAi8z7w3C8=
Subject key identifier:   88:D8:99:4C:BF:18:49:69:FC:A9:22:83:9B:C7:61:0B:A1:0C:EE:C0
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer:       /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial:       0193587854942F8FF427BD72386A5557CAE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number:          0876
Signing time:             Sat 23 Nov 2024 10:01:40 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:40 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:40 +0000
Files and hashes:         1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: oxJBdsFN/JzTcPtReiKqMnG5JOKrNsMuA2ZtSat6M2c=)
                          2: a37MCOxQ-9IOZnI8-DAeyVliQvM.roa (hash: nTwNnhHXs7eKsSfwz3Gv53D+ILI+aE0ang4ZAmtktgg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:54:94:2f:8f:f4:27:bd:72:38:6a:55:57:ca:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
        Validity
            Not Before: Nov 23 10:01:40 2024 GMT
            Not After : Nov 24 10:01:40 2024 GMT
        Subject: CN=88d8994cbf184969fca922839bc7610ba10ceec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:75:fa:ba:70:9f:1e:cf:b4:9d:e2:dd:e5:65:
                    9e:84:52:78:a1:fe:49:35:e1:9d:7c:79:ad:f0:24:
                    5f:72:9f:ca:55:a6:60:70:62:cf:38:82:ce:a7:65:
                    7e:b1:33:f0:1f:81:01:6a:f2:d3:0d:c7:a2:0c:f9:
                    d1:88:86:d2:ba:7d:17:67:f8:2c:14:64:51:04:c7:
                    d5:96:81:f7:26:f1:6c:dc:ae:79:c7:2a:e8:f5:1a:
                    99:81:a8:d0:4b:7f:bf:43:51:d0:3f:65:49:73:53:
                    6a:b3:a6:e1:3b:02:2c:d3:fd:b5:16:0d:05:76:dd:
                    58:72:1a:38:71:58:4b:5a:d8:7c:fc:af:f4:91:b6:
                    f1:9e:ee:2e:63:86:8c:22:04:4e:8e:0b:92:50:c3:
                    fb:b3:2f:48:7d:7c:66:35:e6:fe:88:3d:0e:15:91:
                    81:7f:56:8d:ad:70:01:56:5b:5d:7b:62:f5:61:18:
                    92:5d:26:45:94:25:09:c7:e3:6d:52:de:d6:c8:85:
                    bf:4e:8a:be:89:91:9d:57:6b:49:dd:c9:4d:b1:56:
                    90:97:7a:eb:8a:71:3e:8b:f1:92:54:c6:98:43:63:
                    a3:f3:3f:b6:e4:fa:8b:2f:98:19:50:f1:60:02:4e:
                    eb:83:93:c0:cf:13:a0:82:d7:2f:b5:51:13:ac:2c:
                    3a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D8:99:4C:BF:18:49:69:FC:A9:22:83:9B:C7:61:0B:A1:0C:EE:C0
            X509v3 Authority Key Identifier:
                keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:3d:aa:ea:cb:6b:54:8d:9d:db:9c:a0:89:c7:a4:75:00:94:
         de:dd:1a:1f:18:35:af:78:51:cc:c8:8d:f9:39:39:dc:e7:71:
         90:63:2b:93:92:a5:49:0c:55:97:05:eb:fc:fb:38:31:37:68:
         27:a7:b7:5b:6e:38:89:e9:ac:02:30:11:7f:cf:11:35:c9:2a:
         cf:58:57:f5:03:f1:15:2a:55:14:1d:56:d1:eb:79:3d:2e:42:
         c2:f4:f5:78:0c:26:8a:bd:69:6f:11:d8:0c:76:41:4f:44:24:
         15:68:7e:00:06:bd:f2:2f:52:b5:71:65:20:c1:75:83:c2:2b:
         21:61:d6:69:c7:79:e3:04:1c:a5:b0:33:df:e3:2a:83:1f:9f:
         71:00:71:87:df:3c:b5:fd:f2:4c:c0:10:9e:d8:12:81:15:10:
         13:16:63:da:ba:7a:e2:a5:6b:de:4a:e2:ea:d8:e0:99:86:9c:
         4b:b9:51:c6:d2:aa:e6:8b:7f:ed:17:8e:0c:d8:0b:99:c6:05:
         84:c1:4d:3f:61:0a:6f:e5:ce:34:11:f0:73:2d:63:8d:e8:a5:
         07:7f:9e:87:16:41:0e:01:c3:f9:c0:b4:a4:d4:5a:07:30:38:
         38:c5:d7:71:b5:8b:d8:d1:0f:a5:2b:45:88:bb:4b:d0:ea:4b:
         eb:76:4d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:07:28 2024 by rpki-client on console-ams.rpki-client.org