Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File:                     1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier:          4gE73mevu+DWVVchxueAg4B+igJ67haWD6EJRyU2qhs=
Subject key identifier:   60:2F:6B:C3:72:0A:30:1F:B3:28:B9:D7:B8:A0:34:98:61:2E:5D:99
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer:       /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial:       019405A0F59432DA8D42CF70556310907F3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number:          106D
Signing time:             Fri 27 Dec 2024 01:00:22 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:22 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:22 +0000
Files and hashes:         1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: HbFVFmTdwgJtbYNI+nXABZNoYLd2+3fKtXp+FbWXRoU=)
                          2: bchsf5nrj1Udv_J5JOU4AokJjK4.roa (hash: 3jvr/yWfPRGWeT1eeF7boHSnP6Iu6hDM4ssqAdaQR64=)
                          3: jLl8nETSHsMZza9ZXEpHXGkmhOk.roa (hash: kSxujOVvA85JDX7QwUsLQZjCoBuxoZ93JUw4XKh0T6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a0:f5:94:32:da:8d:42:cf:70:55:63:10:90:7f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
        Validity
            Not Before: Dec 27 01:00:22 2024 GMT
            Not After : Dec 28 01:00:22 2024 GMT
        Subject: CN=602f6bc3720a301fb328b9d7b8a03498612e5d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:86:ce:2c:18:05:50:e5:21:99:7e:f7:02:87:
                    39:09:3e:c0:6d:ec:1b:e3:0c:87:0e:f8:a4:dd:44:
                    8f:ce:d3:31:4b:ef:1d:11:02:b7:40:8b:7e:81:43:
                    44:32:ef:1e:8d:e9:bb:97:38:e1:a6:47:52:57:2c:
                    bc:bd:34:3b:93:29:75:35:ec:f4:12:6d:03:3c:e2:
                    05:1e:c1:3b:b7:d8:56:e4:80:0e:a8:62:24:f4:c4:
                    fc:41:5b:c4:21:84:7f:c8:53:08:fc:c9:f1:75:40:
                    a5:17:39:9c:9e:71:c2:31:ac:25:3b:e4:e6:e8:cd:
                    44:46:bc:bb:e5:3d:95:9f:2e:c0:0f:98:9c:52:7c:
                    a9:3c:1b:07:ba:3a:ad:23:6d:62:58:2f:bc:2d:a8:
                    7a:74:79:ac:23:53:dc:5c:4c:aa:39:de:ab:12:41:
                    77:ef:c6:96:ca:6b:4f:30:fc:26:b6:a9:0e:ab:ec:
                    d8:6d:e0:7c:24:97:7b:01:53:89:a5:a9:73:ea:60:
                    db:08:6b:cb:74:4c:d0:75:cd:0a:bf:a3:ef:dc:4d:
                    30:10:7b:b9:42:88:8f:b4:c7:2a:fc:44:95:6b:44:
                    53:bf:a7:7f:63:17:f2:76:08:ff:6e:1d:56:16:46:
                    ac:ae:66:fa:08:b4:b0:4f:eb:ab:94:9e:cb:7b:50:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2F:6B:C3:72:0A:30:1F:B3:28:B9:D7:B8:A0:34:98:61:2E:5D:99
            X509v3 Authority Key Identifier:
                keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:36:75:5c:a3:29:41:65:7d:29:84:3e:e4:4d:c4:65:cd:68:
         71:e9:03:47:a1:9d:ad:a6:66:42:97:9f:33:98:da:21:b5:4c:
         db:4b:9a:04:89:e5:6d:66:61:95:b8:07:60:99:08:2e:c7:4f:
         70:75:74:f8:3b:f9:a2:96:23:55:98:19:5c:d5:d7:9b:b6:5d:
         b3:15:8e:ee:91:5e:ef:09:c3:5b:73:38:86:d3:64:e7:24:0b:
         dc:94:cf:c6:e6:b4:08:28:e1:da:03:6b:23:3d:99:c1:9b:57:
         f1:87:19:96:31:aa:f2:47:9f:04:82:15:ef:3e:b3:cb:aa:e5:
         d2:be:40:7b:7e:5b:0b:c1:c0:4f:fe:fe:64:a6:30:b5:bf:4f:
         8d:c5:5a:09:3d:2e:3e:2b:7b:e4:b9:d0:b0:db:72:7c:68:d9:
         33:f6:88:9c:a6:8c:e4:e7:f9:fa:80:05:06:76:f2:d1:be:0a:
         78:61:34:cb:2b:98:9c:8f:3a:0c:58:30:2c:37:cc:97:6c:6a:
         16:b6:ff:b9:9d:f0:55:e5:34:41:d8:3b:89:ad:2e:2e:9f:fd:
         3f:26:20:4a:d5:e1:26:5b:1c:74:d0:91:bd:14:4f:32:46:9e:
         a7:b3:c0:c4:26:98:83:0b:ef:6b:b3:db:30:ef:3a:33:85:4b:
         4e:b5:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 09:43:50 2024 by rpki-client on console-ams.rpki-client.org