Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File:                     ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier:          KXb9Z8VRUhf8jJDclQHipRYxyc12QETxJ7ZkmkF9A9U=
Subject key identifier:   93:57:AC:06:A9:7E:4B:0A:31:20:17:63:1B:AC:46:82:D4:61:5D:91
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer:       /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial:       01936A7D426D55D5EA9B73124A7534E102E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number:          0934
Signing time:             Tue 26 Nov 2024 22:00:13 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:13 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:13 +0000
Files and hashes:         1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: xB79qIIod0A+G1hQlTTFm82b8piyY7qqYaaXW+4lw+w=)
                          2: DuXmkntd0nzY-tcNdToHs8v9Q3Q.roa (hash: xTDVvKPpTCatQJTeG25xRZS68lRUUCgEgEf3dMh6W6c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:42:6d:55:d5:ea:9b:73:12:4a:75:34:e1:02:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
        Validity
            Not Before: Nov 26 22:00:13 2024 GMT
            Not After : Nov 27 22:00:13 2024 GMT
        Subject: CN=9357ac06a97e4b0a312017631bac4682d4615d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9e:5a:c0:f2:11:b1:98:94:f2:5a:f7:28:52:
                    9d:a9:d3:79:b7:e7:ab:a8:c2:c7:b6:df:2d:19:99:
                    74:2e:31:4e:17:a0:c3:7f:56:8e:4e:ee:44:d7:3f:
                    14:b6:be:c5:a9:42:4a:ff:8c:e5:83:9d:da:df:58:
                    21:c5:82:39:02:06:34:79:4a:38:59:ce:49:63:17:
                    f0:3a:e6:82:26:b2:4d:0d:d5:e4:d3:0e:0e:f2:10:
                    ff:8f:da:91:40:8e:6c:d1:63:c3:17:f2:4a:ff:99:
                    f7:a0:4e:2f:6f:c8:8f:bb:67:be:3f:01:f2:34:20:
                    14:8c:f4:18:2c:8a:7b:c6:0a:47:2a:ee:10:f4:f6:
                    bb:0a:81:49:e6:45:25:71:4e:f1:2b:11:36:f9:9f:
                    85:bc:29:a4:31:8a:11:72:8d:94:2f:1d:46:d8:47:
                    e0:5d:f4:f8:74:87:41:62:25:79:8a:69:9a:6c:ab:
                    8f:b2:55:fd:23:df:a4:2a:da:5b:6a:04:73:77:65:
                    1e:0d:00:ba:c9:3c:0d:e8:ba:dc:1b:6b:a9:32:ec:
                    c2:9d:4d:d7:14:6b:b9:eb:de:84:81:06:a4:ba:8d:
                    ea:a0:98:ac:87:54:4c:79:00:2a:c3:e7:ab:97:24:
                    e1:c2:34:3f:a8:51:f6:a6:9d:7d:e3:0e:ec:55:cf:
                    19:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:57:AC:06:A9:7E:4B:0A:31:20:17:63:1B:AC:46:82:D4:61:5D:91
            X509v3 Authority Key Identifier:
                keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f1:0d:c0:81:5b:29:a8:63:62:0a:c1:9e:72:62:04:f3:ed:
         f3:98:8c:45:42:fb:ad:da:54:cc:d6:cb:1e:6f:f5:40:ee:ac:
         9a:b4:45:d0:48:22:6a:7d:b1:ec:b4:e9:f9:22:49:b8:af:b9:
         56:53:6f:17:3a:e5:87:25:00:23:41:dd:c7:b5:be:70:71:00:
         ac:b6:3e:16:06:14:af:a4:3f:d7:e3:ea:ba:de:62:66:47:f6:
         7b:f9:ba:a8:3f:d2:f8:bb:8c:d3:76:47:de:d4:fd:cb:1f:e2:
         e9:ab:55:1d:41:c3:f5:a3:52:53:45:36:d2:c6:22:57:87:42:
         2f:44:9e:87:68:5c:f7:38:0d:0f:50:94:32:48:89:8a:69:0f:
         46:2b:a8:60:57:a4:c7:f1:d5:46:2a:6b:1e:e5:11:03:4f:5c:
         2f:c5:39:3b:dd:98:72:30:93:f2:d5:74:db:d0:ea:85:1a:c8:
         e1:b9:be:a4:f6:6b:d3:cb:42:9d:e9:24:2e:e3:1b:df:31:e8:
         15:9b:79:87:92:97:39:e2:b3:f1:39:1a:07:65:d4:03:de:4b:
         c7:e7:65:3a:12:97:b0:fe:07:7a:57:e4:11:34:c3:b1:81:2f:
         f0:99:7d:f5:95:8a:09:1b:17:a8:8d:ad:af:5b:a1:bc:56:1a:
         09:61:a0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:40:25 2024 by rpki-client on console-fra.rpki-client.org