Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File:                     7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier:          aoY7ycWuPSNr1Mfabp86Y+dUybczlelKO9+m3ISrfjY=
Subject key identifier:   3E:BD:19:20:44:D0:09:57:A8:5E:69:33:98:6D:62:3D:BE:AB:D4:F7
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer:       /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial:       01936AEB97B1E072D1B4170CBCD05E9B12F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number:          02FE
Signing time:             Wed 27 Nov 2024 00:00:44 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:44 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:44 +0000
Files and hashes:         1: 3Fncb39_Bs14fZAyJA3j8FQ0EZE.roa (hash: 8LPQFmJNKO7x8JcNNb3jtGBTqX2vSmX+3UaKljyFUXs=)
                          2: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: EDGbNDwlh1jmkZbFMyU3uFCIpMyZtHeObaDUy3/hFo0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:97:b1:e0:72:d1:b4:17:0c:bc:d0:5e:9b:12:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
        Validity
            Not Before: Nov 27 00:00:44 2024 GMT
            Not After : Nov 28 00:00:44 2024 GMT
        Subject: CN=3ebd192044d00957a85e6933986d623dbeabd4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3a:0b:21:0d:fd:7f:ab:44:17:f0:e6:86:22:
                    01:38:af:6d:58:3a:85:6c:5c:44:af:45:ca:95:7a:
                    a3:24:27:4d:14:93:52:78:64:57:01:98:93:6e:91:
                    83:a8:09:a0:cc:c1:5c:a4:ab:c7:b4:6f:2d:76:46:
                    07:cc:19:62:61:8f:92:c2:fa:cb:94:61:a4:10:45:
                    5b:4b:ad:eb:3e:f3:2d:d3:de:79:f5:86:b7:9f:81:
                    f3:37:0d:78:33:f4:62:ff:4f:a9:aa:bd:e4:e0:fd:
                    a0:02:10:c0:f7:93:bb:b7:46:ad:66:dc:99:aa:09:
                    90:82:b6:65:b9:2b:7e:61:5a:d7:30:4e:fc:99:f4:
                    8f:0d:55:39:68:e2:09:e5:aa:74:43:13:b2:f0:92:
                    82:15:5e:60:f2:63:b1:99:af:d0:64:5e:46:27:d7:
                    60:af:df:bb:59:e1:81:91:cc:46:20:08:93:07:86:
                    92:fe:1b:b2:4f:e8:4b:bb:ee:45:ea:a8:92:ce:4c:
                    44:0b:af:a5:aa:e4:d0:98:62:12:03:7d:17:43:08:
                    74:23:de:65:26:eb:01:9f:09:92:f8:11:c9:79:1c:
                    9b:d8:40:ce:0f:76:a8:c6:fc:d2:13:b8:91:e2:0a:
                    74:cf:fb:b4:60:65:6f:3c:13:f2:56:17:d3:9a:cd:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BD:19:20:44:D0:09:57:A8:5E:69:33:98:6D:62:3D:BE:AB:D4:F7
            X509v3 Authority Key Identifier:
                keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d3:e7:b1:23:4b:7f:78:08:54:b0:ec:b3:dd:51:2e:23:43:
         09:6c:6a:07:7e:d6:fa:72:ea:72:b9:63:2a:1a:20:c4:1f:ea:
         b2:79:4c:cc:a3:fa:6f:ee:0e:a8:b2:ba:11:c7:1f:13:87:96:
         84:16:a6:f8:83:56:af:88:2b:c8:0e:72:6e:a6:28:6a:07:51:
         f4:19:fd:01:4f:54:27:1e:32:72:37:a6:f0:58:fd:ab:65:37:
         6b:f6:b1:d4:8e:d7:63:7d:e0:cb:01:88:0d:66:2d:d1:d0:1d:
         f4:53:e0:83:0f:95:e4:d9:ed:78:8a:17:07:a3:bb:81:b7:42:
         f5:96:8d:50:13:21:c4:a6:ca:2f:bd:90:ca:69:47:69:87:d3:
         2b:fc:64:b4:e8:ef:5f:43:48:78:12:23:9a:04:8e:df:ab:6d:
         a1:97:e5:53:fd:e1:59:0a:1e:84:51:08:9a:79:5d:dd:3f:8c:
         06:1f:85:78:a0:82:ca:6e:46:eb:74:bb:0c:59:5a:90:e8:6b:
         ee:e9:7f:4a:aa:d5:52:f8:30:d8:2c:ed:ae:16:5d:70:4f:aa:
         e4:64:01:3c:14:3b:cb:e2:6e:00:61:1b:88:0d:b0:28:38:a9:
         c1:c3:1f:70:3d:07:c2:16:ee:d8:c3:35:8d:ee:16:36:e2:9e:
         9a:d5:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:48:58 2024 by rpki-client on console-fra.rpki-client.org