Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
File:                     Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft (raw, json)
Hash identifier:          Zsiyh+wQ6zGTpgo/eErBj6HsMe/YQItbjNSPM16thtQ=
Subject key identifier:   C7:6B:50:EE:49:C8:BD:B0:90:5C:06:41:AE:99:6C:E9:96:B0:32:6D
Authority key identifier: 26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E
Certificate issuer:       /CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
Certificate serial:       01935689CB346743410C203D15725F8BF63D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
Manifest number:          1301
Signing time:             Sat 23 Nov 2024 01:01:31 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:31 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:31 +0000
Files and hashes:         1: Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl (hash: cJUrV7BNmbRPdUytV3Rhx0KadO0o6a25DaCXn+YOtGA=)
                          2: irSh9fXMM_qvQ3TaZLF-0ZlKXYc.roa (hash: esaCIJ7PB+HIN62sNP4t5ZnTufU4u+TEECieXPkkOrU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:cb:34:67:43:41:0c:20:3d:15:72:5f:8b:f6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267e595ab226cbfc53c0b89650f1b39670ff0b4e
        Validity
            Not Before: Nov 23 01:01:31 2024 GMT
            Not After : Nov 24 01:01:31 2024 GMT
        Subject: CN=c76b50ee49c8bdb0905c0641ae996ce996b0326d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:64:42:d7:c7:a8:41:87:92:69:c8:b3:af:00:
                    99:cf:e5:07:12:bd:97:81:04:b9:81:e5:4a:d2:b9:
                    01:b9:9a:3d:5a:f0:56:8c:2d:74:c3:52:df:ee:87:
                    b3:c9:f7:3a:84:de:50:89:bf:d7:ea:d6:36:bc:a2:
                    51:8c:0e:f9:73:f0:29:24:c1:94:35:76:45:a6:e6:
                    a4:b3:f9:1a:4d:5b:6c:d1:f8:59:4a:f8:4d:e9:75:
                    55:03:ce:6e:9b:bc:79:e4:2b:85:dc:e7:90:f8:b9:
                    7a:a1:cb:f8:eb:7e:c5:62:20:09:e7:87:2e:ca:a5:
                    03:a5:54:98:c3:63:43:b5:5f:ea:7d:f4:48:71:e0:
                    e9:fa:90:59:96:c4:4b:41:fa:10:85:d7:86:81:dc:
                    44:45:7b:0f:07:61:2a:cd:fa:03:d3:c1:a2:55:15:
                    1c:89:b4:7b:2b:c2:a4:53:a4:b5:1a:0c:e5:21:d6:
                    af:03:81:cd:2b:be:e1:67:33:46:7d:c7:bb:ab:99:
                    6b:d6:7b:83:d8:1f:65:d6:60:f0:13:fe:57:09:92:
                    2a:6d:b2:e5:7e:15:cd:aa:ce:87:b4:ea:ae:84:c7:
                    39:79:c7:ea:79:0a:d3:fd:bb:30:15:ea:1c:8f:1f:
                    e8:51:9d:27:4c:f4:d6:34:71:1d:5f:2a:67:44:da:
                    2e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6B:50:EE:49:C8:BD:B0:90:5C:06:41:AE:99:6C:E9:96:B0:32:6D
            X509v3 Authority Key Identifier:
                keyid:26:7E:59:5A:B2:26:CB:FC:53:C0:B8:96:50:F1:B3:96:70:FF:0B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn5ZWrImy_xTwLiWUPGzlnD_C04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e4e057-c698-4933-9d05-7c0a94ae1719/1/Jn5ZWrImy_xTwLiWUPGzlnD_C04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:78:bc:be:d3:00:2e:58:c8:01:fb:fc:c8:53:54:0a:22:8b:
         9a:93:55:b9:d2:2d:26:fa:3a:aa:e1:85:a0:33:d1:84:04:79:
         ab:dd:7a:47:4a:e4:cd:25:bc:f6:1b:96:f9:dc:58:0a:ee:93:
         09:8e:7f:71:11:cd:a2:73:51:df:bc:ad:14:1b:39:ef:2f:fd:
         06:c8:c1:74:31:bd:e9:5a:ed:fc:27:cb:4d:7f:c4:f7:54:6c:
         3b:95:df:a8:8a:ac:3c:5d:43:cb:9b:3c:e9:5e:1d:f0:ca:c6:
         61:9d:cb:ae:e0:cb:f4:68:ee:82:08:e6:4c:a1:9e:ec:41:38:
         8b:64:af:f5:8e:03:b8:71:67:5d:80:74:a4:a6:aa:5e:26:0d:
         3a:ee:a1:f1:f7:18:16:c4:53:c3:93:9b:cf:dd:59:a2:f2:3f:
         d8:39:cd:d6:e1:de:7f:d0:4d:ab:5f:72:85:a4:14:5c:e7:b2:
         ac:74:34:f3:94:67:2b:f2:56:09:15:bc:dc:87:8d:f2:0c:a6:
         43:ca:45:15:13:50:83:99:ae:1d:56:d4:84:93:e0:a4:2b:a8:
         33:02:4e:ef:bd:fe:03:b4:17:d2:0b:42:b5:eb:45:24:10:2e:
         63:f6:58:dc:eb:20:51:34:74:69:fd:19:5f:43:4f:f3:df:0c:
         df:cf:43:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:45 2024 by rpki-client on console-fra.rpki-client.org