Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
File:                     sMeY09W2CWzTnliSWiihffthznU.mft (raw, json)
Hash identifier:          afqefjkPUFeQkiW/7Sw0Qli3rnxJvkWNy2GB5RlrZ5s=
Subject key identifier:   1B:CC:6F:DA:5B:73:1A:D9:19:67:9D:5B:FB:99:82:8A:A9:1D:BF:4E
Authority key identifier: B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75
Certificate issuer:       /CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
Certificate serial:       019369DAF84774D62287857CEDBD238D82F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
Manifest number:          08D3
Signing time:             Tue 26 Nov 2024 19:02:58 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:58 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:58 +0000
Files and hashes:         1: MXe5ncscEty-Xw8tCTKyVuWXPOk.roa (hash: H0MStUyVtRUMD1h6Lyf5gCa7EVUOJx8AB8wO/tqeTLk=)
                          2: sMeY09W2CWzTnliSWiihffthznU.crl (hash: Qg6trUdI7p4uyOfFdu33ggfnkV1ADlm77xlmOSesBTg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:f8:47:74:d6:22:87:85:7c:ed:bd:23:8d:82:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c798d3d5b6096cd39e58925a28a17dfb61ce75
        Validity
            Not Before: Nov 26 19:02:58 2024 GMT
            Not After : Nov 27 19:02:58 2024 GMT
        Subject: CN=1bcc6fda5b731ad919679d5bfb99828aa91dbf4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:5d:ec:d4:e5:ee:31:11:35:83:d6:7c:0d:
                    bd:1c:2f:80:55:12:8d:0b:83:0f:60:08:e8:7a:a0:
                    35:b3:50:b6:04:75:b4:2f:e7:0b:b5:17:10:58:b6:
                    d7:65:28:8e:60:f8:41:49:f1:df:0c:bd:56:a7:1a:
                    d3:aa:f6:a3:83:1c:c7:89:ec:30:2b:2c:64:c7:cd:
                    4f:44:97:68:66:cc:98:6a:8a:22:02:cf:a9:6a:20:
                    df:50:80:01:11:46:a1:fc:7c:4d:df:60:5e:1e:51:
                    89:f9:40:f0:7a:d8:d5:57:df:77:40:d7:1a:e3:2b:
                    f9:77:68:37:c4:ad:53:23:fd:84:31:6e:2f:9f:9d:
                    ff:34:dd:8a:57:b1:98:47:fe:fb:39:47:22:d2:c0:
                    c0:72:d7:bb:4e:4e:9e:01:41:88:60:b9:65:1d:19:
                    9a:8d:54:cc:02:a6:4b:4c:38:a2:f6:b7:cc:28:a9:
                    9e:5e:21:9b:da:65:11:d5:19:bd:a7:a9:76:18:86:
                    b0:dc:6f:eb:69:d3:53:c1:e5:83:c8:d6:95:ab:8c:
                    c4:cf:5c:a0:dd:a9:2a:ea:99:38:50:8f:4a:55:9b:
                    cf:75:c8:ea:99:d9:49:15:b7:09:e5:16:d8:1b:54:
                    7f:8e:7e:45:4e:cd:a6:02:b0:3f:a6:a7:2c:db:70:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CC:6F:DA:5B:73:1A:D9:19:67:9D:5B:FB:99:82:8A:A9:1D:BF:4E
            X509v3 Authority Key Identifier:
                keyid:B0:C7:98:D3:D5:B6:09:6C:D3:9E:58:92:5A:28:A1:7D:FB:61:CE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMeY09W2CWzTnliSWiihffthznU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/65e006-c762-4c7d-96ff-f9f3118e1985/1/sMeY09W2CWzTnliSWiihffthznU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:8d:b4:99:53:bb:64:c8:56:de:2b:19:bb:9f:4a:a8:86:e6:
         72:ee:86:92:2e:51:1a:d8:6f:d2:ca:6a:a6:49:5f:cd:5b:91:
         43:99:43:ec:6a:42:cf:95:8e:ec:fd:51:13:c6:1c:f6:1e:a8:
         4e:61:85:2d:de:09:fb:7e:ff:f6:c6:d8:4a:a2:a5:24:72:14:
         7c:c5:32:4b:5e:76:82:2a:1d:9d:7c:23:4e:1e:bd:be:2a:b1:
         dc:7c:98:9f:e6:ea:f4:3a:1b:3d:16:ac:76:ea:ee:51:02:72:
         b3:c8:8b:b6:f7:3a:e8:77:ea:62:dc:60:04:e1:ee:91:23:b9:
         4e:22:37:19:d5:42:b6:c9:82:f7:29:e5:77:c3:2e:90:d8:50:
         ac:52:7d:72:4b:e6:7e:d6:6c:fa:76:6f:cd:3d:e7:24:3d:3e:
         6f:05:83:79:1e:3d:4f:3a:62:4c:e9:c2:ed:3a:21:b2:d6:a2:
         e9:62:ff:e8:3c:e9:89:f5:0b:2e:08:64:b5:83:c3:19:36:9e:
         09:10:e4:1c:15:56:08:b5:31:ec:ea:1a:fd:c1:f1:c8:17:ec:
         4c:e6:17:72:5b:98:9a:7e:d0:89:5a:4c:b9:72:1d:2c:bf:0d:
         c6:28:33:bd:f4:1f:f7:9e:ca:2f:1d:20:3a:8c:26:75:34:8a:
         ce:de:15:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:35 2024 by rpki-client on console-fra.rpki-client.org