Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File:                     J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier:          iTzP0zRcYWeQz33yc2a7KR9N4Ibih9pQIFt50X/tDWk=
Subject key identifier:   AB:67:78:7B:D2:BA:20:91:F8:3B:94:CF:9F:77:37:24:3B:04:01:E5
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer:       /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial:       01935688B9AF4AA79F09DD4863FF088BC618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:21 +0000
Files and hashes:         1: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: OyhET0uiPQZUv0jV0VIiBurYHIxjeolTrPVcwih4ReA=)
                          2: W13hr5Iirbn7VqV4W5Fbmlor1H4.roa (hash: TllEhSSUdcH9TnyJmvkoBUd0bpn68LcwahroC3DDT9k=)
                          3: qUfWfoU2g1I04GIlrNAeXaW-kAs.roa (hash: 82IR5zJOQ4OHuGhteO9n8cja3N/pN5savxF2n7uC7yQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:b9:af:4a:a7:9f:09:dd:48:63:ff:08:8b:c6:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
        Validity
            Not Before: Nov 23 01:00:21 2024 GMT
            Not After : Nov 24 01:00:21 2024 GMT
        Subject: CN=ab67787bd2ba2091f83b94cf9f7737243b0401e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c6:80:12:3c:db:40:8a:ad:63:48:89:69:17:
                    10:0d:cd:fc:f0:09:7a:16:c3:81:e7:7b:e9:e1:ab:
                    b7:b4:0a:ce:b6:5f:df:9c:15:17:dd:07:e0:3d:5b:
                    80:d5:cb:ae:ac:5c:2f:00:36:e6:85:32:2a:5a:02:
                    b5:55:16:88:b0:47:ed:6e:f5:a9:c4:fd:a6:53:0e:
                    3e:3d:39:29:e5:d4:c5:67:d6:30:69:4d:b9:c7:d1:
                    a0:d5:e5:23:ed:99:84:90:b0:05:49:f3:13:78:ee:
                    5f:83:83:f1:4c:e4:32:df:54:6f:5a:40:41:31:47:
                    d8:73:bc:e7:a9:6e:de:62:30:4d:59:a5:74:1d:8e:
                    11:95:ba:bf:e3:55:c0:dd:ac:e1:7e:15:7b:69:ce:
                    19:5e:ae:4d:29:39:7c:c6:61:07:87:54:94:77:92:
                    fe:3b:06:29:87:df:66:ed:c0:13:5b:01:61:49:c9:
                    5d:e8:69:d4:e7:65:3d:91:d2:a1:a5:ca:90:e8:a6:
                    a3:d9:17:45:27:6d:bb:5c:b2:20:45:6f:59:98:34:
                    aa:94:17:3c:42:46:bc:c4:e1:76:1f:08:59:87:19:
                    75:3c:20:25:ec:5b:1f:f7:83:a3:22:1c:8d:d2:a6:
                    c2:fa:87:0a:df:0c:8b:56:b5:0b:e9:f3:e6:6c:35:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:67:78:7B:D2:BA:20:91:F8:3B:94:CF:9F:77:37:24:3B:04:01:E5
            X509v3 Authority Key Identifier:
                keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:09:e9:e7:6d:cf:7d:91:cd:45:93:e3:32:2f:e4:d0:6b:5f:
         af:fa:15:24:0c:97:d2:3b:43:12:ff:a2:dc:e9:0a:15:31:b7:
         99:37:6b:fc:9c:dc:f5:de:70:35:6e:ac:12:20:cb:f4:94:7d:
         16:6a:c8:9a:1f:0a:6a:0a:5b:af:c8:73:1a:94:7c:d5:54:0f:
         eb:e8:e0:e1:76:dd:20:4b:0b:e4:3f:6e:02:91:01:fd:0c:78:
         0f:0f:4d:06:09:18:e6:98:bc:5a:f7:8a:ca:4d:f6:4f:34:b0:
         ce:41:da:e7:e6:3d:2b:06:99:59:8e:cb:75:e3:90:af:e7:c0:
         59:37:eb:0c:f7:89:68:e4:f1:e2:0a:65:d7:bb:8f:9e:a0:a0:
         ce:58:dc:ca:94:26:f9:ef:87:c2:23:04:fd:dd:de:2b:a9:ca:
         ee:34:14:05:3b:e5:2f:e5:1f:c4:36:3f:2a:e6:cc:f0:0f:2b:
         7c:35:4a:67:7c:27:50:70:b6:cb:5b:ca:bd:70:d8:d9:4b:4c:
         1a:a8:ce:24:e5:5a:dd:43:cd:b2:2b:cb:ff:a8:a5:a1:0c:21:
         e1:19:57:a2:93:a5:d8:cd:08:06:e8:f9:c0:b7:61:b4:53:a2:
         a4:28:c3:9e:06:2d:e9:90:4d:6e:87:d6:9f:7f:31:2b:1a:8d:
         21:8b:8e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:40 2024 by rpki-client on console-fra.rpki-client.org