Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
File:                     FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json)
Hash identifier:          4+jePARjrrtTUSmTZE2pvU1aKFDGukYO2GG9TTe2g4Q=
Subject key identifier:   95:40:8E:74:31:34:FB:C1:47:86:B4:34:29:66:E3:C0:36:E7:09:76
Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5
Certificate issuer:       /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
Certificate serial:       01935840421B82D6387BBF9E3E21FC44BDC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
Manifest number:          011D
Signing time:             Sat 23 Nov 2024 09:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:26 +0000
Files and hashes:         1: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: M/cBXJ26tJNWX53gDSCfuiGkdpVXucQ6YZ84zUFynpA=)
                          2: FyFwo1QMyaLrE_BmuL276ZrjwdM.roa (hash: 6/kNVme/Zd2We9fD6xFec0W3L86WXwyDLyc00Oq4uyw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:42:1b:82:d6:38:7b:bf:9e:3e:21:fc:44:bd:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5
        Validity
            Not Before: Nov 23 09:00:26 2024 GMT
            Not After : Nov 24 09:00:26 2024 GMT
        Subject: CN=95408e743134fbc14786b4342966e3c036e70976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:57:99:ad:b7:9e:e8:50:7b:c6:4d:6c:0c:
                    5a:b9:90:6e:0a:24:32:b3:2d:6c:c5:24:26:2a:7a:
                    be:05:83:d2:f3:8c:c0:3f:13:24:d5:77:d3:f7:f6:
                    d7:ef:70:d0:a8:e1:08:34:ac:a8:42:5e:51:64:25:
                    9b:73:d6:fd:60:d9:bb:a8:19:cf:61:00:9a:53:31:
                    ca:4c:d2:b5:66:4d:a0:0f:61:92:40:93:1b:a6:ba:
                    81:e7:92:c8:8c:e2:f8:c9:92:aa:06:9d:1b:7e:d4:
                    63:42:4c:69:85:6a:09:b0:61:ee:ba:ed:63:9b:35:
                    f8:cf:b0:17:9a:5c:d4:78:4a:91:bb:85:e9:c2:4d:
                    89:2f:46:69:28:f4:5e:14:09:f5:2c:ce:65:ed:6f:
                    96:ee:2a:d8:87:5a:37:69:73:d6:35:7d:e2:ca:26:
                    82:2e:1b:04:62:7e:f7:05:2a:df:ca:33:6c:25:99:
                    6a:f0:c6:64:28:75:33:a4:0c:5c:cf:a6:ec:13:0c:
                    3e:e3:ea:8d:25:53:c2:95:c2:cd:e3:7d:9c:c2:f9:
                    f6:be:a8:13:68:3a:7d:bd:05:db:ba:02:89:fa:8c:
                    90:91:dc:15:f4:ed:b9:bd:2f:eb:67:8d:14:cc:34:
                    eb:c3:fa:f3:61:55:a9:ac:43:67:25:21:73:16:6c:
                    8a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:40:8E:74:31:34:FB:C1:47:86:B4:34:29:66:E3:C0:36:E7:09:76
            X509v3 Authority Key Identifier:
                keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:35:f7:8c:e6:12:fe:32:e2:bf:39:a8:00:c9:4c:c5:22:3f:
         80:fb:f0:e9:4f:77:96:e1:1c:b5:7c:23:ea:a1:cc:6e:3e:15:
         60:50:9c:14:e3:ba:5e:83:fe:bf:d8:cf:7d:7b:db:f2:61:91:
         7d:18:a3:3b:28:2d:86:5c:f7:86:19:91:08:77:2d:4f:c6:32:
         98:94:13:85:34:e5:11:ae:6d:71:cf:d3:5b:ea:02:db:0c:b2:
         e1:65:66:6e:a8:6a:5b:3f:05:d7:f5:59:e8:76:6a:c8:f0:15:
         84:72:91:c6:84:92:eb:f2:53:1b:b1:fd:d1:87:2f:e9:bb:ec:
         3d:57:88:c9:6c:04:ce:8f:c8:66:e5:7c:ba:1f:aa:0c:76:da:
         73:ec:b7:0b:af:9c:2f:30:45:bb:be:a3:f8:15:0f:b1:11:d8:
         cb:99:58:be:44:ec:aa:56:37:c4:bd:62:eb:ee:ab:75:d4:75:
         e0:53:ca:07:c4:3e:23:93:a8:a9:8c:8c:c0:2b:9e:12:d3:0d:
         7d:38:61:9e:64:c8:8b:6b:c2:f9:30:66:b1:40:8b:27:09:c3:
         d5:a8:7c:fc:6c:2b:be:b1:04:48:ad:20:0f:db:4e:df:e1:b4:
         f7:17:0d:e0:b7:e3:73:c0:79:a6:75:eb:46:e9:2a:f1:12:c0:
         2c:6a:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:57:33 2024 by rpki-client on console-fra.rpki-client.org