Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
File:                     G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json)
Hash identifier:          cmqqqAH0CcwiyD+o7qWAex21JmEWaNMV5L/AoxN76uY=
Subject key identifier:   DE:1B:CB:C8:1F:F3:21:88:8E:B4:5F:4A:AB:9C:0C:45:7C:E7:DC:7C
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Certificate issuer:       /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial:       019356BF81F1107EA3264C8AD982A0E02138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
Manifest number:          070F
Signing time:             Sat 23 Nov 2024 02:00:11 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:11 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:11 +0000
Files and hashes:         1: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: PUmX9t5yiSSjv6HZ0kkr3BYKYF/lWlLfjkn55xzgHNw=)
                          2: Gj64beMoRbLwh8_mAi--RC2Mt_A.roa (hash: NHP6GLeqHM5xa5cLFuhciz3ohXgeZ3j6bYhKogSt4Ts=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:81:f1:10:7e:a3:26:4c:8a:d9:82:a0:e0:21:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
        Validity
            Not Before: Nov 23 02:00:11 2024 GMT
            Not After : Nov 24 02:00:11 2024 GMT
        Subject: CN=de1bcbc81ff321888eb45f4aab9c0c457ce7dc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f2:72:04:f0:76:f9:dc:5f:04:6b:3e:17:5b:
                    49:69:14:7b:d4:3e:73:63:f3:e9:52:20:b4:e1:d9:
                    8c:f6:93:ea:1d:1f:a7:7f:8b:32:67:cf:ba:3c:a9:
                    85:18:c2:44:bc:53:fb:5a:07:09:13:9f:cb:3b:ca:
                    61:05:52:93:5f:28:ec:ca:4f:da:76:f1:c7:ab:49:
                    ec:76:2e:24:1b:bc:2c:87:d6:2e:3c:8e:21:df:c9:
                    67:e8:7e:bc:0f:a0:ee:a1:ee:2f:d2:ac:4b:47:26:
                    2a:eb:e2:02:7a:14:5e:18:cc:65:65:26:c0:8e:f6:
                    7a:1b:b3:2f:14:58:dc:82:bc:51:ca:f5:08:01:d6:
                    22:7e:1f:28:3d:df:50:a3:fb:67:e6:67:a1:15:dc:
                    4a:bb:47:00:14:99:4f:84:72:02:17:a1:66:08:c9:
                    19:27:a9:e0:cd:fc:79:26:9d:2a:cf:e7:0e:b8:82:
                    bd:9d:d6:9d:54:5a:8c:a4:db:67:1d:cf:c3:2a:2b:
                    46:cd:a8:e0:91:13:ab:da:19:c0:5c:a5:a5:3e:2f:
                    6c:f0:1c:09:ed:ef:12:0a:57:f5:3f:97:93:09:d4:
                    6a:d2:8f:26:1e:59:53:8c:51:bc:e3:53:e1:3e:e3:
                    e5:79:6d:51:9b:1d:ab:b0:75:d2:95:c1:76:63:71:
                    a1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1B:CB:C8:1F:F3:21:88:8E:B4:5F:4A:AB:9C:0C:45:7C:E7:DC:7C
            X509v3 Authority Key Identifier:
                keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:82:6d:85:47:f2:5d:21:bf:c8:e9:26:b8:32:db:28:14:31:
         e8:56:da:84:e1:12:71:93:84:c3:1a:ab:af:1f:b7:2d:5f:44:
         24:21:8a:30:e6:64:2a:3a:80:1f:ec:95:4c:06:7b:77:b5:d3:
         50:69:5d:d4:79:4e:6e:25:ab:c9:da:fc:ba:37:02:f2:f4:d5:
         8b:de:3b:d7:68:65:32:e1:af:1a:cf:9d:b3:26:49:2c:87:a2:
         0d:41:ca:49:6f:a6:96:a6:81:78:fd:78:0d:d9:50:c6:44:07:
         9f:72:93:20:11:2c:3c:01:2b:c7:87:f7:e4:90:ef:fb:f6:54:
         96:52:a9:3a:38:33:09:c7:b3:6e:cb:e2:e4:d3:45:5c:21:38:
         97:8a:57:64:34:df:84:a8:5a:a5:4f:ff:6c:2e:92:fe:b4:a9:
         16:05:fd:58:17:ea:5d:c0:95:8e:09:b9:b6:05:b4:5a:54:7e:
         1d:9f:e7:3c:35:d5:b3:e7:75:b1:3a:35:8f:0c:27:06:43:08:
         0e:61:b1:69:45:16:b8:5b:63:ea:a9:eb:67:a3:d3:b1:f5:8b:
         b2:d4:2f:fb:74:c2:d0:4e:72:79:df:95:6d:f7:7d:c1:45:a0:
         b7:18:79:cf:55:74:42:64:6a:97:ab:17:31:7f:de:40:9e:cd:
         5a:ca:2d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:17 2024 by rpki-client on console-ams.rpki-client.org