Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
File:                     JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft (raw, json)
Hash identifier:          T+xcZKtylX5tdLXyus9rDHP+yDegyUbaYe/hbcyKLCE=
Subject key identifier:   07:74:25:8C:76:F0:06:71:44:01:FF:4C:ED:C0:51:B2:6F:C2:A2:1F
Authority key identifier: 26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E
Certificate issuer:       /CN=26862926a857491554bee94951bb5fa670207d9e
Certificate serial:       01935689AF44B9798FDE767FC3FB6A776DB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
Manifest number:          0728
Signing time:             Sat 23 Nov 2024 01:01:24 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:24 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:24 +0000
Files and hashes:         1: BPVxnI9fVRjAuKbfWcRlyIeQBQk.roa (hash: b50vAXTw1L4a4D4rtS+PKmuHGA7y26SLpbgVNDbMamo=)
                          2: JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl (hash: FxQHW+9/S6Dcg5GtZ9Xa8BjKvPb0xAYsWCMgdwssXKk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:af:44:b9:79:8f:de:76:7f:c3:fb:6a:77:6d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26862926a857491554bee94951bb5fa670207d9e
        Validity
            Not Before: Nov 23 01:01:24 2024 GMT
            Not After : Nov 24 01:01:24 2024 GMT
        Subject: CN=0774258c76f006714401ff4cedc051b26fc2a21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:b1:c4:4f:a2:eb:8a:99:92:be:80:d5:bd:
                    23:06:50:52:c6:c0:da:2f:db:9c:2e:ec:13:86:ba:
                    79:3a:37:d6:95:fd:90:ec:d3:9c:16:d7:98:11:00:
                    f3:4d:83:25:fc:a4:c4:83:b3:1f:0e:fe:86:04:d2:
                    d0:68:3e:76:80:b6:fe:e2:57:d4:0a:7a:2e:00:39:
                    62:e3:f1:ef:db:4a:33:56:2f:f3:a1:a9:a3:be:19:
                    0a:fe:9b:bf:b2:ab:f5:79:67:c4:9c:2e:a5:89:b3:
                    91:2f:ee:95:6d:b9:75:9e:c6:35:2f:00:97:d8:7e:
                    a9:9e:20:e3:02:07:d6:80:3a:a4:20:28:d5:98:1b:
                    f8:ec:a9:18:95:f1:02:f8:43:4f:52:46:ee:a7:05:
                    58:e8:ca:51:16:05:e8:10:04:4c:23:56:ed:56:ef:
                    d0:33:f3:81:b0:4d:fd:10:67:c5:df:da:5b:b3:61:
                    d4:a0:9e:be:0e:2c:65:86:6b:67:ae:47:ce:cb:82:
                    00:15:77:47:46:bc:07:5f:d6:e8:f7:90:14:ab:ed:
                    8f:2d:0e:86:a6:40:72:a0:66:a2:c6:ad:64:d2:b1:
                    42:1a:cf:cf:35:f3:6e:66:53:07:76:07:4f:b7:49:
                    b8:c8:2e:8b:25:cc:05:47:61:e9:a7:39:1a:9f:1a:
                    1a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:74:25:8C:76:F0:06:71:44:01:FF:4C:ED:C0:51:B2:6F:C2:A2:1F
            X509v3 Authority Key Identifier:
                keyid:26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7b:81:9c:95:19:06:c4:da:ef:73:3c:6c:bb:ce:96:f8:e5:
         12:66:ce:fe:49:e0:0a:d5:e0:d0:c5:7b:5e:a9:7f:39:4d:b2:
         7c:da:1f:97:43:72:84:09:d0:1f:8c:fc:e4:97:1f:96:d9:07:
         c4:fc:c2:03:f5:8c:f2:55:ea:ad:80:48:27:32:e9:1d:61:71:
         a4:7c:7d:c8:bd:85:58:13:50:64:61:ec:3b:e3:d1:ff:ba:2f:
         92:33:3c:08:f0:6d:68:b8:99:d2:dd:81:30:34:97:ad:70:0a:
         5c:eb:1f:68:6c:23:e3:f1:46:ea:85:67:66:06:be:1f:79:bf:
         01:99:f5:fe:99:48:47:e5:d1:ff:ae:af:cb:2f:79:06:3b:bb:
         39:9f:e4:bb:33:ea:04:61:b2:e7:22:0f:ff:cc:33:b5:a1:d0:
         39:0e:9a:0d:4a:2e:94:5f:17:2d:4c:15:ea:45:e7:cd:f7:4a:
         37:ea:9e:44:be:b1:cc:e7:2a:d8:84:5a:18:b5:7d:b9:3c:9c:
         df:b7:d0:8e:02:69:f4:32:4d:4e:70:ee:70:ba:74:09:12:87:
         f1:74:37:7c:0c:4a:ad:67:04:95:32:7e:22:88:60:87:f7:a0:
         70:37:0d:bf:e4:8c:f1:0b:55:70:92:bd:38:0b:d5:bb:20:da:
         63:bf:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:20 2024 by rpki-client on console-fra.rpki-client.org