Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
File:                     0jcICZ96IFVktfjgXSF70vrk3og.mft (raw, json)
Hash identifier:          UZ6/f6QkXA+CYLZO3nBEuomrzp7qDg5KIBYPqb6JuAY=
Subject key identifier:   29:0C:85:20:F1:8B:94:E7:EC:A6:80:EA:F4:95:82:93:CB:BA:C2:56
Authority key identifier: D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88
Certificate issuer:       /CN=d23708099f7a205564b5f8e05d217bd2fae4de88
Certificate serial:       019368FCD985826ED8277285DAFDE167FC63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
Manifest number:          130E
Signing time:             Tue 26 Nov 2024 15:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 15:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 15:00:21 +0000
Files and hashes:         1: 0jcICZ96IFVktfjgXSF70vrk3og.crl (hash: kVkxR1osu+g4NEWMbU4cDs6g9axH0P2b2e4j+l1+ZC4=)
                          2: 8sy7RFwoSpm818L4uBLua1jogaA.roa (hash: skynMNBOFrflJv6M1JaLy98LoiNuXAW5U+J22gCxVsM=)
                          3: cFwLHD4NpMM1Dua6PsWOaspl5j4.roa (hash: 4H2fO4Ee4CgKJ+bosPThB5PLtNkKEFVptJjOWvCN6Mo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 15:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:fc:d9:85:82:6e:d8:27:72:85:da:fd:e1:67:fc:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23708099f7a205564b5f8e05d217bd2fae4de88
        Validity
            Not Before: Nov 26 15:00:21 2024 GMT
            Not After : Nov 27 15:00:21 2024 GMT
        Subject: CN=290c8520f18b94e7eca680eaf4958293cbbac256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:a0:e3:76:df:e4:e9:32:30:3f:4f:c8:2f:
                    68:e2:bf:ff:96:5c:45:df:10:cb:4f:f7:fd:42:8f:
                    ec:f9:84:0d:ef:07:d3:30:97:6b:f8:ad:c0:c1:e4:
                    ed:da:e9:2f:a5:d2:de:4f:9d:3d:2d:65:26:f9:8e:
                    36:e8:81:55:e1:90:43:d4:5d:44:20:aa:3d:0e:c0:
                    5a:c3:c8:66:44:af:32:8d:b4:04:1b:82:71:d8:24:
                    7d:8e:0c:fa:90:63:71:c6:47:26:c1:b0:3d:3f:9a:
                    83:28:39:0b:fb:2b:08:40:e4:b9:3c:06:27:ff:18:
                    ac:2a:5c:02:85:3b:e3:bc:5e:a3:5d:e6:dc:1a:96:
                    91:06:45:4b:a0:7b:a9:16:8d:76:eb:59:ea:32:e0:
                    c8:41:18:29:84:ab:45:6b:6a:9b:9c:c1:7c:34:f2:
                    84:6d:09:87:02:58:af:9b:82:48:f4:40:1d:c4:c4:
                    2a:e8:8d:60:09:3b:32:e5:be:e9:fc:28:96:d9:1f:
                    9f:45:48:7e:03:db:b0:b5:02:0d:11:85:92:a7:a2:
                    ab:27:a3:da:38:af:29:7e:21:72:46:e7:fd:6b:91:
                    b0:91:70:a5:97:1d:a5:e3:68:24:bd:cd:3b:90:10:
                    83:78:d4:3d:e5:c7:6d:ea:dc:8b:18:99:5c:ed:63:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0C:85:20:F1:8B:94:E7:EC:A6:80:EA:F4:95:82:93:CB:BA:C2:56
            X509v3 Authority Key Identifier:
                keyid:D2:37:08:09:9F:7A:20:55:64:B5:F8:E0:5D:21:7B:D2:FA:E4:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jcICZ96IFVktfjgXSF70vrk3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/01b5af-b777-4b59-a5b2-5e97f4a512e5/1/0jcICZ96IFVktfjgXSF70vrk3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:07:88:b5:b6:f4:18:b5:90:b4:2a:c1:52:71:02:d1:75:2d:
         8b:28:7d:30:b2:ab:83:9d:8b:b3:b4:c5:da:c1:48:dd:86:cf:
         e3:77:48:3b:bb:59:d5:e2:2f:e8:8e:16:8a:54:8c:34:40:88:
         95:0b:19:42:47:b5:bc:24:ab:91:42:79:2c:ac:10:0a:5a:3d:
         80:98:9c:9f:3b:11:3c:40:88:de:45:48:b0:89:b0:a9:76:fc:
         d2:5b:b3:44:b5:9b:c7:ad:dd:fe:fd:50:b7:4e:fc:b1:6b:59:
         b4:36:d3:4f:6d:cd:4d:35:22:fa:ee:64:d1:96:af:89:65:09:
         ec:54:77:3b:f4:6c:46:f5:6d:0b:e2:dc:4a:fa:21:9c:11:43:
         e3:28:c8:60:42:fe:3b:11:e4:ff:f3:a4:85:37:e1:c5:f7:55:
         e2:72:e0:63:73:df:c5:bb:c8:c1:be:71:a9:e1:0a:bd:d5:9d:
         ad:9f:1a:99:f3:60:cc:23:c1:5e:b1:73:c3:d7:84:5b:a5:41:
         a4:6e:30:83:b4:48:00:0b:ea:bb:8a:c1:93:16:bc:8a:43:a9:
         03:37:db:d5:9b:3d:b3:01:f6:05:b1:22:0b:ae:66:6a:bd:b0:
         fb:b4:0e:23:57:44:0b:64:fd:97:57:fc:4a:a4:b8:41:ae:d2:
         a0:aa:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:42:32 2024 by rpki-client on console-fra.rpki-client.org