Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File:                     1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier:          zpyOMKKQFNQvUCjbtuJz53YpMVzU5ZDXzoDmjJCaPkU=
Subject key identifier:   E5:A2:8B:D4:69:30:B9:DD:FC:A0:54:84:74:DC:5D:09:C7:08:94:73
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer:       /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial:       0193568AA9100DDED717179F152DA73B0A95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 01:02:28 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:28 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:28 +0000
Files and hashes:         1: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: 4T1dynYJ25xg+R4/KpJNOYa4o0f51oqsoIt8cb5/obM=)
                          2: s86ZsgYFMP7MtIKLkRK7tZoZcEU.roa (hash: 5ztBVi7abHqEz/HPX+0T9p+o/bBpmCy0fVLuzU0qero=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:a9:10:0d:de:d7:17:17:9f:15:2d:a7:3b:0a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
        Validity
            Not Before: Nov 23 01:02:28 2024 GMT
            Not After : Nov 24 01:02:28 2024 GMT
        Subject: CN=e5a28bd46930b9ddfca0548474dc5d09c7089473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:c3:e1:2d:ba:d6:64:fb:fc:85:9e:f1:63:
                    25:e4:af:e9:f2:35:25:4a:db:1b:50:8d:45:d8:73:
                    19:15:e4:b3:4b:9d:79:cb:c9:41:73:3d:c6:5c:8c:
                    cf:75:b5:00:ee:83:f4:65:20:d5:52:ee:ec:d0:28:
                    7f:f8:06:92:a8:49:ed:71:ba:65:cd:58:ed:37:c0:
                    1f:5e:21:af:d3:31:e8:b5:fd:ab:a6:56:e7:3c:ed:
                    fe:61:56:6a:36:f3:b2:a1:ac:9c:46:39:d7:8a:2b:
                    39:da:70:e7:48:6b:ec:74:c0:15:09:f0:13:d3:2a:
                    f8:c7:70:29:23:62:30:39:52:be:ee:7a:d5:28:aa:
                    da:61:c4:53:ac:28:18:60:97:0c:b7:f3:80:62:6e:
                    d7:1f:a4:54:63:fa:17:43:d2:73:a9:cc:62:62:10:
                    e1:07:33:c1:c1:1a:e7:de:6a:83:08:e5:73:ac:9d:
                    fe:6b:a1:fb:72:c3:b6:c7:d0:ea:6a:a0:19:9c:55:
                    3c:4f:e7:c7:ec:22:aa:90:0d:76:37:03:d8:2d:80:
                    e6:8c:3e:09:e1:95:ba:7f:65:0a:77:d0:ed:ab:26:
                    ec:0b:74:cd:39:29:e4:a6:21:55:cc:aa:ff:2e:0f:
                    5f:23:46:91:0b:5b:8d:07:73:74:19:ae:1b:9e:5b:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A2:8B:D4:69:30:B9:DD:FC:A0:54:84:74:DC:5D:09:C7:08:94:73
            X509v3 Authority Key Identifier:
                keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f5:bd:d3:50:28:6a:bf:93:c9:c3:3d:8e:d3:bf:79:83:3f:
         d3:c5:2d:ae:5e:15:d2:9e:a4:d6:50:42:0e:8a:ed:e5:63:97:
         88:3a:1f:76:bf:35:c9:1f:fe:b2:e7:d7:b8:9e:23:28:ca:4d:
         d3:ef:90:f3:0a:f0:f1:a0:3a:b3:21:09:9c:ef:d6:58:59:c6:
         79:48:b2:0d:eb:b0:e7:12:97:a9:6f:f8:c7:75:65:8d:7e:fa:
         0b:15:2f:88:e7:0b:c7:95:eb:6c:f6:ea:88:33:c1:d7:3b:00:
         e3:ea:93:5e:79:84:8b:c9:98:25:6e:bb:91:1b:54:45:ff:e7:
         13:e8:69:ac:43:f4:15:2e:51:0a:7f:ee:8b:3d:64:db:77:ed:
         d0:1f:72:4f:a8:c7:ff:8b:79:70:43:11:32:7b:2a:36:7c:68:
         fc:5e:8c:eb:c4:59:2f:76:09:cd:73:9f:3d:b2:76:3f:56:b3:
         19:f8:d2:47:1e:0b:67:c2:3a:f6:fa:49:6a:97:0e:2b:b3:3f:
         8e:fe:1e:fc:1c:92:b8:de:e9:e0:0f:c2:01:07:c1:eb:d6:4f:
         be:de:7a:91:1b:12:8f:2d:8b:c0:7b:81:cb:01:f0:fc:8a:41:
         72:2d:0b:dc:fe:b6:7a:a0:4d:df:9a:ea:04:e0:df:29:7f:89:
         2c:84:00:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:29 2024 by rpki-client on console-fra.rpki-client.org