Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File:                     fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier:          DlC7k9wekyt3EjwMRuoU/sknIXeBWq7ClLbdcfR42fw=
Subject key identifier:   12:5E:70:2B:44:13:F0:C3:EE:A3:F6:AB:66:2B:16:D9:CA:A0:C8:B9
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer:       /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial:       019356898A05D6E7761A1DBE0328CDD0C183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number:          0C49
Signing time:             Sat 23 Nov 2024 01:01:14 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:14 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:14 +0000
Files and hashes:         1: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: 73u2F9Dj4k+vDgYlT2PvjZEyRtAu+rJZRcfBjj5zUks=)
                          2: lmrGKXG7gsf1tqCWsshQD7KPhU8.roa (hash: oEUk4yIu/lL/vMFqa02IBTU5J/5ccpVIZp9FgfIjBLQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:8a:05:d6:e7:76:1a:1d:be:03:28:cd:d0:c1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
        Validity
            Not Before: Nov 23 01:01:14 2024 GMT
            Not After : Nov 24 01:01:14 2024 GMT
        Subject: CN=125e702b4413f0c3eea3f6ab662b16d9caa0c8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7e:76:c5:aa:d2:1e:7c:43:87:1f:c8:ac:fe:
                    06:1f:ae:1f:0a:3d:d5:71:74:76:be:99:90:0b:bf:
                    ca:f8:0d:2c:0a:98:8e:1d:d1:d7:78:4c:c9:9d:18:
                    6d:1d:76:26:96:e3:61:d3:98:db:85:b2:1c:9e:6d:
                    88:31:10:99:3d:6b:34:2f:80:39:e9:ec:2f:a1:40:
                    ae:80:9e:d5:c3:13:bc:34:0b:55:8a:be:69:63:3a:
                    4a:94:e5:1e:f7:9d:ec:45:5a:f5:79:02:94:a0:59:
                    79:29:11:9c:40:7e:10:68:d4:7d:63:0c:35:be:d3:
                    d9:d5:9c:67:0b:c6:c7:ad:6f:6b:0a:94:07:1d:f8:
                    00:5d:91:71:e9:08:ba:40:ba:13:38:2f:f4:61:39:
                    e5:62:55:0a:54:c3:37:65:71:cf:a0:02:c4:a7:8f:
                    cc:52:32:62:97:5c:a9:27:ec:1b:7e:29:7d:c2:7d:
                    ad:47:38:0f:65:51:5c:ea:f8:80:2b:32:27:ad:de:
                    65:a9:bc:ed:53:dc:c1:92:8f:96:24:b8:f9:ea:3f:
                    03:d7:65:9f:e5:28:e0:93:3c:48:a3:1f:c7:71:b3:
                    14:63:e8:e5:4e:41:8c:5e:ca:3d:34:d4:b4:e0:11:
                    91:25:48:4a:de:5c:1b:18:eb:43:43:ed:8c:ec:e2:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5E:70:2B:44:13:F0:C3:EE:A3:F6:AB:66:2B:16:D9:CA:A0:C8:B9
            X509v3 Authority Key Identifier:
                keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:1c:b8:92:76:79:83:f3:7a:08:db:5b:4f:af:11:17:73:10:
         72:c6:42:68:70:f8:d1:80:23:6b:5c:88:fe:0d:c1:a9:a3:d6:
         70:6e:e1:c3:d6:0d:9b:c2:fc:2e:4c:78:b9:c5:83:31:ed:22:
         5a:75:a8:5f:2b:7a:56:03:2c:99:30:01:df:37:77:fd:c7:cd:
         bd:6d:3a:20:53:fa:e5:b9:be:4c:3f:af:95:6b:e4:7b:0e:3b:
         d3:78:63:8b:a1:ee:f5:e8:6f:f2:af:f9:1b:94:bc:10:ad:4b:
         0b:a4:db:40:78:60:69:41:e8:e0:ca:5b:42:f4:7f:69:f3:18:
         93:ac:25:f3:46:6f:25:1a:ed:12:62:d3:81:45:ff:59:99:c6:
         8a:61:b5:0f:37:18:5c:5b:f5:b4:96:08:98:b2:89:e4:ef:91:
         be:86:b3:d6:39:04:8d:80:de:a3:49:ad:40:46:fb:4b:7b:cc:
         19:63:43:10:ac:44:f7:34:34:a3:9d:e0:22:a1:b0:9c:7f:c5:
         a0:b0:a7:ab:34:57:bc:68:3f:3d:2a:a9:2c:ec:89:b8:52:6e:
         09:b0:1b:fe:89:d1:b4:46:63:a2:7c:13:60:c1:7b:ae:29:4a:
         c6:8e:a1:1a:c2:2c:58:59:af:e5:dc:d7:f7:b2:41:3e:06:f6:
         59:d1:22:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:20:45 2024 by rpki-client on console-fra.rpki-client.org