Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File:                     sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier:          YuyHGu4Bxq0hIOcOiaAf8ydKmKHz0HqCe2xRJqCzl1s=
Subject key identifier:   75:F6:24:25:7F:FA:A9:3C:46:02:B4:24:3E:7F:8D:07:FA:1F:A8:5C
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer:       /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial:       0193568B06F4F1D43DC79C42EF81ABFFEC90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number:          088A
Signing time:             Sat 23 Nov 2024 01:02:52 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:52 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:52 +0000
Files and hashes:         1: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: Y7DAGcQ3MrPZmoBDjjvNvwfNfCdSfUSPuJsgKvasiIA=)
                          2: wcVl30ZLLoLnoOb0LVTaQxXR0Ts.roa (hash: dNRLkbkwXyOQzFJc7pZXooPQigK0mjK/xe2jbf1/WjA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:06:f4:f1:d4:3d:c7:9c:42:ef:81:ab:ff:ec:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
        Validity
            Not Before: Nov 23 01:02:52 2024 GMT
            Not After : Nov 24 01:02:52 2024 GMT
        Subject: CN=75f624257ffaa93c4602b4243e7f8d07fa1fa85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:f6:1c:37:92:6a:12:69:d2:78:ec:ee:f6:
                    e1:e4:e4:7d:a8:7b:9e:14:84:1a:19:4f:01:04:45:
                    97:8a:1d:bf:5c:11:e9:0a:17:67:ce:ec:7e:c3:1f:
                    2c:eb:df:df:9f:ca:c1:0f:9a:8d:f1:dd:da:4e:7d:
                    db:5e:f2:b7:53:72:17:8e:fe:52:e7:4d:87:03:a0:
                    20:bc:ea:fe:85:a3:1c:17:65:ee:bb:29:d7:4e:0c:
                    e6:10:74:c9:c4:18:92:27:87:ed:66:79:c8:dd:5d:
                    40:68:0e:5f:d0:dd:b5:1e:96:67:29:b3:0f:d3:9c:
                    6e:a3:82:31:6c:70:d4:d3:f7:72:5a:64:dc:65:54:
                    8c:d4:ea:4f:e5:50:43:31:23:52:19:72:07:2b:32:
                    ac:36:34:94:d2:6b:93:2b:a6:a8:86:bc:34:3a:8a:
                    a6:aa:fc:33:5a:6e:4f:8a:9d:8b:66:d7:a5:be:5d:
                    c5:77:9d:2d:9c:99:de:62:8b:16:2b:25:85:be:2e:
                    ed:10:23:d2:d7:72:eb:8d:06:ac:54:ca:20:67:24:
                    c9:38:a7:2d:71:aa:b0:84:96:2e:90:e1:48:22:da:
                    bb:14:18:ac:ce:54:7a:a8:43:71:57:f1:1d:12:26:
                    b4:4f:4b:2e:e7:0c:98:31:cd:53:22:6f:0f:83:ff:
                    86:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F6:24:25:7F:FA:A9:3C:46:02:B4:24:3E:7F:8D:07:FA:1F:A8:5C
            X509v3 Authority Key Identifier:
                keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:bb:23:94:e1:e6:4e:83:0b:ee:f3:f0:46:2a:f4:30:92:
         c8:21:47:bc:48:a1:af:85:87:e6:f3:eb:9b:18:67:1c:92:45:
         05:c0:24:1f:93:3b:3b:8f:93:3d:8b:7f:5d:72:28:30:96:eb:
         60:a9:97:92:3b:8e:96:31:26:a4:0b:8c:27:8a:b3:32:3f:b5:
         e2:e9:eb:49:d6:42:17:1d:f1:7a:35:2e:75:86:0e:df:42:60:
         e6:22:e0:49:89:cf:bb:d6:7e:af:5b:c0:55:c6:a2:05:2b:c9:
         0c:b3:0a:0f:28:6e:4b:a0:e6:5e:77:06:c2:99:88:5a:6e:bd:
         4f:b3:8b:f2:89:71:38:1c:5b:0c:b1:37:30:af:25:19:b7:80:
         ea:d0:73:07:75:2c:85:9c:7c:86:ed:dc:f3:50:ee:03:6f:06:
         b5:a0:52:d8:21:b8:34:15:89:bf:bb:71:cd:44:2e:ba:16:ee:
         95:d1:d4:25:51:22:c6:78:d2:76:6b:b8:90:3f:a4:04:b1:9e:
         8d:d3:ec:e2:37:91:fa:be:4b:6e:56:f4:f8:87:36:a9:d2:d3:
         d0:f2:c2:12:d6:00:9c:94:10:08:d2:7d:55:64:ce:0d:30:4c:
         7a:32:48:df:12:3f:4f:6a:24:36:e7:a8:94:e5:15:ff:72:45:
         bc:d9:1e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:58:46 2024 by rpki-client on console-fra.rpki-client.org