Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
File:                     fG9Mjzo3f0bFUiAJZ4841hVxxso.mft (raw, json)
Hash identifier:          rIhFfYG4asnKO2r0I+nm3izdJXQkuvSi1YczF3eAEAg=
Subject key identifier:   2B:35:EC:D3:86:6D:31:05:EF:21:3D:7B:C3:10:FE:86:3D:8F:D5:10
Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
Certificate issuer:       /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Certificate serial:       019369D8D2D2FE8BF34EFE29F362DAFD9B23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
Manifest number:          07F1
Signing time:             Tue 26 Nov 2024 19:00:37 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:37 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:37 +0000
Files and hashes:         1: fG9Mjzo3f0bFUiAJZ4841hVxxso.crl (hash: zICz9QvT7eutwUrsPKvgEMycueA6fuVQknI+URQbYNI=)
                          2: wyGd0-fHBF6jKqpEBQi_71WFpDA.roa (hash: wAQx+np8jI3WBXeEV1LkIJjc+TbWXzQoYuhUH00V1hM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:d2:d2:fe:8b:f3:4e:fe:29:f3:62:da:fd:9b:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
        Validity
            Not Before: Nov 26 19:00:37 2024 GMT
            Not After : Nov 27 19:00:37 2024 GMT
        Subject: CN=2b35ecd3866d3105ef213d7bc310fe863d8fd510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8d:f2:42:ef:76:dc:04:6a:f6:26:c7:e8:e4:
                    6b:39:96:ec:a1:15:d0:ed:f5:be:3a:11:43:82:f7:
                    2b:ee:27:0f:dd:2b:a8:05:d1:a6:10:7f:36:7b:a6:
                    25:65:8f:65:bf:11:f0:b4:50:8b:09:c1:ab:a4:4e:
                    f1:66:84:c5:40:fc:67:c4:11:5e:e1:8a:bd:84:e2:
                    d4:65:ba:d3:2c:0b:66:c6:d6:2e:36:52:89:70:08:
                    0f:e0:b7:15:61:8c:9b:9e:6a:9c:f7:4d:00:d5:f7:
                    e0:87:56:56:fc:27:49:e3:86:99:b2:73:b3:24:d3:
                    f8:94:c2:1c:3f:f7:38:2f:95:02:cd:10:ae:e1:e9:
                    9e:ca:73:de:48:1d:ec:05:21:72:f8:d8:a3:69:d2:
                    bb:67:b0:db:0a:3f:95:67:30:7c:50:72:d3:b7:cc:
                    9c:d9:7e:68:fa:e6:5a:58:02:98:52:54:02:4c:04:
                    68:8a:27:9a:f3:36:c5:9c:08:0c:21:33:3c:c8:0a:
                    db:92:1e:15:ca:88:c2:aa:0a:7c:58:90:cf:2a:be:
                    ad:01:52:48:6d:dc:9b:8a:9e:da:d2:2c:4b:b1:80:
                    69:21:93:92:61:6d:2d:5b:0a:e0:5a:51:b3:fd:82:
                    74:c3:1c:53:6e:dd:d5:fe:d9:80:bd:16:d8:53:a3:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:35:EC:D3:86:6D:31:05:EF:21:3D:7B:C3:10:FE:86:3D:8F:D5:10
            X509v3 Authority Key Identifier:
                keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:94:85:5d:37:2d:0d:9b:9b:64:70:9a:72:96:75:57:74:20:
         e1:f2:2e:54:6b:2f:64:0f:5c:da:df:01:9b:86:f3:ca:ac:57:
         1b:16:f1:af:2d:a8:f2:37:d7:29:26:01:15:c6:f9:41:e9:15:
         66:da:02:c0:7e:5b:93:3b:43:8b:13:65:42:46:6b:a4:2b:84:
         82:5c:4a:a6:43:b0:a7:df:fe:75:fb:be:c0:14:ea:4e:27:ba:
         e4:1f:2b:2e:4e:b0:6f:14:e4:05:33:3d:a9:24:be:36:62:46:
         e8:52:70:2b:26:ae:3d:8c:a9:a1:b2:fe:59:57:6d:75:d5:46:
         78:f8:ec:6b:96:9c:b7:d1:6b:ee:da:2b:41:9f:1c:dc:90:5b:
         fe:ec:09:9b:ae:15:b5:28:b1:ff:45:5f:33:1a:d8:f8:0f:0e:
         ff:99:a2:08:c8:58:33:15:e3:93:36:76:31:89:77:d2:e9:9a:
         c8:fa:61:29:c6:15:da:a6:d4:f1:b2:6c:b2:3b:77:fd:53:8c:
         c6:1f:b3:e2:67:55:05:73:af:d4:f4:75:a3:37:4e:32:c3:35:
         43:09:c7:f7:20:16:d8:b8:fe:7d:8d:86:9c:03:57:d9:38:67:
         92:83:8d:0f:b4:3d:30:b8:9b:9f:46:c3:a0:7f:a0:9e:fc:81:
         de:17:ff:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:00 2024 by rpki-client on console-fra.rpki-client.org