Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
File:                     it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft (raw, json)
Hash identifier:          pT7zOlKllGvcG9FcnQAvyFGMJrlfZcQPPFZJbxdFnMI=
Subject key identifier:   AC:42:55:E3:C6:7F:3E:E7:A2:33:00:DE:5D:27:35:2F:F8:12:C3:F9
Authority key identifier: 8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
Certificate issuer:       /CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Certificate serial:       019369D91E1A645F90A6DDB66BA678258B0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
Manifest number:          1077
Signing time:             Tue 26 Nov 2024 19:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:56 +0000
Files and hashes:         1: 5CDwvjHzcgVxQVccy3U4zfgjpk4.roa (hash: VHyjVYdzEpoHVs7YIGS9va8eF9mugVBGskbXVm40xb8=)
                          2: it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl (hash: ERsBZqsxu97xPKzAOWaTtGMKmdYklrgludEoK6xRa5Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:1e:1a:64:5f:90:a6:dd:b6:6b:a6:78:25:8b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ade0787cf9881a1fc59556ca1542d7779f28765
        Validity
            Not Before: Nov 26 19:00:56 2024 GMT
            Not After : Nov 27 19:00:56 2024 GMT
        Subject: CN=ac4255e3c67f3ee7a23300de5d27352ff812c3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:b1:80:0d:3f:b7:26:73:66:53:61:11:e0:
                    f8:a4:f7:93:0f:f7:d7:99:97:93:ea:4a:d5:55:7d:
                    2f:a8:1a:aa:b3:cf:ad:17:5b:5a:51:3c:4d:cc:84:
                    1e:08:8d:07:26:ad:6f:9f:d7:98:f8:5b:f1:95:82:
                    a7:f2:a9:98:9e:21:89:2a:a3:f7:85:86:df:63:ed:
                    0b:f0:e5:1f:e5:1b:2a:d0:8a:22:80:a7:f0:3c:b6:
                    d5:fa:ef:7a:3d:9d:8d:ad:77:85:38:a3:65:85:c3:
                    70:e1:09:4d:c5:33:91:f0:a2:b8:9d:9b:a0:0d:cb:
                    8e:b5:95:33:52:8b:13:62:07:60:40:9b:38:4c:10:
                    b6:df:8b:8a:93:58:03:89:ae:b4:9a:41:17:db:1a:
                    59:57:e3:aa:b3:93:95:cb:d7:bb:b9:f0:80:42:15:
                    01:39:5e:d0:a8:5f:98:61:da:1e:a4:37:89:96:30:
                    55:a8:40:9c:e8:35:f7:66:03:4d:94:04:a3:ac:ec:
                    ee:cf:18:c5:2b:80:1e:1f:45:79:80:c6:42:e0:8c:
                    f7:77:d1:8e:a9:94:11:7b:14:3b:7c:6d:3d:50:37:
                    6e:f4:36:a0:c3:5e:f7:22:aa:e9:18:cc:2a:78:e3:
                    a7:dd:b6:c9:91:90:8c:b7:62:69:41:e4:bf:3f:e1:
                    be:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:42:55:E3:C6:7F:3E:E7:A2:33:00:DE:5D:27:35:2F:F8:12:C3:F9
            X509v3 Authority Key Identifier:
                keyid:8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6e:61:ca:81:03:02:46:81:78:8f:2f:dc:0c:c9:e3:d5:a3:
         c8:9f:67:6b:8d:6b:fb:9d:b6:a5:17:49:a8:65:3e:f5:09:28:
         c0:37:37:55:44:5e:2d:48:5a:0b:30:00:a7:ed:68:c0:bf:2a:
         e6:b3:4e:c7:cd:4e:24:51:d3:22:32:bd:7e:d7:05:f1:55:ac:
         3d:90:0b:44:5b:8f:2a:07:fe:e1:0e:76:99:e3:3c:b7:0d:07:
         57:33:ea:c0:f7:c5:77:ef:6d:bb:fb:ab:cc:96:d2:b9:20:19:
         06:c2:e5:d4:21:a5:c7:ed:57:b3:3a:d4:de:c5:ea:e1:65:92:
         b3:49:a6:b6:e2:d1:fd:bc:89:94:9b:b9:22:32:62:d0:0a:1c:
         15:d4:b2:2b:ff:a4:a1:d6:f0:45:e5:44:cc:a3:c4:e7:64:ed:
         2d:37:bf:6e:c7:11:a2:40:b9:ca:79:a2:28:47:64:4f:56:71:
         79:08:aa:cc:46:84:25:7b:14:af:e8:32:21:a1:68:d1:17:34:
         bd:47:b4:1b:c2:be:12:13:d8:0c:d8:9b:ba:11:da:5a:3a:0d:
         f6:d4:9f:4e:ba:ec:14:ff:54:b2:d7:d5:36:cf:98:50:57:dd:
         e6:ca:1a:f1:53:61:29:22:ec:5a:50:9d:7f:8a:d2:62:8b:07:
         df:97:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:19:36 2024 by rpki-client on console-ams.rpki-client.org