Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File:                     K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier:          kUv6n82i/soBohCxTRCe6BgQpxze2fAsy8x8lIP2Huc=
Subject key identifier:   A3:25:BC:3F:64:29:57:8C:86:1A:64:F3:24:1E:13:05:06:1D:47:83
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer:       /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial:       01936AB470EBCE0115CBF48147F06C1B05B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number:          0129
Signing time:             Tue 26 Nov 2024 23:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:30 +0000
Files and hashes:         1: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: 6ortqFUvKJB5n8s+2HOUo9qujc8bkxB3y9EUlWIq2Aw=)
                          2: up2U6fRWZeEnrnwF1RqF5b0e71s.roa (hash: 1NCcn1nX+w/EViy6uRy4XSSGM3Co2/UCAKb8R9k/FZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:70:eb:ce:01:15:cb:f4:81:47:f0:6c:1b:05:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
        Validity
            Not Before: Nov 26 23:00:30 2024 GMT
            Not After : Nov 27 23:00:30 2024 GMT
        Subject: CN=a325bc3f6429578c861a64f3241e1305061d4783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:59:dd:b4:45:49:90:5d:78:b2:25:36:b7:51:
                    a6:21:26:99:82:42:fb:dd:17:9c:06:a8:16:4b:4a:
                    c0:7b:f5:cb:b5:04:6f:77:ad:04:e6:53:94:f0:f3:
                    6b:7b:05:34:a3:aa:d5:33:98:25:ce:0e:a7:fd:56:
                    02:14:dd:5a:4c:de:5e:5c:08:f6:31:f2:cd:c2:9c:
                    40:92:69:eb:2c:c4:82:2d:4f:ec:34:02:91:d6:f8:
                    83:43:70:ed:bf:4c:77:ae:1e:0c:6c:ab:70:9e:bd:
                    f0:cb:87:2d:2f:3f:ea:ce:62:80:94:92:bd:0f:65:
                    eb:bc:b3:50:63:35:c6:75:d0:2d:71:55:8a:4c:52:
                    6f:06:2c:b4:3b:59:d5:35:77:27:07:16:4c:1f:d2:
                    df:15:97:13:1f:0a:61:45:54:bb:e0:83:96:05:ea:
                    de:38:ab:d0:c5:d5:83:7e:33:9d:2c:d4:67:22:7e:
                    a8:89:10:e1:15:d1:6c:06:ca:0d:83:00:64:50:8a:
                    12:cf:b7:3b:cd:7b:28:04:29:66:c4:7e:51:74:b5:
                    97:ce:4e:28:45:d3:bf:9e:1b:c5:e8:2f:c7:3a:e2:
                    42:97:66:97:81:3a:2a:01:ab:ae:aa:25:14:4c:d5:
                    89:6e:08:40:db:3f:23:48:0b:be:ee:89:d0:41:36:
                    a3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:25:BC:3F:64:29:57:8C:86:1A:64:F3:24:1E:13:05:06:1D:47:83
            X509v3 Authority Key Identifier:
                keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:73:85:23:60:94:00:b7:8c:48:5f:df:03:cc:6f:74:21:b8:
         c4:5d:90:45:0a:da:97:e9:fb:43:e7:e8:d4:5f:1c:47:53:e6:
         bf:f0:73:01:ab:f4:a4:03:03:f6:54:11:d1:cc:04:f9:0e:f6:
         10:6e:14:1a:d8:96:1f:3b:f2:3f:98:f5:90:6f:d9:3c:e0:5c:
         08:64:48:00:ee:7a:f0:3d:a4:42:16:15:8f:99:b2:85:56:e2:
         bf:e4:6f:ce:65:b0:a9:c6:5a:e1:e8:64:ed:56:24:ca:84:1b:
         dd:6a:01:76:e7:71:d0:10:c7:38:8c:53:91:75:68:0f:74:11:
         ea:8d:74:e6:72:7d:54:13:87:04:de:57:7f:86:b6:08:9c:85:
         36:bb:cc:05:93:fe:8a:44:fc:b9:16:84:9e:6b:14:fb:fe:73:
         fb:4f:81:cc:36:a2:ba:40:a9:d4:6d:45:96:89:ac:ec:65:a6:
         02:92:57:43:d8:9e:ac:dd:e8:07:5a:a7:43:66:2e:69:a3:63:
         c7:5d:3d:ba:d8:ab:30:ea:77:28:1d:47:dd:60:01:4c:07:3c:
         21:62:66:b9:d4:f4:5b:99:e0:25:4e:02:dc:3f:3d:28:1a:d9:
         2d:29:bd:77:5b:b8:7c:1a:db:ac:97:ec:b9:57:e5:9f:02:8f:
         57:8c:21:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:09 2024 by rpki-client on console-fra.rpki-client.org