Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
File:                     iNCLhhV8ayjmrJguDD_rGj7DKBA.mft (raw, json)
Hash identifier:          RtKqMqhLpwCUM0LT3EiVY8vv1Kf7yrHFSvn62eVYTvo=
Subject key identifier:   67:17:36:3C:CB:FE:48:52:6D:D2:7F:FF:53:71:9B:FB:9A:05:1A:4B
Authority key identifier: 88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10
Certificate issuer:       /CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
Certificate serial:       019358AE124B97D962C6D481C48635E15D77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
Manifest number:          0272
Signing time:             Sat 23 Nov 2024 11:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 11:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 11:00:23 +0000
Files and hashes:         1: 7AC_TZxfaKVauojzB0qVRAI71VQ.roa (hash: ui2TGUJAui0MsmY/NoE+oD6TE5SP1WMGOYLxiMnNtAg=)
                          2: iNCLhhV8ayjmrJguDD_rGj7DKBA.crl (hash: v+KZE9BeZhN4x6uOUjBktQXcrmFZDjIvLJ21krfY6rc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:ae:12:4b:97:d9:62:c6:d4:81:c4:86:35:e1:5d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d08b86157c6b28e6ac982e0c3feb1a3ec32810
        Validity
            Not Before: Nov 23 11:00:23 2024 GMT
            Not After : Nov 24 11:00:23 2024 GMT
        Subject: CN=6717363ccbfe48526dd27fff53719bfb9a051a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:dd:59:90:de:f1:dd:0a:58:c0:b2:bb:ef:dd:
                    48:a2:81:51:e9:c3:81:ae:73:95:e0:9b:c6:16:96:
                    4f:ae:ea:bc:70:43:93:02:d3:0e:a6:8a:dd:7b:30:
                    ff:1a:7c:81:76:f8:8d:1b:5d:bf:a2:e3:89:60:41:
                    12:f7:44:ec:d8:39:4b:da:82:13:1e:e7:45:ff:35:
                    a8:12:ed:85:73:eb:55:63:ab:65:00:b8:ed:a3:f2:
                    83:86:13:20:dd:83:b4:01:16:79:a9:3a:48:6b:1c:
                    6d:1f:4e:0d:8a:9d:51:85:c9:0d:31:49:ee:f8:c0:
                    f4:57:46:c2:7c:58:34:82:50:4c:a0:02:5f:65:19:
                    66:0f:d4:15:cc:e0:5d:07:c2:8b:cc:1e:69:37:66:
                    7a:5f:c1:ef:3c:9d:44:17:43:e2:d0:47:cf:f2:d7:
                    74:23:34:82:57:44:0b:e9:f9:f1:42:92:8c:d9:44:
                    39:7f:2f:c2:54:d2:a7:a0:e2:34:b3:ef:b2:32:91:
                    d6:5f:32:1c:e2:2b:f8:2d:5a:5e:74:33:eb:fe:ca:
                    6d:c0:a7:94:b8:e0:3f:60:f6:80:b7:76:31:a5:cb:
                    65:ee:81:e4:10:ac:b5:d4:5d:db:70:6b:d8:aa:d2:
                    49:a4:ed:33:f9:5a:f9:e2:98:fd:29:28:43:61:d2:
                    09:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:17:36:3C:CB:FE:48:52:6D:D2:7F:FF:53:71:9B:FB:9A:05:1A:4B
            X509v3 Authority Key Identifier:
                keyid:88:D0:8B:86:15:7C:6B:28:E6:AC:98:2E:0C:3F:EB:1A:3E:C3:28:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNCLhhV8ayjmrJguDD_rGj7DKBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/760452-f63c-48aa-a3e0-38d0cf8fb8b8/1/iNCLhhV8ayjmrJguDD_rGj7DKBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:62:47:9a:2a:12:aa:54:f3:af:5e:84:d2:2a:de:dc:f7:b9:
         47:45:e5:02:7d:80:59:6e:64:7a:bb:1f:e2:fe:cc:28:df:85:
         1d:66:5d:1e:7f:71:d8:8f:d9:8e:76:9e:ec:67:7b:22:b3:7b:
         ae:7e:9e:8c:91:0b:aa:ab:89:5c:b6:d5:08:e0:b2:3a:da:82:
         b7:ff:3b:3d:de:46:2a:f6:07:38:34:55:01:14:cd:30:86:b1:
         21:8e:1b:4f:b5:f1:da:38:92:df:7d:e4:21:61:cd:85:95:71:
         27:39:54:e2:5a:50:fc:7b:c4:ce:41:46:04:6f:6c:92:95:66:
         6a:51:f4:4f:de:ce:86:4e:d1:a0:e2:aa:bb:66:26:52:b5:c2:
         b6:f9:61:a2:f0:91:56:cb:92:88:8d:40:1b:d8:99:56:98:5b:
         0d:a1:93:48:3b:b0:6b:7f:d1:ec:1c:0c:e9:57:7f:47:01:1d:
         61:af:01:f1:cb:70:12:eb:37:95:2e:64:fd:49:1f:3e:4e:c6:
         64:a4:50:4a:25:24:eb:6b:29:10:77:9c:bb:da:de:07:7c:fd:
         cd:9b:55:0a:b4:af:f0:dc:16:69:7b:62:3f:fd:bb:35:a2:68:
         8e:38:b8:10:a4:31:44:fa:24:2f:7a:9b:0c:d5:df:25:d4:34:
         5e:dc:ab:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:09:44 2024 by rpki-client on console-ams.rpki-client.org