Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.mft
File:                     1-Y75BBRwJqzU6d94kpIZas4yisI.mft (raw, json)
Hash identifier:          rPPRqVhBfIk088EaDMon+Y1LJFRspZM/l7vLWyfErEI=
Subject key identifier:   28:A4:70:5C:6C:79:9D:E3:2F:92:87:2E:B8:F2:F3:61:73:CB:5F:55
Authority key identifier: F9:8E:F9:04:14:70:26:AC:D4:E9:DF:78:92:92:19:6A:CE:32:8A:C2
Certificate issuer:       /CN=f98ef904147026acd4e9df789292196ace328ac2
Certificate serial:       019358E585FE6DCDB495539FFEFAA3A15BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Y75BBRwJqzU6d94kpIZas4yisI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 12:00:57 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:57 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:57 +0000
Files and hashes:         1: 1-Y75BBRwJqzU6d94kpIZas4yisI.crl (hash: cAx/HFf+2ZDEFXUFHzJ0aO2/xxSXvqGaG/LrYQ6DX2o=)
                          2: xQPJfWgHTWb5M9QZY3s4CPkGCg8.roa (hash: Mj2YnO6FEktejYDanokPq2DQKUi1sVlVvUAaiDYb1jE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Y75BBRwJqzU6d94kpIZas4yisI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:85:fe:6d:cd:b4:95:53:9f:fe:fa:a3:a1:5b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98ef904147026acd4e9df789292196ace328ac2
        Validity
            Not Before: Nov 23 12:00:57 2024 GMT
            Not After : Nov 24 12:00:57 2024 GMT
        Subject: CN=28a4705c6c799de32f92872eb8f2f36173cb5f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4c:b6:9c:7a:50:5b:ef:78:99:d4:00:e4:c5:
                    fd:28:f1:e5:0e:d0:c0:60:ae:8d:01:3d:e2:6e:4a:
                    8a:ab:8e:e6:23:1f:82:fc:cc:56:0f:7f:7f:5b:8d:
                    cc:b1:6b:2d:c3:e1:b6:ea:ff:5f:34:8b:61:8e:b7:
                    14:72:d3:1c:73:3e:08:e4:72:06:ba:9c:bd:69:5c:
                    7f:52:f7:f2:f7:ac:fc:36:7f:3b:f3:4b:cf:f4:3c:
                    2c:01:44:56:5f:36:5f:19:98:c6:45:b5:15:22:a7:
                    92:a5:ab:4b:73:25:2d:ab:00:de:83:52:c8:4f:57:
                    dd:8c:30:e2:0b:e4:3e:5d:64:bc:8a:22:91:30:27:
                    30:db:32:b6:12:5a:e6:50:33:27:60:e2:7f:92:0f:
                    2c:2c:b8:25:ca:fc:02:4f:bd:47:2e:4e:3e:f2:30:
                    fd:62:cf:88:ac:2c:57:83:25:7b:3a:de:2e:19:09:
                    ea:50:65:e8:bc:46:2a:78:77:f4:71:2a:c3:39:0a:
                    5c:7a:a8:38:c6:f4:cb:d5:24:42:e2:a4:60:35:42:
                    ac:d9:fd:48:13:c6:71:7c:5e:33:b2:c6:e8:cb:cb:
                    1e:76:0b:12:4b:40:e1:26:f3:33:48:04:5d:0a:2e:
                    86:32:f2:d0:b7:3c:d2:59:fb:c7:fa:04:30:8e:a0:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A4:70:5C:6C:79:9D:E3:2F:92:87:2E:B8:F2:F3:61:73:CB:5F:55
            X509v3 Authority Key Identifier:
                keyid:F9:8E:F9:04:14:70:26:AC:D4:E9:DF:78:92:92:19:6A:CE:32:8A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y75BBRwJqzU6d94kpIZas4yisI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b719f-1ec7-4b60-9c23-6cfde55f2752/1/1-Y75BBRwJqzU6d94kpIZas4yisI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:ac:07:f4:a4:19:35:97:ed:ee:e7:d8:8a:cc:0e:7a:59:
         ec:a5:91:db:51:77:5c:9d:8e:fb:f1:f9:62:88:93:c2:0a:59:
         cc:f5:8b:d7:38:b2:7c:4d:ca:ca:91:9a:3a:ba:78:ee:06:c8:
         de:0e:92:fe:a1:d1:a0:3e:fc:fe:25:c9:08:f6:f3:16:72:2c:
         64:b6:b8:8c:ba:03:a4:13:87:51:17:a1:4c:95:ca:7c:0e:1b:
         cf:e1:0d:84:d8:62:07:6c:63:9e:c6:48:f5:94:4e:3f:7e:b4:
         fa:e4:e5:19:10:69:70:7d:ea:d1:c9:7a:dd:e7:96:83:7d:aa:
         0d:90:97:8c:46:c9:ce:2b:fc:c8:69:c2:6d:39:32:cc:0a:9a:
         3e:d6:84:5f:67:2d:a8:e5:c9:2e:8d:8d:96:c3:22:a7:d4:2f:
         c7:fb:8a:03:fc:4e:72:01:bb:b0:58:78:ba:74:c1:26:7d:20:
         39:65:81:8b:93:14:13:ef:7d:8e:8c:fa:8e:7d:35:59:16:4c:
         6b:db:b4:ae:ec:df:20:55:cd:b9:b6:b0:07:f9:5d:fd:ff:b5:
         7f:ea:74:6f:49:f0:b6:6a:07:03:2c:a3:37:7d:2b:d3:1e:a3:
         4a:6c:55:ce:0d:20:84:08:ed:7f:4d:8a:a5:4e:c4:9d:68:d3:
         ee:48:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:15:48 2024 by rpki-client on console-fra.rpki-client.org