Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File:                     0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier:          N2rQgeYNVldMFhs7Iei7pcseWnkAsz4YZ6mYD3q5eJ8=
Subject key identifier:   B6:3A:7A:57:34:6E:41:DC:04:A8:80:F7:C7:60:C7:FF:8D:B4:3A:52
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer:       /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial:       01936AB488ECD54ACB88A04712097047B908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number:          0167
Signing time:             Tue 26 Nov 2024 23:00:36 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:36 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:36 +0000
Files and hashes:         1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: +rFKu84l3eGY6nJig5pZT9zKY4kM+WTQ4M0H4pvBkA4=)
                          2: c7E7BZN2hHJD8xHC0x1eXKjZ4tY.roa (hash: VNCom27Rx7WcJqjOORXm3U3Z/VES61eGmIIwo8r6gMU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:88:ec:d5:4a:cb:88:a0:47:12:09:70:47:b9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
        Validity
            Not Before: Nov 26 23:00:36 2024 GMT
            Not After : Nov 27 23:00:36 2024 GMT
        Subject: CN=b63a7a57346e41dc04a880f7c760c7ff8db43a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:af:75:3f:da:17:6e:29:ee:f4:7b:97:c3:fb:
                    a8:23:fa:da:70:23:85:a2:0f:97:3c:18:b0:e8:48:
                    28:5f:c9:21:37:77:03:cd:7e:ff:00:bd:1c:b2:1c:
                    37:a8:ad:45:c2:95:4f:4d:3b:d7:4f:69:97:45:1d:
                    f4:df:a0:97:ed:fd:e7:86:b6:fd:e7:21:f3:44:ac:
                    1d:c1:b7:8b:e4:d5:65:d5:44:75:be:db:d5:d4:da:
                    44:12:ea:b0:63:fd:65:23:da:e9:2f:aa:36:aa:6f:
                    29:cf:c1:0d:2a:f4:91:75:3a:42:cd:11:17:c1:93:
                    1c:a4:e2:e5:d7:1c:23:77:37:2a:f1:50:12:36:52:
                    2c:b1:38:aa:9b:87:07:24:93:01:ec:59:cb:08:36:
                    19:42:00:d8:8c:85:d9:0a:c8:bb:88:3f:8f:ab:0f:
                    12:23:52:25:f5:62:6e:d1:f7:ec:3c:11:ac:d8:36:
                    76:8d:a5:3f:f1:75:a5:2f:7b:40:a9:6c:8d:a8:72:
                    cf:3e:e2:6c:d7:42:a1:14:e3:d7:fd:1b:03:df:ed:
                    bc:f4:c5:c2:fb:01:38:90:b8:28:12:6b:b5:7b:24:
                    6f:b0:6d:94:56:c5:e5:a3:91:ba:1c:c6:fe:0f:3b:
                    65:a0:4c:7f:dc:86:d0:e0:4c:07:61:b1:69:bf:ac:
                    20:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3A:7A:57:34:6E:41:DC:04:A8:80:F7:C7:60:C7:FF:8D:B4:3A:52
            X509v3 Authority Key Identifier:
                keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:dd:f7:13:05:15:73:85:d3:d9:6a:cb:31:cf:f6:17:6d:5b:
         6b:8a:f3:e5:04:14:f4:e2:40:8a:2c:8b:a4:4f:f5:63:19:c7:
         85:cd:a4:bf:0b:b4:2e:bc:a0:41:7c:b8:d3:46:a3:9a:5c:4f:
         38:2d:14:57:04:4d:3f:54:91:48:2e:37:21:ea:53:68:2b:42:
         80:39:19:61:67:bc:e4:10:14:75:21:82:e8:5c:49:6f:6c:23:
         2e:22:38:4f:1c:72:d5:dd:1a:ac:2c:43:63:66:f6:e9:b6:95:
         14:5e:f3:d1:38:21:0d:72:c3:5f:52:e6:7f:49:f9:46:1e:e3:
         d2:7f:19:de:6b:69:d7:27:16:0b:05:06:f4:d6:ae:a2:a0:68:
         78:dc:84:10:c5:e8:00:0b:90:e6:a7:4c:70:ea:c0:89:af:c8:
         a7:49:38:5d:34:7d:f2:9d:0b:fb:fc:11:17:3d:09:80:c0:a8:
         d3:0e:8c:08:70:f2:09:ba:61:f8:9f:44:8a:34:82:1a:8a:08:
         b2:62:9b:18:6f:04:dc:8f:49:3c:09:69:9e:fe:72:be:c6:a1:
         4d:04:05:39:73:9a:08:ed:77:28:61:6f:f0:21:6e:4c:4b:93:
         de:05:9a:90:5d:c4:99:78:f5:7e:a6:36:c9:18:d7:b3:49:1b:
         e3:15:e1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:44:55 2024 by rpki-client on console-fra.rpki-client.org