Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
File:                     cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft (raw, json)
Hash identifier:          Zk+oRUR92HxAr3xRyZ7NIOjpOxvP/R4IfjD97rCCgd4=
Subject key identifier:   E0:9F:4D:F7:F1:B1:66:F4:55:63:0A:AF:7F:A3:09:B6:67:10:86:0F
Authority key identifier: 70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13
Certificate issuer:       /CN=709f8f32082152359cdaf9aabd4a551f4fb40213
Certificate serial:       0193579B753F3EE731746AF34922EB9B0D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
Manifest number:          07B3
Signing time:             Sat 23 Nov 2024 06:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:26 +0000
Files and hashes:         1: cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl (hash: iaBihYhaptM+x4L2MlUvW+z1DHFVetDD9nm0rn36CLA=)
                          2: yxPYpnugJUz8XR9OcycTaUGiiaw.roa (hash: ccZreOan+pb6Y8gBYnxcCrcII+hI1DUPhF+drqnVwLk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:75:3f:3e:e7:31:74:6a:f3:49:22:eb:9b:0d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=709f8f32082152359cdaf9aabd4a551f4fb40213
        Validity
            Not Before: Nov 23 06:00:26 2024 GMT
            Not After : Nov 24 06:00:26 2024 GMT
        Subject: CN=e09f4df7f1b166f455630aaf7fa309b66710860f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:b8:99:f9:58:e4:9a:47:84:f6:27:a9:16:
                    d4:7d:85:35:be:3e:9b:e6:64:45:b6:9d:36:59:4a:
                    91:de:c4:7b:3b:b6:70:e9:ed:0a:5a:5b:8f:1e:f8:
                    d5:29:6b:71:8c:8d:2c:38:dc:bf:f3:54:fa:25:98:
                    0d:dc:83:61:8c:7d:04:91:e4:1b:e4:19:0f:b3:ca:
                    69:cc:74:9a:2c:3f:5c:6a:04:ca:f8:f9:8f:ab:c5:
                    8d:2a:63:d7:0b:c6:42:1f:17:14:db:23:40:7c:ff:
                    2d:d1:32:e2:29:50:42:c0:ec:74:4c:96:f1:f5:56:
                    28:48:15:bd:60:15:70:8a:21:0c:1e:78:b0:56:a8:
                    37:c9:df:9e:68:8c:2d:be:4a:97:a1:01:ae:56:2e:
                    e9:4d:46:31:a3:1d:af:21:e7:ac:5c:0e:c7:f8:6d:
                    9d:40:6a:2d:94:e2:f9:6e:15:35:a5:36:b6:12:44:
                    a5:7b:6f:51:da:8f:73:7f:3d:84:e5:34:ce:f8:50:
                    e6:9c:67:a4:66:54:5f:db:8f:5d:2e:03:d1:d7:d7:
                    50:fa:c0:3d:c5:27:9f:a5:3e:80:71:f9:7c:fd:d4:
                    16:0f:57:bc:ba:39:55:08:e4:78:ef:72:0c:6b:be:
                    4a:3a:3f:21:ed:82:1d:07:c0:ea:e7:98:6f:53:cd:
                    03:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9F:4D:F7:F1:B1:66:F4:55:63:0A:AF:7F:A3:09:B6:67:10:86:0F
            X509v3 Authority Key Identifier:
                keyid:70:9F:8F:32:08:21:52:35:9C:DA:F9:AA:BD:4A:55:1F:4F:B4:02:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ-PMgghUjWc2vmqvUpVH0-0AhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f37538-7f9f-4228-a31e-2dab43ac04b3/1/cJ-PMgghUjWc2vmqvUpVH0-0AhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7e:3c:45:e4:e8:bb:cc:82:c3:d9:ff:25:11:03:4f:f6:c4:
         22:53:6f:5e:86:47:35:19:45:28:eb:4a:0a:4f:64:53:22:1f:
         83:c1:b8:cc:58:ff:28:2e:a6:ac:b4:84:c7:e9:14:8b:2d:20:
         e6:3c:1a:9a:ca:4f:60:9b:7c:be:5f:ae:1f:75:10:d1:87:c4:
         28:48:94:8b:ee:7b:08:5b:2c:c3:7b:31:86:f6:39:39:ce:65:
         2e:de:81:18:44:ff:09:45:6f:83:5b:9c:98:df:17:13:24:38:
         81:79:57:dc:00:63:3a:52:1f:8c:76:c4:73:9c:6e:01:66:82:
         3c:f5:0a:5c:cb:dd:41:91:96:f4:47:df:b4:55:3b:9c:0a:71:
         c9:1a:fd:d4:d1:a6:bd:40:08:08:62:b0:dc:19:51:04:0a:d0:
         64:b6:c0:73:f2:0d:28:4a:db:26:9f:3e:26:da:d9:1e:eb:97:
         f9:59:27:3c:c4:02:84:a3:1a:c2:06:1f:a0:80:85:15:49:2d:
         23:97:db:fa:09:61:69:39:21:07:a0:8e:e9:5a:77:ce:b2:ef:
         23:8e:9d:16:17:6b:a3:fe:af:00:06:10:cb:f7:10:ec:94:9b:
         c0:6a:cf:0b:15:12:86:96:4a:1c:96:2b:15:c2:44:c4:38:76:
         de:7b:26:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:00:54 2024 by rpki-client on console-fra.rpki-client.org