Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
File:                     cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft (raw, json)
Hash identifier:          y20HQbsRcdIjCWMOKE1HQBTR2qVWDtCrQKfyTupkrfA=
Subject key identifier:   F0:9B:A1:8C:CE:25:7D:7A:38:B0:AA:31:1E:28:AD:B6:A3:E6:0A:E7
Authority key identifier: 70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E
Certificate issuer:       /CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
Certificate serial:       01936AEB814305983146228768FA7D454B9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
Manifest number:          1183
Signing time:             Wed 27 Nov 2024 00:00:39 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:39 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:39 +0000
Files and hashes:         1: THNBslYq_Wqs5A9lvZgBDnj60EA.roa (hash: SVA2CmP/C1FaV01H2iLx4Uy7sm4v0K8pZvi/TheFSu8=)
                          2: cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl (hash: WndyMZHoKtJ62xRfeuxXBx6DTr+JU4AoBPx5GNy4ByI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:81:43:05:98:31:46:22:87:68:fa:7d:45:4b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=707af45346f06b622a0ebbb4ff9ba33be6f42f1e
        Validity
            Not Before: Nov 27 00:00:39 2024 GMT
            Not After : Nov 28 00:00:39 2024 GMT
        Subject: CN=f09ba18cce257d7a38b0aa311e28adb6a3e60ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:07:3e:6d:45:34:42:c0:80:75:c2:3b:cb:
                    b8:a0:c1:41:21:59:80:4e:98:dd:c9:9a:12:4b:c3:
                    69:aa:23:5c:01:94:f4:7c:3d:b8:2b:de:a3:2a:48:
                    88:ff:67:0f:a3:df:a4:59:68:b0:69:44:35:41:c1:
                    3e:76:69:d2:1f:03:bd:84:0f:a8:39:29:fe:bb:a7:
                    9d:1c:13:09:0d:e8:56:5b:b2:39:38:a3:86:69:d8:
                    7e:04:a7:74:14:f8:68:e2:6a:54:e1:00:c4:12:39:
                    f7:84:d8:db:97:e3:9b:4a:d2:34:26:ec:9b:a9:a0:
                    31:e5:c1:c6:08:65:c7:e8:5f:0a:7a:ee:5d:6e:b7:
                    1f:0f:de:a1:9d:16:55:5a:c5:ce:13:1f:e4:72:79:
                    29:00:af:ac:e0:f3:8f:7d:aa:4d:7d:9d:78:13:da:
                    23:0a:79:d0:57:ef:88:6d:bc:ab:3d:7b:65:95:5b:
                    d2:a5:1f:d0:04:9e:81:d2:c1:01:1c:00:88:ec:9a:
                    ce:65:e6:dd:ab:15:7f:7a:24:ba:3b:6a:89:77:c9:
                    83:99:d5:98:61:9a:dd:1c:63:ea:6e:53:ad:85:ad:
                    dc:08:9c:45:64:de:f3:b6:b5:9b:bc:5e:ca:a5:17:
                    74:99:60:cb:cf:82:b5:08:f7:c7:ea:9a:23:80:37:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9B:A1:8C:CE:25:7D:7A:38:B0:AA:31:1E:28:AD:B6:A3:E6:0A:E7
            X509v3 Authority Key Identifier:
                keyid:70:7A:F4:53:46:F0:6B:62:2A:0E:BB:B4:FF:9B:A3:3B:E6:F4:2F:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cHr0U0bwa2IqDru0_5ujO-b0Lx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7920d0-f956-4439-9cd2-4b7808d98664/1/cHr0U0bwa2IqDru0_5ujO-b0Lx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:99:01:a4:c4:58:a5:3a:b2:dd:3e:ea:11:fe:70:e1:3f:24:
         5f:a1:09:ea:19:3f:03:bc:70:8b:d3:53:20:85:73:6f:da:56:
         6c:d1:e5:04:a1:4b:a7:dd:43:7b:68:fe:65:d3:7a:58:ec:17:
         a3:50:52:2b:bf:23:61:12:63:68:c0:0d:ab:7f:f0:0b:8d:18:
         31:6c:87:9b:80:ad:91:bb:42:ab:14:af:66:c0:c7:0c:00:ce:
         fc:6d:32:47:0b:c3:51:5d:87:f4:0c:0c:e4:5b:c2:fb:38:c5:
         45:21:97:61:61:c8:0d:b7:e9:45:07:3a:11:56:dd:02:81:a2:
         0b:4c:db:dd:13:50:d6:7a:e2:0e:72:47:32:51:48:0d:39:44:
         80:7b:a4:56:87:90:9b:b4:60:e0:5d:ea:09:75:4c:ee:f3:45:
         c3:b5:7b:25:e7:df:06:f8:2a:21:5a:11:3e:27:cc:a3:cc:81:
         ef:8c:bd:fb:5d:00:09:1f:42:dd:17:81:13:3a:6e:be:33:b9:
         35:6d:8c:68:d0:32:35:93:5e:84:ea:cf:2d:e7:49:19:6c:8b:
         b2:16:99:ea:51:f6:a7:98:7e:90:b8:97:4c:70:fd:b7:f2:50:
         d6:b0:f6:fd:68:88:3e:0c:9c:26:24:ac:28:6f:32:ee:ff:3d:
         bb:f4:67:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:33:43 2024 by rpki-client on console-ams.rpki-client.org