Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f4bbff-4ea0-45eb-99a1-17a8f6bd24df/1/07u2-AcZR71cFhu4tFG332YGlkE.mft
File:                     07u2-AcZR71cFhu4tFG332YGlkE.mft (raw, json)
Hash identifier:          Yjf9BIZMKAz43CdLp0i1ZZXQyF+ADtyMjbfvM8TgZx8=
Subject key identifier:   27:B1:D8:B5:E9:FF:E9:7B:16:7F:DC:65:86:50:05:8A:3B:D4:85:58
Authority key identifier: D3:BB:B6:F8:07:19:47:BD:5C:16:1B:B8:B4:51:B7:DF:66:06:96:41
Certificate issuer:       /CN=d3bbb6f8071947bd5c161bb8b451b7df66069641
Certificate serial:       01938B892ADBE62F3628B8D8912EC2BE34F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07u2-AcZR71cFhu4tFG332YGlkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/f4bbff-4ea0-45eb-99a1-17a8f6bd24df/1/07u2-AcZR71cFhu4tFG332YGlkE.mft
Manifest number:          013C
Signing time:             Tue 03 Dec 2024 08:00:42 +0000
Manifest this update:     Tue 03 Dec 2024 08:00:42 +0000
Manifest next update:     Wed 04 Dec 2024 08:00:42 +0000
Files and hashes:         1: 07u2-AcZR71cFhu4tFG332YGlkE.crl (hash: JUkM0emX9tV4jg2W1BwwV/bAUdgH6XfPw0bKsd5NBCQ=)
                          2: c8FnaKUgvzIWc2MSAQ_mLw4nkfs.roa (hash: bxWhnWA5zgg7f50F9/gPZbmWH/Ve89ex8j0t7iOm0S4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/f4bbff-4ea0-45eb-99a1-17a8f6bd24df/1/07u2-AcZR71cFhu4tFG332YGlkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/f4bbff-4ea0-45eb-99a1-17a8f6bd24df/1/07u2-AcZR71cFhu4tFG332YGlkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/07u2-AcZR71cFhu4tFG332YGlkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8b:89:2a:db:e6:2f:36:28:b8:d8:91:2e:c2:be:34:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bbb6f8071947bd5c161bb8b451b7df66069641
        Validity
            Not Before: Dec  3 08:00:42 2024 GMT
            Not After : Dec  4 08:00:42 2024 GMT
        Subject: CN=27b1d8b5e9ffe97b167fdc658650058a3bd48558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:66:b0:e9:88:44:a9:a1:10:8f:74:b9:03:6b:
                    23:2c:9e:93:75:9a:8c:82:a6:b5:39:d4:1d:97:13:
                    6f:07:5e:db:8b:7d:93:c0:70:05:58:18:fe:3e:92:
                    69:e1:00:a2:80:40:9f:cd:03:ea:20:1d:ca:02:cd:
                    9a:67:46:54:b5:5b:f4:af:a1:6d:c6:4c:24:68:8b:
                    2f:ad:6c:2f:34:ed:50:35:82:d8:59:16:38:dc:4d:
                    78:53:89:91:0f:1a:4a:5f:db:66:46:50:ba:b5:9a:
                    31:5a:96:27:2a:60:2d:b6:0a:44:46:a3:65:56:46:
                    ee:61:a2:63:9b:02:25:43:d8:5e:b9:82:60:d0:e0:
                    c9:ef:6b:b2:cc:87:b7:0b:c5:e3:51:88:fb:4f:c4:
                    8a:b4:9e:cc:e1:2a:b9:0c:77:13:94:00:d2:8c:48:
                    78:66:0b:59:e9:bf:74:26:5b:e6:b7:3c:52:12:ea:
                    57:4c:1d:68:97:2f:ce:24:19:b1:ec:19:8b:79:ac:
                    b3:86:8a:e2:44:fc:c5:18:72:8a:d9:ac:c1:09:d0:
                    c8:5a:bf:59:53:20:dc:c8:1c:08:67:ee:b3:01:74:
                    4c:40:a0:b0:cc:27:87:de:ab:cf:f7:d3:bf:8d:c8:
                    c2:fb:8c:77:de:b4:3e:1f:9a:d0:28:94:d9:09:4d:
                    ef:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B1:D8:B5:E9:FF:E9:7B:16:7F:DC:65:86:50:05:8A:3B:D4:85:58
            X509v3 Authority Key Identifier:
                keyid:D3:BB:B6:F8:07:19:47:BD:5C:16:1B:B8:B4:51:B7:DF:66:06:96:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07u2-AcZR71cFhu4tFG332YGlkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f4bbff-4ea0-45eb-99a1-17a8f6bd24df/1/07u2-AcZR71cFhu4tFG332YGlkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f4bbff-4ea0-45eb-99a1-17a8f6bd24df/1/07u2-AcZR71cFhu4tFG332YGlkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:24:79:ee:13:98:38:9d:c7:c7:d4:01:b7:d6:3b:18:43:d7:
         ee:f9:6b:d4:bc:a4:9b:26:f2:ec:eb:78:5a:d5:f2:7e:c5:f4:
         d6:9e:84:a0:48:17:d8:e5:a8:f7:58:98:46:65:8c:18:37:6a:
         37:71:7f:76:6d:ed:f1:5d:b8:23:07:f2:aa:4d:ac:c9:f8:50:
         f2:fb:a5:42:89:31:86:fb:ba:c0:65:95:7e:dd:85:34:49:bc:
         2a:b6:9d:df:8d:df:b4:26:3a:54:82:55:19:ba:1a:6e:f1:53:
         19:d3:47:2a:8a:bb:4f:9c:8e:b8:bd:29:b6:f1:c9:01:84:36:
         93:16:9a:26:93:a5:28:f7:6c:d3:c9:1e:06:51:86:0c:9c:9d:
         3f:6f:74:73:e7:77:4c:f5:d0:d7:1a:45:98:ec:5c:1e:8e:20:
         44:94:33:26:30:2f:06:06:91:1a:26:42:a0:26:e4:2b:61:7a:
         af:93:d1:b4:70:80:98:e3:80:ed:c8:28:94:69:98:3c:e0:82:
         e0:5e:38:f2:95:1c:dd:8f:97:61:b1:3e:74:93:05:e2:31:a6:
         e7:00:86:e9:33:f9:55:53:3a:3b:0f:cd:a0:b1:d6:a6:10:37:
         cf:b3:31:6e:5a:f8:96:e5:76:04:ee:6a:35:cf:5c:fe:5c:d1:
         78:a0:ba:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 17:38:14 2024 by rpki-client on console-ams.rpki-client.org