Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
File:                     04V55MfaAd8EZRhiNumvJ-tzEu0.mft (raw, json)
Hash identifier:          rqKqgnwzGeV//gdeErvGCHsriBOh7bE35p+a/rsqBO0=
Subject key identifier:   F7:B4:6F:E9:3B:8F:B0:B6:5C:5B:81:9E:42:49:41:3C:B5:02:AB:D0
Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
Certificate issuer:       /CN=d38579e4c7da01df0465186236e9af27eb7312ed
Certificate serial:       019357D2E839E6C92FECCA711D2268EF36C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
Manifest number:          B2
Signing time:             Sat 23 Nov 2024 07:00:59 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:59 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:59 +0000
Files and hashes:         1: 04V55MfaAd8EZRhiNumvJ-tzEu0.crl (hash: 7TJeJDp/frt90ki964RXafh5yGW/KA9+Mw8m3lfVMps=)
                          2: Y3_pIPJxPQy2GoNd-v4OkOV77tY.roa (hash: SPVgZ67EbHTdoTiVHzmjdI/3YDNq7ANATRhxjrf218U=)
                          3: tDz2dTsJcM-hGGZs_D-mkxRJ9Ts.roa (hash: FtHm54ZMxfLBIp3iqKditk34zb/VtzioE3ONJHyYGhs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:e8:39:e6:c9:2f:ec:ca:71:1d:22:68:ef:36:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed
        Validity
            Not Before: Nov 23 07:00:59 2024 GMT
            Not After : Nov 24 07:00:59 2024 GMT
        Subject: CN=f7b46fe93b8fb0b65c5b819e4249413cb502abd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:53:8e:05:c6:4f:f7:58:02:8d:73:f0:c8:40:
                    b2:86:68:33:a1:eb:23:34:9c:ab:45:de:12:7f:33:
                    9f:4d:9b:8c:3c:e2:2d:11:63:59:7f:77:03:7b:76:
                    b0:3e:34:14:78:7a:88:f5:ad:c2:0b:02:a8:d4:e6:
                    4a:da:33:27:da:c5:50:13:72:66:86:b9:05:5f:f7:
                    3d:51:66:9e:ab:d1:20:69:15:19:7b:63:97:c0:fc:
                    12:2f:fd:d7:b5:29:41:b7:24:0a:99:eb:30:53:f9:
                    10:17:ab:ec:b3:7c:72:a3:e8:78:20:07:4f:4a:35:
                    8e:de:08:62:60:e2:b3:dd:1a:5f:69:99:c9:60:7d:
                    47:a5:f6:b2:68:fe:91:a6:7c:93:73:7e:e8:68:56:
                    c9:06:d3:11:55:96:8e:3d:1e:d5:73:e5:fe:3e:82:
                    7e:fc:62:4e:43:aa:57:68:e5:4c:53:49:8a:7c:fc:
                    3f:cf:37:56:80:d1:a3:92:40:b3:28:b8:1e:2f:41:
                    3a:d0:fb:60:e0:00:91:52:4c:dd:f3:5a:5a:a2:69:
                    77:bc:a1:98:91:72:00:cc:f2:47:1c:3a:c5:fe:cb:
                    af:ed:eb:2b:54:21:d9:a4:47:3c:3b:ae:63:24:4f:
                    f2:8b:bd:83:4e:59:65:1d:7a:35:e6:5a:50:f1:9c:
                    ff:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B4:6F:E9:3B:8F:B0:B6:5C:5B:81:9E:42:49:41:3C:B5:02:AB:D0
            X509v3 Authority Key Identifier:
                keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b9:7a:a4:a8:5f:3e:f8:54:67:3e:b1:9b:92:de:21:ff:88:
         b7:f6:15:80:6a:fe:27:9a:e6:9b:f7:13:b7:2c:ac:0a:fa:22:
         c6:8b:7b:e3:b7:0b:c4:f0:31:9a:5d:a6:d8:7e:71:23:83:a1:
         6f:5c:71:fd:49:bc:e4:70:5d:c5:a5:e2:fb:d7:18:72:67:b9:
         4b:98:d4:34:99:62:ec:c8:99:44:6d:f8:89:d1:14:fd:76:a7:
         bb:7b:e3:3a:29:6e:9e:96:f3:0d:e8:1b:0a:54:bd:3b:c2:22:
         98:d8:16:6e:bf:cc:19:a9:5a:46:5b:19:42:fc:8f:ed:83:24:
         30:56:4f:af:b3:33:32:09:f7:34:8c:8c:a6:b7:26:3b:d3:d3:
         d3:47:f9:a0:b1:1c:5e:ea:c8:10:8c:cb:ab:17:5f:74:ea:fd:
         b2:7f:0f:fd:8d:db:c7:31:fb:e0:cc:7a:da:30:4b:48:c0:16:
         e6:d6:cf:34:09:ac:f7:de:f4:04:de:f6:cb:64:85:dd:16:a1:
         c1:0b:68:5a:17:56:49:d3:3b:1b:0d:84:99:57:25:24:4c:32:
         65:0b:08:48:50:be:4b:dc:d0:cd:9b:44:dc:4c:af:94:c1:e4:
         ad:e3:31:0f:55:1d:66:55:6c:82:6d:4f:34:6c:cd:05:16:15:
         88:6e:05:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:01 2024 by rpki-client on console-fra.rpki-client.org