Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft
File:                     Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft (raw, json)
Hash identifier:          0xliIV9/VMdfg6rN18jRdUhysv2AKAi1h2Dw+Fdg2OQ=
Subject key identifier:   AE:B0:A2:E8:75:46:50:A6:5C:02:C1:F9:E7:0E:EF:30:6C:33:F1:25
Authority key identifier: 26:9D:CD:CA:E3:58:31:10:E3:26:C5:EC:18:E9:DD:57:8F:EB:AC:AF
Certificate issuer:       /CN=269dcdcae3583110e326c5ec18e9dd578febacaf
Certificate serial:       019357D2A9929DA028470E2E03A8E86EAAA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft
Manifest number:          41
Signing time:             Sat 23 Nov 2024 07:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:43 +0000
Files and hashes:         1: 00dqWW6mwntwEIF4RFOZEFWk2GY.roa (hash: 34JbC8+jOolBdmGEtDvk6g7GnX6OLkCiSiME41msN+g=)
                          2: Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl (hash: 62Z6t/T8l0ZSt9i5Q1+D0FaJK+9CTTJNtV6wkuhgpYE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:a9:92:9d:a0:28:47:0e:2e:03:a8:e8:6e:aa:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269dcdcae3583110e326c5ec18e9dd578febacaf
        Validity
            Not Before: Nov 23 07:00:43 2024 GMT
            Not After : Nov 24 07:00:43 2024 GMT
        Subject: CN=aeb0a2e8754650a65c02c1f9e70eef306c33f125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:bd:87:1b:b3:17:74:59:00:67:00:e4:bd:
                    bb:aa:2f:ab:d1:c0:f4:6c:db:cb:af:26:2c:b8:0f:
                    b8:5d:89:c7:41:29:db:da:4c:13:30:80:ff:53:2a:
                    14:d7:d0:45:49:8d:28:27:f5:6f:ca:62:00:f4:d2:
                    e3:40:aa:96:84:13:f1:40:53:c4:66:f0:09:f1:c6:
                    38:65:15:f4:c1:63:83:df:a1:4b:12:43:54:11:a0:
                    6f:28:38:ff:0b:86:99:2d:f6:fc:f6:25:db:9f:12:
                    47:f4:d2:fe:88:92:20:25:f7:32:cf:f9:72:b2:92:
                    e3:5d:4d:2d:13:75:6f:e8:bb:9d:98:bf:94:45:97:
                    41:fb:a6:6d:cf:21:3d:67:ce:d5:dd:f2:8e:b0:5e:
                    cc:8a:2a:5b:3b:24:9f:38:5a:3a:61:ab:f6:cc:dd:
                    8c:94:15:f4:9b:ec:93:b6:ee:1b:1d:04:5d:93:12:
                    b3:95:22:34:42:4f:6e:09:6c:ff:98:13:07:9f:a4:
                    13:df:58:c3:ba:13:8f:bf:ca:ff:d5:21:24:99:f8:
                    c0:c8:b0:c5:34:8f:b0:ca:e4:07:7b:4f:80:f4:12:
                    e8:0a:56:ca:0b:ab:90:a8:6f:7c:c1:fb:60:24:f7:
                    32:fa:ca:39:73:e3:ce:3f:f7:64:8a:52:ec:48:5a:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B0:A2:E8:75:46:50:A6:5C:02:C1:F9:E7:0E:EF:30:6C:33:F1:25
            X509v3 Authority Key Identifier:
                keyid:26:9D:CD:CA:E3:58:31:10:E3:26:C5:EC:18:E9:DD:57:8F:EB:AC:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jp3NyuNYMRDjJsXsGOndV4_rrK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f1773f-7216-4f5f-8b9b-b36ab506e4ec/1/Jp3NyuNYMRDjJsXsGOndV4_rrK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:06:fa:d3:0f:6f:e2:06:49:9b:a5:8f:46:ad:18:9b:ca:92:
         79:53:01:58:c1:63:ba:2c:c9:d6:d0:30:5c:90:95:e6:41:c2:
         c4:d2:d6:18:ee:7a:13:d5:aa:eb:3c:65:9f:04:06:00:9d:5e:
         f5:b9:2a:45:ef:91:ba:72:d6:ab:de:92:bb:f9:46:21:50:d5:
         18:04:fd:16:41:20:62:dc:e5:9e:e6:49:2e:b3:5b:9c:c0:77:
         cf:5f:d1:ef:36:ea:d2:33:f0:68:f5:f6:7e:93:4d:8c:69:17:
         6f:c6:2f:21:c9:fe:75:e8:31:c5:b2:f1:0c:9b:4b:9e:19:ad:
         0a:79:11:6e:a8:dd:6f:73:83:10:34:55:77:56:91:75:8e:75:
         71:b2:d4:30:b3:48:6e:e8:b3:3c:16:4f:04:09:42:e3:47:9e:
         86:7b:1b:a3:73:fd:2f:26:f2:11:ab:af:0f:1b:67:88:74:0b:
         01:4f:2d:a0:6f:90:f2:67:cc:8a:c6:10:cb:ec:4b:59:e3:a3:
         f5:7d:bd:ef:cb:eb:a5:47:c0:25:f3:3f:ba:fe:4f:41:c9:29:
         06:3d:40:c8:eb:a9:e9:3f:af:34:b9:c5:b2:9d:08:9a:57:d1:
         26:db:ad:64:91:48:5b:5f:8e:8a:67:95:b7:ee:51:9f:f8:ef:
         bc:c1:36:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:43:59 2024 by rpki-client on console-ams.rpki-client.org