Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File:                     jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier:          UvxD4acZzH9lV9bC7DtajC/5RX66YxdAWk6n0mkA53c=
Subject key identifier:   D9:29:18:0F:7B:15:82:A8:A8:27:0C:F2:8E:F8:6E:E4:9B:15:32:16
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer:       /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial:       019365FCE2D8B292D3993C64555DE910AD24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 01:01:32 +0000
Manifest this update:     Tue 26 Nov 2024 01:01:32 +0000
Manifest next update:     Wed 27 Nov 2024 01:01:32 +0000
Files and hashes:         1: et9PjOpdNPx1nUnf4P18Z7yzrEM.roa (hash: QGV7KExuE2XVVMiClknjeCXhvPFdaJ/01fxEeSG/F1Y=)
                          2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: OXDPvQzsv09RxVmidmYvSqYRVGXN5tW5HgEtwTCulG8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:e2:d8:b2:92:d3:99:3c:64:55:5d:e9:10:ad:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
        Validity
            Not Before: Nov 26 01:01:32 2024 GMT
            Not After : Nov 27 01:01:32 2024 GMT
        Subject: CN=d929180f7b1582a8a8270cf28ef86ee49b153216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:1d:6f:8b:d6:06:7e:d3:e4:82:23:49:89:
                    e7:72:bf:d7:ea:29:12:68:d4:01:13:1a:f0:86:01:
                    73:05:6a:d9:03:30:37:8d:45:b2:8c:0b:38:7a:3a:
                    b5:10:85:b9:85:af:fa:ed:d1:62:cd:0c:44:4d:39:
                    21:8d:0d:9f:b0:c0:1a:9e:d6:4f:4e:e0:d7:3d:de:
                    7b:ed:b8:02:4e:22:51:47:61:b8:b3:aa:45:bc:ec:
                    1e:d4:2f:30:b9:6f:89:d2:83:f4:4f:5d:95:fd:e1:
                    b7:13:7c:9e:de:77:47:d4:e3:d9:30:26:81:7e:65:
                    a0:39:4f:ab:c2:cd:5a:3a:de:55:e3:87:90:9f:99:
                    ba:7b:63:1e:01:6d:44:fd:6b:39:0e:d1:f6:a6:78:
                    f3:c2:e1:18:78:77:af:c4:69:f4:c6:12:04:ac:53:
                    3d:80:87:87:8c:78:5d:14:13:57:f2:75:5d:3a:c9:
                    d5:ff:fc:5a:ad:7a:28:54:97:c5:72:43:a4:b0:3a:
                    f0:e0:b0:16:18:cc:b0:0e:5d:01:6d:71:3a:8a:03:
                    f3:43:d3:1d:2f:f7:63:99:e0:60:1d:4a:ab:eb:5e:
                    0c:ea:dd:0e:2c:57:8e:ed:18:5f:f0:d6:c2:ae:0c:
                    d4:5c:6b:5a:3f:2b:ec:57:06:38:6e:c9:6e:98:22:
                    b9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:29:18:0F:7B:15:82:A8:A8:27:0C:F2:8E:F8:6E:E4:9B:15:32:16
            X509v3 Authority Key Identifier:
                keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e3:25:6f:d1:f3:da:93:f5:80:63:02:bf:81:a2:5c:6c:b0:
         cc:2f:e5:5b:bc:54:64:f0:25:07:22:28:85:88:0a:aa:d4:be:
         4d:42:7d:8d:a2:9f:38:18:75:78:1e:bc:59:6d:7d:b3:fc:84:
         81:59:e1:cb:38:c2:7f:62:19:20:55:b2:71:1c:ed:7f:79:de:
         a4:22:a2:74:6f:4f:8d:6b:00:b8:de:dc:0f:81:97:be:87:7e:
         54:60:26:db:c8:48:91:37:bc:17:b1:68:78:c5:f4:12:ed:39:
         5f:a9:67:8a:3c:f6:fe:f6:a4:58:ab:ec:91:af:17:41:c3:4f:
         2e:9f:d7:87:b8:73:d1:34:89:4c:38:a0:90:1e:c2:df:45:f0:
         5a:98:ec:3f:b7:fb:08:1b:f5:08:62:cd:5f:ad:e7:62:68:79:
         10:ea:12:7e:39:2d:0d:82:72:a9:7e:ff:60:8f:10:5c:74:90:
         cc:27:67:cf:c3:c2:17:8e:91:3d:48:b5:4e:81:4d:f6:f4:28:
         59:08:7b:97:72:48:ea:21:e6:17:06:01:fb:82:a2:3c:52:4e:
         65:d3:22:6d:93:c0:70:05:87:7c:33:27:3e:1f:ad:92:db:36:
         65:b5:0e:82:4e:b0:66:29:1f:11:a1:df:b3:01:a2:c9:e2:b2:
         43:a1:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:14:34 2024 by rpki-client on console-ams.rpki-client.org