Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
File:                     mK_pac8OqToOjlfulYjK9VcrOyI.mft (raw, json)
Hash identifier:          XNj167g5FOg2uRFcW2UJZYnyJTize/HU+PxGcfmBk8A=
Subject key identifier:   75:57:A5:7E:E9:3A:F7:03:D1:1A:8E:E5:6E:9B:04:51:7F:AF:50:85
Authority key identifier: 98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22
Certificate issuer:       /CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
Certificate serial:       019369A179AC4FB2D9FDED03FE134D549216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
Manifest number:          019F
Signing time:             Tue 26 Nov 2024 18:00:10 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:10 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:10 +0000
Files and hashes:         1: mK_pac8OqToOjlfulYjK9VcrOyI.crl (hash: RwF4noyWyop50KRiO3IitTg/HlFL+eLy8+h/hTMamNc=)
                          2: tnZ23ESXSMpZTpRo_eGIE2sBXeo.roa (hash: ho1iGFdpsd7UJzqy7dqJIXAfbJ4hgImkpBW0NTJ9qkM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:79:ac:4f:b2:d9:fd:ed:03:fe:13:4d:54:92:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98afe969cf0ea93a0e8e57ee9588caf5572b3b22
        Validity
            Not Before: Nov 26 18:00:10 2024 GMT
            Not After : Nov 27 18:00:10 2024 GMT
        Subject: CN=7557a57ee93af703d11a8ee56e9b04517faf5085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:48:21:79:f9:71:90:8f:81:32:2b:e3:20:4a:
                    d9:5e:23:9d:2d:d4:13:aa:ed:3b:9f:13:3b:48:71:
                    98:1d:70:be:01:80:ab:24:79:d3:a7:ed:ea:bd:06:
                    89:d4:69:2c:88:57:6b:dc:9d:24:cd:44:de:0c:2b:
                    80:4c:ba:a3:68:03:2f:9e:a0:52:46:e8:ad:f8:86:
                    b8:59:3b:06:c7:67:66:bd:87:0f:fa:62:4b:71:d1:
                    ff:87:f0:ce:be:da:61:3f:99:41:a1:df:3a:2b:ca:
                    89:41:a9:2e:df:80:f9:f4:55:7e:99:fb:61:cc:4c:
                    cc:50:f0:9a:90:a7:6c:61:9e:70:c7:9d:7a:0a:16:
                    68:fe:16:5b:3f:8b:33:fd:d3:8a:b4:8c:b5:45:fd:
                    c4:4b:ca:be:3a:fb:9a:7c:96:b5:a4:00:d1:85:54:
                    bf:c3:df:a8:bd:67:5f:62:80:f0:73:03:d4:b3:c5:
                    49:2e:42:ea:30:9c:c3:31:6d:52:85:98:09:55:16:
                    3d:c8:98:62:ae:21:c5:9f:3f:b9:e3:70:1b:cc:89:
                    62:18:bd:08:96:65:29:67:72:9e:a4:1c:d6:e8:07:
                    4f:74:2d:f0:af:c1:a2:de:fc:c6:39:9d:4d:a2:e8:
                    5e:93:2d:bf:b2:70:8e:5e:d4:15:6f:34:fc:f6:d3:
                    00:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:57:A5:7E:E9:3A:F7:03:D1:1A:8E:E5:6E:9B:04:51:7F:AF:50:85
            X509v3 Authority Key Identifier:
                keyid:98:AF:E9:69:CF:0E:A9:3A:0E:8E:57:EE:95:88:CA:F5:57:2B:3B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK_pac8OqToOjlfulYjK9VcrOyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/72bd07-3cf1-45b1-9eef-b847eb77afc8/1/mK_pac8OqToOjlfulYjK9VcrOyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:eb:52:3f:12:a1:42:59:86:fb:e6:c4:f9:2a:f8:56:1a:d6:
         60:a7:96:d1:e3:de:40:3d:89:bd:46:e8:a6:b6:ff:a7:6a:ae:
         2c:ee:96:7e:b6:2d:0d:e3:ed:c7:42:00:9e:64:b8:88:c3:94:
         5b:9f:0a:57:4c:a9:3d:9a:8f:30:31:40:7f:77:e5:93:d2:36:
         ea:a4:52:d4:84:15:8f:2e:14:ad:eb:a9:48:17:27:f5:f7:8b:
         42:8a:b9:e5:19:f0:7d:30:19:bc:06:59:08:22:cf:d8:80:f1:
         84:cb:d0:47:97:98:65:51:cf:d2:b9:ae:b0:66:2f:e3:8b:be:
         34:bd:12:58:cb:b1:40:1a:f6:d3:67:9a:fa:ee:39:69:a9:bf:
         14:84:8b:39:63:30:59:f0:64:84:e8:39:50:77:0f:3f:1f:65:
         42:3e:16:8f:3f:40:0d:f1:7d:29:f3:ea:32:a2:63:e5:28:7d:
         b6:3b:e5:0e:27:4d:36:9e:3d:d9:97:39:34:9e:60:80:4d:66:
         d5:23:a7:94:df:fc:67:0b:3b:ab:db:3a:c2:a5:d0:b7:f2:52:
         3d:64:01:6f:ed:95:65:cf:71:dd:78:57:47:5c:a3:ce:a3:15:
         e3:24:7a:93:8e:d6:98:e3:83:76:80:05:2d:70:40:39:19:b6:
         62:86:9c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 23:02:52 2024 by rpki-client on console-fra.rpki-client.org