Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File:                     1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier:          EfD2nkM4ul1po1Lk8HQeTCh03wGpS4Vjyeib/I7E38o=
Subject key identifier:   6F:7A:F8:4E:71:1D:B0:47:AE:25:1B:05:63:DA:22:D2:2F:DB:3C:BA
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer:       /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial:       019355E3E8380E0A81F19A6B3DD87200F516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number:          1247
Signing time:             Fri 22 Nov 2024 22:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:19 +0000
Files and hashes:         1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: QbSBF0FwdNwEim5f38XMNRBaKuboVenz+JbaQYQQ8Ko=)
                          2: aEqLiO7p8BrTYpGK8NCTiZeH0VY.roa (hash: fAOyPzse8dtqVSj9tzWnJZ7X9wBGPE9lFkibBDcZ0X8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:e8:38:0e:0a:81:f1:9a:6b:3d:d8:72:00:f5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
        Validity
            Not Before: Nov 22 22:00:19 2024 GMT
            Not After : Nov 23 22:00:19 2024 GMT
        Subject: CN=6f7af84e711db047ae251b0563da22d22fdb3cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:05:6f:d5:d7:4e:f0:3c:24:da:b6:0d:c2:f0:
                    5f:d2:bc:c6:ad:1d:47:31:26:ab:7f:59:77:36:32:
                    78:73:ab:d7:bb:7c:f0:1a:4d:ee:45:20:6f:c4:10:
                    fa:1f:79:4a:36:4d:1a:2e:22:21:45:72:85:f7:8f:
                    96:dc:f7:6f:24:94:98:4b:29:f2:c9:21:82:cb:fd:
                    b7:a2:c7:dd:8a:3d:eb:3a:73:a1:ce:38:15:1a:c3:
                    e9:28:41:a1:db:b3:bd:71:26:22:e2:50:5b:e2:d8:
                    b3:8d:5c:84:2b:3b:5b:1a:48:79:cc:b6:6c:d2:03:
                    4c:a5:b3:2f:4c:47:71:c8:33:95:40:e1:a1:22:02:
                    a1:3b:09:21:91:06:ad:f1:37:82:c4:8f:6e:2b:18:
                    aa:38:08:2d:dd:12:f8:13:d1:64:ed:1c:f0:19:44:
                    fe:56:2e:10:82:47:49:54:0c:4f:4d:01:3b:81:87:
                    ba:97:95:b6:f4:35:bb:4c:98:66:95:04:b2:ca:87:
                    c6:bb:87:c3:f9:79:35:5f:a8:69:ab:71:80:f8:90:
                    c6:06:3b:07:b2:2a:a3:60:42:87:74:ea:30:17:bb:
                    fd:81:3f:35:b0:e7:b3:02:15:4e:b0:34:cf:b5:8b:
                    ec:a6:94:d3:8c:4d:b7:ea:b3:52:c0:f9:2d:5d:60:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:F8:4E:71:1D:B0:47:AE:25:1B:05:63:DA:22:D2:2F:DB:3C:BA
            X509v3 Authority Key Identifier:
                keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a9:7a:3b:01:c5:a8:eb:64:52:79:02:26:c9:06:5f:34:93:
         f1:b6:a9:4c:62:12:2a:96:e2:85:de:3d:de:91:f2:22:6a:ec:
         14:9b:e3:3a:ec:49:b6:24:61:78:93:98:b3:7c:1a:d2:23:02:
         f5:8f:8e:68:1f:7c:39:86:87:13:18:90:ba:78:6b:60:dd:46:
         0d:69:a5:01:81:a4:45:5b:3f:6d:66:78:72:7d:2e:ef:7b:68:
         bd:4e:0a:35:34:63:0a:a1:05:31:6e:a1:0a:1a:2e:ba:5b:3a:
         ce:6a:35:1a:33:9d:06:40:8a:08:14:16:02:76:2d:5a:dc:21:
         fa:71:73:c7:31:f4:ae:11:ee:eb:02:e1:9a:a5:5c:41:5e:f3:
         ca:72:1e:11:10:a9:0e:36:5a:df:57:c5:32:a8:8f:e0:2a:47:
         34:34:94:81:36:15:a0:3a:d4:36:7d:0c:35:69:af:ab:a4:c1:
         5f:3d:68:0d:ec:dc:fc:24:74:74:24:07:27:62:a9:4d:fb:94:
         30:10:a5:26:e2:7a:f7:99:93:ec:2e:c5:92:aa:24:6c:96:80:
         ff:eb:8a:d1:d0:d5:eb:7d:2b:ed:8e:59:ef:54:8b:19:c8:c5:
         16:99:ee:10:dc:ed:74:37:74:eb:54:1c:e1:0f:35:5c:da:7d:
         33:f5:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:13 2024 by rpki-client on console-fra.rpki-client.org