Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
File:                     1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft (raw, json)
Hash identifier:          upOqexGQRdg3UYL8VF5VEZ5VSHCYSqfBnagvTxIlc88=
Subject key identifier:   3E:CC:80:07:AD:E4:08:F1:35:88:55:A6:39:D1:8C:65:8B:16:AC:15
Authority key identifier: D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
Certificate issuer:       /CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Certificate serial:       0193568A462C89577BE9046EEFC95360972C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
Manifest number:          0981
Signing time:             Sat 23 Nov 2024 01:02:02 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:02 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:02 +0000
Files and hashes:         1: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl (hash: V6TCnRn5AZcVlA8qYUihVknzNAyNSoAs1U2D2maczSI=)
                          2: dJ0TcqpCgkiQr2ht8PsHbjxbO6E.roa (hash: lCXUeO+uBYR7RsuqAga1ilVljDJ/QJQOUMHL8Yb3LT4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:46:2c:89:57:7b:e9:04:6e:ef:c9:53:60:97:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
        Validity
            Not Before: Nov 23 01:02:02 2024 GMT
            Not After : Nov 24 01:02:02 2024 GMT
        Subject: CN=3ecc8007ade408f1358855a639d18c658b16ac15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:11:f2:a7:51:a3:76:4c:2f:97:2b:63:e4:
                    7e:2f:60:aa:bb:1b:74:fa:82:3b:60:3a:49:4a:59:
                    e3:21:fe:c9:51:6a:41:49:15:a4:d7:bb:81:05:ce:
                    f9:6e:fb:c8:a0:61:0b:ec:82:d6:3c:af:53:b2:79:
                    b3:73:94:48:72:7b:d4:75:4f:0d:4a:96:f4:95:4c:
                    4d:3f:4e:4a:0b:dd:c1:69:4d:00:83:38:7c:36:46:
                    4e:dd:97:83:20:e3:70:0c:a1:27:d3:82:9e:ab:1f:
                    1b:33:94:97:6d:79:ec:8e:4d:0f:4c:a2:de:56:19:
                    7e:b7:7d:72:fd:6b:f6:6d:a6:0e:8c:b8:d2:90:60:
                    e9:05:99:9d:fc:da:11:5e:38:e1:15:68:97:d7:4c:
                    ce:c4:d8:3b:6b:77:84:9e:5b:da:f0:4d:54:8e:e2:
                    06:bb:ba:95:82:67:a6:56:8d:8f:f4:67:09:da:21:
                    7e:b8:be:17:48:6f:76:2c:06:c9:32:82:ad:d5:14:
                    fd:ec:70:a8:b2:36:d5:46:85:b6:5e:11:b6:95:a8:
                    06:87:e5:9e:b2:7f:7b:e7:f3:28:80:06:c1:cd:ca:
                    00:e1:8d:93:86:80:32:e3:ed:8d:cb:32:49:5c:ab:
                    fa:17:7a:61:dd:48:db:f5:7e:73:9a:2b:a4:d4:97:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CC:80:07:AD:E4:08:F1:35:88:55:A6:39:D1:8C:65:8B:16:AC:15
            X509v3 Authority Key Identifier:
                keyid:D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:91:20:d0:ae:d5:69:fd:2e:71:ec:5c:9a:3c:d7:9c:09:9d:
         4d:12:1c:dc:b0:fd:12:ac:27:f1:48:e4:95:e7:8d:f8:e5:9f:
         5b:fb:ad:68:2d:24:1d:c0:85:b9:76:8a:4c:3d:51:91:d5:17:
         29:0c:eb:5b:9f:c1:1c:66:4b:e4:65:a1:95:38:cd:56:f9:a1:
         a0:7f:e5:d2:17:e8:a0:42:d8:e6:93:7c:23:63:38:ea:4a:07:
         de:fe:47:d3:f1:91:10:1e:6d:48:66:6d:9f:2b:ac:4d:b8:94:
         e7:69:fd:f8:ba:59:e9:7d:fb:d3:5e:90:15:49:ab:c1:35:f0:
         c1:05:f1:96:c5:ac:51:2b:53:13:5d:5d:1f:4e:d9:3c:72:e8:
         8c:0b:aa:23:61:26:b7:46:68:5b:97:1e:59:dc:01:7b:e9:7e:
         c8:53:34:9a:15:7d:d8:3d:7c:95:15:c4:74:c6:a7:fd:5b:e4:
         73:19:49:e7:a2:d2:9e:fc:0e:6d:3a:ab:cc:34:37:54:5a:6d:
         67:eb:04:dd:b0:82:61:cc:67:cd:4c:65:31:c6:cb:fe:31:da:
         78:3e:d5:56:09:ab:45:d0:e1:80:3b:b9:ae:2d:e1:b6:89:d3:
         c2:35:2e:ff:61:ea:52:f1:db:57:93:ff:f2:09:7a:ff:b6:50:
         fc:a7:8f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:02:55 2024 by rpki-client on console-fra.rpki-client.org