Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
File:                     acl31Fwp2BvZI_3rHwkv80ZE4zw.mft (raw, json)
Hash identifier:          MXX18UyICFP8TYdHxxg3KDvI2IqBlPDh2B8cc4jVCw4=
Subject key identifier:   1F:6E:5E:8F:90:57:06:8E:8F:9F:C5:48:8F:5D:B4:F3:F1:77:34:DE
Authority key identifier: 69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C
Certificate issuer:       /CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
Certificate serial:       01936669E311FC8DBD76616A58092E065DAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 03:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 03:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 03:00:35 +0000
Files and hashes:         1: acl31Fwp2BvZI_3rHwkv80ZE4zw.crl (hash: yu5p+IY5D4jLuUv6sIAG+hde59jOjnAWv2/uODMUg6I=)
                          2: h2PULX7R1BdW-6e43RXMa5mOIv4.roa (hash: aJuQxG4obvcbEKw139Rv5Dqt00M1WHpnK4EnA89b/8s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:69:e3:11:fc:8d:bd:76:61:6a:58:09:2e:06:5d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69c977d45c29d81bd923fdeb1f092ff34644e33c
        Validity
            Not Before: Nov 26 03:00:35 2024 GMT
            Not After : Nov 27 03:00:35 2024 GMT
        Subject: CN=1f6e5e8f9057068e8f9fc5488f5db4f3f17734de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:03:13:f7:40:8c:5f:ff:ca:cd:d1:7f:a5:d4:
                    38:7c:8c:0a:20:25:d9:ce:63:a0:47:b4:07:d2:ef:
                    de:6e:4b:f0:12:00:ff:36:a4:82:8d:3b:80:36:a4:
                    13:31:06:49:52:69:7a:d6:25:ca:7e:a5:41:c0:9c:
                    0a:f3:fb:4f:59:e9:5d:ea:83:e3:48:f4:7e:a8:f6:
                    8a:59:17:b3:d2:0b:16:8e:28:09:e9:be:f3:68:4c:
                    dc:d1:a7:e7:15:ab:d5:a7:f0:9e:3c:e2:c0:62:5c:
                    20:be:4a:7a:c2:12:9d:95:9f:e3:4a:97:65:75:1f:
                    86:4f:7d:ae:57:40:b5:44:5c:93:eb:0a:e6:1f:f6:
                    14:ae:e0:a6:58:af:70:e8:71:4b:67:6b:7d:72:fb:
                    70:6d:41:87:25:9b:07:43:9c:bb:96:f8:23:14:67:
                    6c:b3:d1:7d:a4:bd:92:86:71:96:6b:38:04:92:89:
                    f7:3d:a8:4b:15:be:b9:9e:2a:0b:69:99:25:b7:2d:
                    cc:f7:55:f3:0a:fb:a7:82:3f:8c:00:f0:d4:f6:45:
                    d9:f5:bc:3d:75:bb:03:7d:5e:5e:70:54:e0:2a:76:
                    57:17:8e:24:3b:fd:2a:d1:5e:ec:93:49:c3:28:27:
                    97:be:2a:04:f2:f6:0f:96:ad:9d:be:d1:cd:a2:f3:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6E:5E:8F:90:57:06:8E:8F:9F:C5:48:8F:5D:B4:F3:F1:77:34:DE
            X509v3 Authority Key Identifier:
                keyid:69:C9:77:D4:5C:29:D8:1B:D9:23:FD:EB:1F:09:2F:F3:46:44:E3:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acl31Fwp2BvZI_3rHwkv80ZE4zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1c9ddc-dc4d-4571-82db-ce53526e6699/1/acl31Fwp2BvZI_3rHwkv80ZE4zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c3:17:5a:34:84:d9:09:a5:ee:c1:13:93:62:32:58:08:a6:
         85:96:0c:69:39:10:f9:0c:53:e3:e4:91:32:8e:2e:9e:34:58:
         47:bf:8d:83:9c:2d:21:85:58:ed:c2:5e:e5:31:bf:b3:9b:fa:
         23:2e:73:7a:31:6a:62:89:82:ae:5b:d0:56:1c:86:65:bc:e5:
         08:cc:e4:fd:91:90:81:ad:96:a5:18:fd:62:3a:09:d6:31:95:
         74:1e:37:b7:06:eb:02:b2:89:6c:00:06:e8:d2:ba:5c:ac:96:
         1b:92:eb:97:ae:37:eb:a5:26:15:bb:62:b6:f5:89:47:10:1e:
         63:71:2d:01:30:1e:c3:31:f3:5a:81:4f:6b:37:83:89:48:e4:
         9e:fb:83:a1:99:9a:c6:dd:dc:42:df:d6:f5:fd:ad:bb:af:96:
         db:4c:c3:ae:b3:8e:3c:43:8a:55:f3:ee:5b:a7:40:07:ae:07:
         15:e5:b5:c1:06:ca:16:8d:c3:23:a1:59:f3:92:63:11:e7:39:
         79:31:94:bd:6f:14:d0:cc:c9:db:5c:ba:ca:5d:f8:f7:b4:c8:
         54:a6:20:84:58:01:47:08:19:c8:9f:78:4c:57:ba:5c:89:81:
         85:91:fa:28:58:37:da:d5:9b:74:14:39:d0:45:d4:b7:eb:d4:
         7e:55:ac:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:17:17 2024 by rpki-client on console-fra.rpki-client.org