Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File:                     _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier:          Ji7Kjo7KsNqrlmeOhiinF5eWKf15mjyOdhWXC/l8NIo=
Subject key identifier:   33:01:85:5C:91:B3:68:2C:85:CF:3F:DB:B0:2F:FA:92:2C:82:1E:D2
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer:       /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial:       019360318B3186E2D9EE04E721895E4AD66F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number:          0D18
Signing time:             Sun 24 Nov 2024 22:01:19 +0000
Manifest this update:     Sun 24 Nov 2024 22:01:19 +0000
Manifest next update:     Mon 25 Nov 2024 22:01:19 +0000
Files and hashes:         1: 2wtNxLssaja3WyZdSwaWYv-PRHM.roa (hash: LFkD60r7wS0DtPuypl8W+PsJg4syL/ha84vB8N9yR90=)
                          2: R1IKbD8qNAXTnZFQk4Of2QbsMck.roa (hash: Uyipa1uQKDAQIMNIubZcAXH8BZ34IaI7hgUcKHS/UDg=)
                          3: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: RJknvMaIxp1pnI7oeOAreuP2SIUfRrs3gkCwHZ/OTkY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:31:8b:31:86:e2:d9:ee:04:e7:21:89:5e:4a:d6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
        Validity
            Not Before: Nov 24 22:01:19 2024 GMT
            Not After : Nov 25 22:01:19 2024 GMT
        Subject: CN=3301855c91b3682c85cf3fdbb02ffa922c821ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:93:2f:98:e2:24:ed:bd:88:b8:63:91:bc:f8:
                    05:e0:3b:ce:f7:03:12:22:c6:8d:a5:8e:53:eb:11:
                    0f:6a:84:96:f3:3d:86:8f:df:ad:cf:6e:58:7a:d7:
                    e3:ea:1c:df:aa:40:fe:42:b8:2d:d0:fd:1b:07:8b:
                    26:6c:05:4e:06:58:b1:76:fb:69:23:1c:26:06:3e:
                    06:9c:eb:d1:77:bc:87:51:71:a5:90:00:0f:70:d4:
                    7c:df:37:50:89:4b:2c:ca:01:53:b6:e2:86:b6:72:
                    f1:65:e8:b0:d6:1f:ed:ed:44:2c:01:6d:14:87:fb:
                    c6:86:5d:9d:1e:c1:4d:db:b0:2d:bf:0a:0e:94:ef:
                    c3:d4:ef:22:e0:9d:aa:1d:e5:49:66:eb:48:df:26:
                    e3:5a:b6:80:6f:6b:2e:72:e7:c3:26:9d:13:4b:06:
                    66:28:f8:32:56:09:a3:c8:37:15:29:66:6d:1d:c8:
                    49:bc:11:cb:ef:df:d0:b5:5e:08:ff:87:60:b5:eb:
                    4b:5d:ff:ac:37:79:e7:61:88:8e:87:b2:bc:15:6c:
                    c6:39:4f:6b:6e:0c:13:b8:51:63:a7:1c:13:a1:ca:
                    20:a2:21:41:9f:ee:07:f4:40:5c:a8:0c:08:c0:d8:
                    ae:d3:07:51:f1:3e:a3:e5:e3:34:6b:19:04:32:0c:
                    7c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:01:85:5C:91:B3:68:2C:85:CF:3F:DB:B0:2F:FA:92:2C:82:1E:D2
            X509v3 Authority Key Identifier:
                keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:91:a8:ae:43:8a:93:55:98:f6:af:4f:22:4f:0a:8f:07:82:
         d7:4d:10:b6:d6:13:95:68:a8:77:ea:7f:ae:0f:da:e9:6f:83:
         ca:43:cd:69:52:bb:3e:5d:41:d7:00:55:a7:50:93:06:cb:64:
         c7:87:16:1a:6e:98:7f:83:01:de:d4:b3:e7:cb:5e:35:90:b1:
         91:49:3e:2a:fd:25:e3:77:7b:95:ca:97:b5:6d:fe:cc:d6:94:
         da:20:db:46:13:83:02:3e:2f:1d:cd:4f:9c:75:76:67:84:14:
         11:f9:d0:e2:01:5e:8e:b3:7c:38:58:90:aa:07:83:47:ea:55:
         ca:d7:b8:b2:ce:28:eb:82:9c:d7:a4:1f:3f:cd:e9:15:58:81:
         ee:1d:e8:82:c4:97:a6:a3:a2:95:f0:c6:c8:79:f9:9b:fe:34:
         37:07:03:c4:4e:04:48:c8:2c:53:c6:72:2e:10:9a:68:10:b9:
         5c:d8:44:5a:6f:96:56:92:7d:8b:84:e7:1b:3f:99:19:cb:ad:
         bd:13:ea:d5:3f:48:cd:f6:b6:dd:45:fb:53:62:3f:05:3c:1a:
         30:21:bf:f5:18:d3:07:5a:63:b3:bd:b5:f8:3c:59:ff:5c:e5:
         ef:07:c0:14:be:9d:ee:da:02:49:f2:3b:75:78:d6:3f:f9:54:
         08:44:aa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:26:07 2024 by rpki-client on console-ams.rpki-client.org