Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
File:                     FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json)
Hash identifier:          +wSag7IQHBhmWnKM1OWXTyG6VVyVgnpu+SGDzAEw6f8=
Subject key identifier:   C2:4C:7B:57:7F:36:3F:C5:60:57:F5:46:20:D3:A7:36:A7:BD:03:5B
Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2
Certificate issuer:       /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
Certificate serial:       01935689B3C148046D25DC69A47286F71FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 01:01:25 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:25 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:25 +0000
Files and hashes:         1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: FYqWb0AjGxMHLL38rK8vjxIx/tYg3c+FCjoy1YBdXSw=)
                          2: WZUlngr8oh2MDpS3z8Lr0vIPpNE.roa (hash: mXkDEnevtqaxBkxPQmdjOCQyenM5QPfvBlK9dVoHv9s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:b3:c1:48:04:6d:25:dc:69:a4:72:86:f7:1f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2
        Validity
            Not Before: Nov 23 01:01:25 2024 GMT
            Not After : Nov 24 01:01:25 2024 GMT
        Subject: CN=c24c7b577f363fc56057f54620d3a736a7bd035b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:3f:9e:c8:f5:7d:17:cc:8c:aa:47:a6:6f:
                    b3:ee:bc:52:a8:a1:81:45:b1:47:5b:0a:78:75:33:
                    a8:05:d4:f2:3e:af:69:47:ca:18:70:df:0e:1e:39:
                    21:ba:8b:4d:12:94:58:f2:81:dc:b8:17:6b:ae:7e:
                    9d:10:8a:82:ed:08:8f:64:e7:54:f1:ed:7d:32:56:
                    1e:28:78:35:19:22:a5:35:3c:20:10:1f:4c:dc:03:
                    17:40:83:11:84:69:ed:cf:ca:e7:62:d8:38:3c:2a:
                    5b:cd:82:2f:8b:e3:e6:d9:2e:6c:fc:08:65:90:ef:
                    d0:a4:c4:55:9e:87:c7:dc:6a:3e:06:50:91:49:56:
                    aa:b4:70:2c:17:75:c7:27:b4:9d:5f:bc:b5:2e:87:
                    c0:7c:e3:db:52:8f:8f:81:f4:3c:56:4f:d6:11:8c:
                    16:60:9f:65:b8:07:4f:ac:54:f5:c3:95:24:4c:a9:
                    35:b5:45:7d:d5:bd:f7:c0:4d:da:a5:51:0f:50:e7:
                    98:77:ea:a1:f6:04:6b:10:88:82:8d:b6:73:4d:ae:
                    92:55:7c:3b:46:98:4e:99:31:6f:ce:8c:0c:fa:bb:
                    79:9e:57:c6:d6:8a:6c:fb:21:b1:20:90:7d:2b:d7:
                    11:82:75:a2:18:78:9a:4a:3d:0d:b8:f2:c5:87:76:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:7B:57:7F:36:3F:C5:60:57:F5:46:20:D3:A7:36:A7:BD:03:5B
            X509v3 Authority Key Identifier:
                keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:4f:8c:b5:db:fa:23:97:ec:aa:9e:65:e4:d8:02:be:65:b9:
         50:08:be:a7:8e:a0:09:6e:f6:1f:67:4d:b9:29:41:60:bc:e1:
         90:07:9c:17:f5:5e:31:ba:20:88:f2:c8:6e:1c:27:d6:0c:d9:
         81:b4:a8:ad:63:9f:64:2d:1d:07:07:90:a5:2a:cf:b2:ca:bc:
         bf:1d:f1:c2:a6:93:74:51:20:58:5c:42:7f:20:76:7c:7a:3c:
         5e:19:9f:2f:3e:78:35:cb:a0:20:c0:a4:48:74:c4:80:06:7d:
         e7:e2:3a:ab:9c:fe:88:3f:8b:ff:1f:9a:d0:fb:87:8a:a5:f7:
         c2:03:a5:94:ba:a1:0d:b6:5a:16:82:43:c5:16:2b:0f:2c:e8:
         c4:b4:7b:96:68:35:3b:95:ec:ae:23:7d:cf:7f:ec:ac:7e:06:
         dd:0c:a5:60:c2:53:a4:91:73:6d:69:38:29:83:f3:c9:e4:0f:
         63:6d:32:fe:48:41:25:8c:6d:76:53:9b:26:24:5f:89:d2:20:
         f9:bf:6a:58:60:bc:68:64:96:78:75:82:05:d8:48:53:f1:9d:
         36:51:17:14:bb:b0:f0:7f:da:c1:da:83:3f:60:a2:4c:74:27:
         53:58:68:d8:0b:ca:ff:d7:ad:85:2d:c1:47:9d:98:1a:83:25:
         de:c5:47:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:44:43 2024 by rpki-client on console-ams.rpki-client.org