Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
File:                     fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft (raw, json)
Hash identifier:          YoQWegBWWR/d6Rv1i68N3hWQuhLpvaqBk9+TUlQ4LtY=
Subject key identifier:   AA:E6:13:CA:66:90:98:67:E9:7A:8C:B0:96:EC:A9:F9:91:88:B7:8C
Authority key identifier: 7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
Certificate issuer:       /CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Certificate serial:       019358092E09C262CDDF69B06EA9C38A9470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
Manifest number:          1375
Signing time:             Sat 23 Nov 2024 08:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:16 +0000
Files and hashes:         1: fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl (hash: 6aDqPBxtUKf+R/aiiKEml2aUdgtutqJdNfb/0Bp8rug=)
                          2: szsLsKW-ho70NCLBcHWBtgKbois.roa (hash: 7ib39M7cjQwkifKKn0nHl1cRT3RSj7kcS1UZ4kKRd24=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:2e:09:c2:62:cd:df:69:b0:6e:a9:c3:8a:94:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
        Validity
            Not Before: Nov 23 08:00:16 2024 GMT
            Not After : Nov 24 08:00:16 2024 GMT
        Subject: CN=aae613ca66909867e97a8cb096eca9f99188b78c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0f:6d:d4:65:cd:5c:d4:77:8d:48:79:b5:42:
                    8c:7c:2b:d9:34:cf:6c:8e:5f:35:bc:95:a8:34:20:
                    4b:eb:b4:f6:f5:05:db:ff:2d:0a:88:09:fe:a4:39:
                    a6:fa:00:d9:2d:d9:8f:36:b3:3f:ec:4d:10:05:23:
                    c3:32:01:9d:0b:23:1b:81:09:58:6c:7c:8e:8b:70:
                    01:55:60:c8:40:a3:42:f4:18:10:8a:50:0e:3e:74:
                    cc:d2:f8:9e:45:c3:1a:b1:f0:e3:03:be:49:45:42:
                    dc:01:aa:74:cf:be:ef:bc:8f:04:8a:06:72:05:4f:
                    ce:3e:09:3c:ee:76:33:06:f5:c9:92:a0:2a:08:c9:
                    eb:8a:1d:a8:c3:73:25:fb:27:7d:c1:b8:79:b8:98:
                    44:7b:ec:59:c9:93:60:fc:70:97:7c:a6:03:30:bc:
                    01:a8:2f:55:18:a2:2f:d2:14:62:8d:17:54:da:83:
                    a2:ee:d2:80:7d:fd:52:79:fc:37:de:78:ae:68:2e:
                    ec:91:24:e0:a6:52:4b:b8:9d:55:2a:17:ec:62:76:
                    be:3c:db:9f:63:46:d5:45:c8:9d:e1:c8:c1:95:70:
                    02:a8:05:7c:3d:33:20:1b:ed:88:d4:24:fd:7a:ab:
                    e4:c0:12:b9:8f:42:9c:26:01:f3:7f:6b:fe:32:23:
                    88:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E6:13:CA:66:90:98:67:E9:7A:8C:B0:96:EC:A9:F9:91:88:B7:8C
            X509v3 Authority Key Identifier:
                keyid:7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a8:4f:2d:0e:92:be:55:81:aa:e3:b7:ec:98:da:ce:88:75:
         b7:e9:90:c5:5c:b6:51:c3:fe:b0:c9:75:58:b0:0f:26:a5:46:
         d0:ff:74:d0:5f:7e:fa:35:71:6f:fd:0e:94:bc:82:8f:e6:81:
         69:67:28:29:4b:8c:10:c2:e2:13:88:92:5f:f3:33:7b:89:0c:
         5f:0d:4e:d7:32:2f:7c:53:3f:3b:09:53:6c:e8:a6:97:df:90:
         f5:6c:8b:7e:ef:b9:0a:25:48:1d:71:81:7a:3b:f3:52:61:51:
         32:b6:20:37:07:87:db:be:af:3d:be:58:3b:6e:54:c7:46:f6:
         14:c4:d3:01:6c:9e:b4:25:49:32:70:fc:f3:47:d1:99:fc:f4:
         75:fa:47:d4:48:72:0e:e3:a7:10:f8:a4:27:08:d4:b9:28:8d:
         b9:80:b9:d3:b2:cb:d1:5b:bd:97:93:1f:ef:12:44:1d:76:29:
         b7:36:68:80:de:9f:9b:fe:bc:e2:77:cc:59:7e:2d:46:b1:4e:
         72:e0:48:6c:e0:3a:60:c1:d7:c4:5c:5c:a6:85:71:19:75:d5:
         5b:90:7d:42:97:16:62:5c:5d:21:c3:93:c0:c4:8b:03:5c:e5:
         e9:02:92:d3:6c:4a:65:1d:a8:5c:4c:8e:d7:af:3c:6f:22:7e:
         9a:a9:c4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:03:35 2024 by rpki-client on console-fra.rpki-client.org