Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
File:                     e1dU5NIIxkNfGr7JN83iAAkgTcA.mft (raw, json)
Hash identifier:          nd/BKeGFz1U/4G5HC2T0cxuZkid7w/CMfG4H8pwaxl0=
Subject key identifier:   9F:D9:61:8E:6E:06:CF:E1:50:FE:E6:F8:22:66:94:0E:BF:0A:F2:34
Authority key identifier: 7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0
Certificate issuer:       /CN=7b5754e4d208c6435f1abec937cde20009204dc0
Certificate serial:       019358771CFE47A95F877A4870FCEF722D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
Manifest number:          07CD
Signing time:             Sat 23 Nov 2024 10:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:21 +0000
Files and hashes:         1: JIJFa_Jxmp6PYMq7HDauxbqhGYc.roa (hash: OaBHR3SUrA4/0zhvl446eEffSXuFEg9fTcuM1m//qXg=)
                          2: e1dU5NIIxkNfGr7JN83iAAkgTcA.crl (hash: H9OfHy8gnYRu0gVU5lYTGnYHpSLXid5WvsK4pPLXaGo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:1c:fe:47:a9:5f:87:7a:48:70:fc:ef:72:2d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5754e4d208c6435f1abec937cde20009204dc0
        Validity
            Not Before: Nov 23 10:00:21 2024 GMT
            Not After : Nov 24 10:00:21 2024 GMT
        Subject: CN=9fd9618e6e06cfe150fee6f82266940ebf0af234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:9b:b8:c2:5b:89:e3:49:58:64:32:a0:6f:
                    52:68:2a:7b:28:be:4a:7f:1e:8f:0f:62:40:9e:75:
                    17:98:c7:4c:41:c3:06:48:48:da:f0:ca:c4:1b:e1:
                    f3:08:85:a7:80:6b:67:47:76:13:c3:cd:b4:2d:83:
                    c2:f3:32:96:fe:c0:5e:a7:b2:8c:20:29:0a:41:2d:
                    30:7d:87:a7:da:37:f7:7b:e7:08:46:f5:e7:f0:a2:
                    5c:22:9f:0d:d7:3a:98:be:7f:b7:36:87:69:13:d7:
                    4b:72:e5:28:0e:14:c3:5f:5b:da:fc:99:ce:ce:48:
                    21:97:e0:fb:db:8e:99:2e:43:ca:61:f9:f2:57:59:
                    3a:0c:7c:0b:22:c2:9a:bc:95:8c:eb:a2:a8:25:a2:
                    1d:a8:22:2f:2e:8a:04:25:7f:4f:e0:19:bb:14:02:
                    51:0f:cd:26:be:07:63:d2:f5:18:91:25:10:7c:ea:
                    5a:07:a6:ac:1c:71:49:cc:a3:3f:63:a7:bc:61:55:
                    4f:d7:08:6c:33:d2:1c:31:db:3c:5b:e1:ae:b8:9e:
                    b4:2e:17:e8:2d:21:73:66:3f:f0:52:99:e2:d7:0f:
                    be:4b:b7:8e:ba:7f:13:bc:bc:32:3c:39:37:35:34:
                    9d:b2:86:48:26:2c:1d:bb:3c:6c:36:5e:c2:04:27:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D9:61:8E:6E:06:CF:E1:50:FE:E6:F8:22:66:94:0E:BF:0A:F2:34
            X509v3 Authority Key Identifier:
                keyid:7B:57:54:E4:D2:08:C6:43:5F:1A:BE:C9:37:CD:E2:00:09:20:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1dU5NIIxkNfGr7JN83iAAkgTcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1dd1ac-4a87-4bf1-8d52-fd493c6a5c76/1/e1dU5NIIxkNfGr7JN83iAAkgTcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:27:72:dd:d7:58:88:f9:f8:59:c2:a1:bf:4f:cc:84:b8:e2:
         76:f7:01:2e:be:5c:13:15:35:c7:0b:e0:cf:06:de:d2:bc:0b:
         a3:d9:a8:e7:9f:8d:e3:51:e3:05:69:a5:9f:d9:7c:ff:ff:c9:
         43:fa:88:c9:67:fb:56:e2:0d:e6:6b:2b:24:a3:1f:fb:ef:0b:
         66:20:1d:a8:3c:26:65:f1:3c:cc:60:0a:bb:b4:f6:a3:76:79:
         2e:85:24:07:df:9d:35:74:1f:ac:72:82:7a:9e:ab:bb:bc:c8:
         f5:67:e4:d2:67:7f:9c:29:9d:36:4b:19:4a:51:95:0f:3c:0a:
         b8:b5:59:a2:de:0e:4b:9b:45:ad:2a:6d:3d:d5:0b:3f:24:50:
         a0:3f:f9:43:f5:fd:5c:6d:2c:d5:09:1b:79:1b:4b:39:cc:b6:
         74:40:ea:80:21:b5:97:0b:b6:d6:2e:01:44:8b:b5:ff:d6:a5:
         e2:2d:0f:1e:ae:4a:9b:48:4e:79:fd:7e:42:ee:46:74:18:dc:
         f3:68:d5:ad:4b:e3:b2:8c:72:ae:c1:6c:dd:7a:62:14:c8:ad:
         d2:7c:71:23:fa:47:e6:59:72:b0:3c:59:5d:26:17:2b:d6:90:
         87:f5:50:5b:29:92:08:e8:4c:51:71:95:d9:33:1f:71:68:f9:
         77:1d:b9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:03:30 2024 by rpki-client on console-fra.rpki-client.org