Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
File:                     7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft (raw, json)
Hash identifier:          3CBV7DpzydZrDKadxNTawDZ2WPGTLK2+3PYEvBxX9Tg=
Subject key identifier:   B8:15:AA:34:24:AA:14:56:E1:8B:D7:2A:13:37:8E:59:18:86:AE:1D
Authority key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
Certificate issuer:       /CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Certificate serial:       0193568A1D903F309B04691719EAE42EC874
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 01:01:52 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:52 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:52 +0000
Files and hashes:         1: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl (hash: ToPzad2ZUjAxgr+4D7utoQc9ceG0NE1x6UW/Ub9wBw4=)
                          2: sGy9ZWPRwpAGMXSBdZ0QdvYMg-c.roa (hash: ZFRo77imGJkpwXcY2RDAhhQ6L77htHkFo1Qmg6xzvlo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:1d:90:3f:30:9b:04:69:17:19:ea:e4:2e:c8:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
        Validity
            Not Before: Nov 23 01:01:52 2024 GMT
            Not After : Nov 24 01:01:52 2024 GMT
        Subject: CN=b815aa3424aa1456e18bd72a13378e591886ae1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:09:ec:9f:8f:c0:83:d0:b8:4c:bd:76:de:
                    71:11:0b:62:86:43:48:18:c4:db:3e:83:b0:95:ae:
                    ee:51:51:91:c4:d3:85:c3:b2:db:ee:73:da:3d:61:
                    aa:7d:9c:32:4c:3b:0f:a0:f0:f1:ac:eb:33:c7:e3:
                    16:3f:41:10:43:b9:e1:68:47:a7:92:2e:22:14:d9:
                    a3:cc:e4:9b:7d:54:c2:cb:ea:95:74:79:1f:04:9f:
                    90:4e:af:09:09:82:47:63:13:69:9b:df:6d:1a:24:
                    54:2c:dc:3c:61:fb:97:0e:7f:0e:4c:26:18:d4:9e:
                    78:58:91:5c:7f:46:25:7c:88:11:d2:05:0b:2a:9f:
                    54:ef:9d:9e:ab:ac:f1:76:a6:00:d6:4a:f9:d0:51:
                    41:c8:a8:21:ed:f1:d9:cc:98:d3:e9:d6:f2:5b:c8:
                    9e:90:a1:7a:c1:d1:12:13:b6:e3:6a:26:33:c1:3c:
                    9f:b0:6d:f6:5f:60:82:05:39:1b:ea:a0:2a:57:49:
                    5b:f0:b4:a2:19:41:72:37:44:c6:95:00:f3:96:a9:
                    0f:b3:62:0d:fd:94:b6:ef:be:67:b1:49:81:21:3f:
                    89:56:0f:01:92:c0:b8:e6:ac:29:af:f3:29:7b:6d:
                    cd:25:d1:3f:4b:d6:70:06:d9:36:73:07:da:d1:4e:
                    6b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:15:AA:34:24:AA:14:56:E1:8B:D7:2A:13:37:8E:59:18:86:AE:1D
            X509v3 Authority Key Identifier:
                keyid:ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9d:39:1d:6f:f0:3d:03:cd:20:aa:ef:21:a7:a7:02:7e:3f:
         17:c9:b2:03:c9:51:c1:e6:63:8a:ed:a3:49:25:52:3d:e7:76:
         62:88:73:6a:d4:32:ab:e7:98:14:50:d0:d9:50:7a:27:a7:09:
         2a:5f:3d:08:e0:0e:b4:fe:c9:0d:16:c2:91:83:05:40:41:64:
         89:45:73:56:97:31:b3:d1:b0:56:c0:5b:4b:bd:a2:54:44:5e:
         38:9d:72:88:bd:f5:55:4c:ca:d8:2e:91:7d:67:fc:77:03:d7:
         55:f5:1a:6b:09:57:e0:c0:0a:1d:bd:57:d4:59:ed:7c:a5:2a:
         ec:9c:7b:87:11:15:a6:2a:f5:a7:2e:6a:dd:cf:0d:b0:fa:43:
         ba:a6:82:f7:9d:d8:18:88:71:86:65:97:6b:cc:59:5a:19:c5:
         10:9e:c4:f6:96:7e:4f:0f:a9:0f:f9:e0:2c:1e:4a:eb:ca:22:
         e8:83:10:4f:e9:2a:c4:4a:b8:7c:20:28:43:8a:d6:65:8b:41:
         ee:22:3e:1f:8c:12:34:86:7c:86:85:f1:45:f6:6e:62:39:95:
         2d:e2:bb:66:3b:82:63:bb:7b:bb:f7:78:0f:61:f5:ad:36:d2:
         31:d9:a9:d3:81:ed:08:9b:66:0d:54:0a:4f:78:51:d9:e5:8d:
         21:08:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:01 2024 by rpki-client on console-fra.rpki-client.org