Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
File:                     V7u8R7HGflV76rDyxtGL8CbDBuA.mft (raw, json)
Hash identifier:          +s4l/f2hPmBsxa3be3ZMHkm52S1MaqVk65o3ewyTSmY=
Subject key identifier:   84:1F:C1:A4:3F:26:A1:08:0A:AF:BB:8B:11:BC:48:1A:4F:6B:9E:27
Authority key identifier: 57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0
Certificate issuer:       /CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
Certificate serial:       019369DAEC8075BA8B564E85821233B2BA30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
Manifest number:          0338
Signing time:             Tue 26 Nov 2024 19:02:55 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:55 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:55 +0000
Files and hashes:         1: V7u8R7HGflV76rDyxtGL8CbDBuA.crl (hash: PAO5CcknRGAjwJ/GT+wcHMBpgXsyN3UyuyzYymvtwL8=)
                          2: v8rIOzQceuRKRrfsMOd66r-PnIU.roa (hash: Dr/pFIFe7azFtmHWf/IjDcTQJGpf9sCP+iHJznDMwCM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:ec:80:75:ba:8b:56:4e:85:82:12:33:b2:ba:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57bbbc47b1c67e557beab0f2c6d18bf026c306e0
        Validity
            Not Before: Nov 26 19:02:55 2024 GMT
            Not After : Nov 27 19:02:55 2024 GMT
        Subject: CN=841fc1a43f26a1080aafbb8b11bc481a4f6b9e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:82:e2:22:e9:34:96:ee:ed:df:aa:19:8c:be:
                    d9:04:06:0d:97:e2:e5:79:d7:58:cb:f7:f3:57:92:
                    80:c6:01:48:22:89:b2:12:0b:9a:ea:bc:83:48:15:
                    6f:e5:80:c9:8d:2e:fa:d5:4a:ef:cc:19:45:04:90:
                    6b:24:37:ff:02:f6:97:85:77:43:3d:fe:09:ed:94:
                    a0:67:f8:3c:9f:19:a2:c0:43:62:cd:c0:37:7b:72:
                    73:fc:be:ea:3d:fb:54:d7:4b:b4:5a:64:5f:6d:81:
                    83:a1:8a:6a:eb:b2:d0:90:57:47:67:2d:ae:93:48:
                    fa:7b:6a:b2:79:c0:3e:f5:8d:b2:14:fb:8f:1f:ed:
                    ea:19:15:3e:6b:29:ba:b6:b5:e2:7c:f7:21:34:73:
                    5f:fa:45:8b:bf:dc:d2:b9:0c:b1:89:a7:ec:c0:17:
                    b1:15:62:10:fe:9b:9e:3c:c9:8b:f0:a3:54:99:8e:
                    31:87:59:da:a2:1d:7a:8e:04:89:eb:3a:71:82:f8:
                    51:29:7a:31:10:f8:ce:2c:38:2d:20:a9:cc:34:bf:
                    c2:35:66:cb:4c:c3:6f:35:b0:0c:27:80:aa:d5:9e:
                    7a:d5:c8:9e:d5:03:81:de:b1:e2:81:68:a4:e4:7b:
                    64:db:fb:75:40:fc:ec:fb:b2:c4:32:c3:b3:81:f9:
                    20:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1F:C1:A4:3F:26:A1:08:0A:AF:BB:8B:11:BC:48:1A:4F:6B:9E:27
            X509v3 Authority Key Identifier:
                keyid:57:BB:BC:47:B1:C6:7E:55:7B:EA:B0:F2:C6:D1:8B:F0:26:C3:06:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7u8R7HGflV76rDyxtGL8CbDBuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fef13d-8b98-451d-8e01-b7b3affc6ec9/1/V7u8R7HGflV76rDyxtGL8CbDBuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:67:4c:46:ae:f9:35:1c:99:8c:ca:7a:38:a8:5a:f5:1c:af:
         56:e1:0f:94:1d:9c:49:f3:a0:07:c7:4c:6f:19:d7:6b:0a:fb:
         ca:6d:50:2c:c2:7d:db:28:6a:ce:77:f7:dc:82:fe:49:0a:7d:
         7f:1e:0c:70:dd:27:cb:b0:27:2c:aa:f9:a3:65:0b:71:ec:14:
         a1:9b:e2:b8:67:82:a3:c6:dc:4d:9e:c9:fa:11:eb:22:d7:b5:
         e8:60:20:17:86:2e:69:2a:2e:33:ac:23:d2:67:dd:64:07:a3:
         e7:1e:1f:bf:82:c9:f9:67:41:d5:0d:e3:b3:6c:0b:7a:58:42:
         de:4d:f7:e8:93:e7:bb:d9:a0:3f:9d:3a:05:58:65:87:6a:a2:
         a7:e4:e3:d0:a2:63:2d:57:bc:b2:44:bc:5b:fe:25:11:5a:78:
         77:34:32:52:b6:5d:85:ca:c0:0b:f7:c1:44:54:5e:04:a7:44:
         f5:48:23:76:9d:45:97:b8:5c:7e:fc:44:85:3e:97:b3:f2:14:
         b5:35:8c:90:d5:11:a9:15:1e:93:d5:e4:8d:40:28:81:e5:ae:
         2c:4f:bc:9e:40:8e:2d:0b:02:a8:45:5f:67:5d:62:04:a6:65:
         22:04:c1:14:19:65:5a:f3:04:04:c7:48:84:96:47:25:fb:c9:
         c2:92:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:48:27 2024 by rpki-client on console-fra.rpki-client.org