Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
File:                     hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json)
Hash identifier:          dP178jaTwM4CkQTeJ9zVg6rYCxXztyq76nXaqDkUFfI=
Subject key identifier:   1D:23:92:87:D3:3C:B2:2E:31:DE:43:63:D9:6F:29:5A:6D:A1:FB:1D
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Certificate issuer:       /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial:       019357D2608F443E644F226D74E2704023E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 07:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:25 +0000
Files and hashes:         1: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: p8H/BsG6SFh9mklAL1Q1kVwKBtVKObIg/tTlN80Q1G0=)
                          2: lw1_ynGAdW9r82HQZcMXhqMsZ04.roa (hash: RrzwRXyZ2pKzvWSYY21JYJfa9YolPOKy5aLFjgs6z7M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:60:8f:44:3e:64:4f:22:6d:74:e2:70:40:23:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
        Validity
            Not Before: Nov 23 07:00:25 2024 GMT
            Not After : Nov 24 07:00:25 2024 GMT
        Subject: CN=1d239287d33cb22e31de4363d96f295a6da1fb1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:d7:6c:59:63:cc:73:47:eb:81:22:a8:ec:
                    62:5d:47:4e:45:88:17:94:ce:56:01:97:b5:2e:8d:
                    e0:f0:72:20:0f:b4:a7:5c:8f:f8:ef:54:7b:0d:16:
                    37:26:19:5e:26:bd:cc:3e:d7:a6:97:60:a4:e1:e3:
                    eb:22:c7:15:fb:2c:58:e3:50:91:e0:9e:cd:5d:fd:
                    dc:5d:48:32:ac:ec:98:57:1b:54:d0:a0:f2:03:2f:
                    d3:00:e6:73:b7:31:2a:b5:74:65:9b:bf:74:fc:b2:
                    50:50:4b:81:21:d0:c9:5c:ac:f4:59:d3:b0:69:35:
                    64:c2:d9:28:b1:72:32:6a:52:40:be:aa:8a:b2:8d:
                    a1:c9:0a:24:d1:eb:61:d9:62:d7:6f:1e:24:0a:cf:
                    c1:b3:38:8c:59:fd:68:b7:bf:08:a1:06:69:d1:5c:
                    56:97:69:53:5d:0a:39:94:46:bf:d0:d7:38:aa:91:
                    75:1b:4b:30:25:20:7d:f1:8f:7a:1f:c5:38:c4:4e:
                    14:5e:94:fe:a7:90:9d:49:f9:e4:32:10:a3:58:18:
                    e7:d5:dd:1a:c4:40:01:f6:18:53:a5:b6:4e:89:24:
                    36:8c:d7:3f:e9:d4:55:e2:53:53:86:8a:1b:94:ce:
                    11:cf:48:0e:50:98:00:05:3b:6f:5c:77:c1:b0:15:
                    af:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:23:92:87:D3:3C:B2:2E:31:DE:43:63:D9:6F:29:5A:6D:A1:FB:1D
            X509v3 Authority Key Identifier:
                keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0a:d0:25:98:4b:fc:85:ec:ef:d3:be:72:e3:f3:9f:e7:1e:
         44:1d:ef:d6:a2:6f:76:19:97:28:b9:52:59:a7:d5:40:ca:5b:
         90:3d:81:b9:22:2e:90:7b:d1:46:c6:29:0f:9f:0a:e9:02:72:
         b4:50:08:85:2e:b9:27:93:2c:0a:08:c7:2e:bc:e2:7a:1e:1f:
         a4:c0:c8:65:d4:08:62:10:f0:de:41:0c:b0:08:4a:ab:df:b0:
         1a:8d:0e:59:e7:42:91:2e:f1:e2:a4:32:ba:6e:50:0d:f0:b4:
         57:7f:39:bf:de:56:81:22:bf:1a:49:91:83:fa:0b:99:31:25:
         2d:d1:69:b8:53:e2:57:81:77:3e:21:e9:66:bf:44:16:d6:04:
         19:ef:2a:0e:d6:e6:63:11:94:b8:45:da:46:62:3b:f7:fd:ed:
         33:e6:e8:7b:4f:0e:48:a3:b0:c1:27:47:8b:84:22:de:cd:c3:
         7b:77:b3:ba:d4:f8:d3:ae:69:b1:f1:39:86:a6:71:97:7e:56:
         f3:b1:7e:ad:1a:c1:66:0a:9e:4f:a5:29:a8:ab:39:dc:de:16:
         82:4d:8e:46:29:67:b2:bd:45:0d:4f:f9:66:eb:68:7f:4e:2a:
         1b:99:b5:af:78:75:35:15:d2:9c:27:10:f3:58:32:c7:ec:53:
         f6:5d:4f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:04:20 2024 by rpki-client on console-fra.rpki-client.org