Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File:                     cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier:          4zFzIeTn/QOWExIiFwRVR2mNSTpAzddiqo1rDN35Ves=
Subject key identifier:   4F:03:50:12:0C:B0:FF:7A:B7:4F:8D:9A:19:6E:69:6B:19:7F:77:A3
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer:       /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial:       019369D9C7524A10112CDA8DD94E17292BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number:          130D
Signing time:             Tue 26 Nov 2024 19:01:40 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:40 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:40 +0000
Files and hashes:         1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: ZBtaOzpv3ef23YaChjq9Wra1Eman+EuFpxZqJAA3SVA=)
                          2: zN-ix2qvaikqVPZ2hvaxQIOHJug.roa (hash: RPr6nywouYPt03yWgj3dQic8/BE30DIEIiQ81CCoM6Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:c7:52:4a:10:11:2c:da:8d:d9:4e:17:29:2b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
        Validity
            Not Before: Nov 26 19:01:40 2024 GMT
            Not After : Nov 27 19:01:40 2024 GMT
        Subject: CN=4f0350120cb0ff7ab74f8d9a196e696b197f77a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4c:6a:b4:d1:83:60:86:df:53:fb:a4:59:c8:
                    8e:64:a6:ff:80:1b:d2:c2:0a:f0:33:8b:a4:b9:dd:
                    af:d1:e9:48:28:63:2f:ab:eb:9b:00:36:89:d4:e3:
                    0d:eb:fb:59:f2:66:54:f7:15:bd:e5:93:2d:f9:1a:
                    2a:ac:37:69:13:99:a3:54:4d:cf:3c:6d:d5:5c:d6:
                    d9:33:71:0f:67:f4:02:ee:91:1c:4e:bb:86:05:f4:
                    ac:ff:78:53:07:4c:be:6a:44:c2:38:63:48:e9:18:
                    33:39:e4:f7:37:4a:21:cf:d0:65:89:ec:30:3b:d3:
                    1c:f8:cd:bc:93:13:af:d3:11:b7:96:3d:07:80:3a:
                    0d:1d:e2:4f:2a:bb:e0:1a:30:5a:e0:51:00:d8:1c:
                    d7:59:f8:b4:e8:8e:de:f2:8e:28:2b:46:42:dd:5a:
                    7f:75:77:d0:c1:13:c8:eb:68:a7:ba:5c:a3:d8:a5:
                    93:71:f0:bb:95:9a:29:79:78:55:24:32:6b:70:02:
                    1f:a2:af:ae:ef:79:75:e0:06:e6:0c:69:fb:e4:b5:
                    87:00:2a:f8:d9:68:21:34:b1:ad:f2:61:d8:60:7a:
                    9c:05:96:aa:ef:29:20:c7:31:0e:39:be:78:a4:cd:
                    27:7f:9a:d3:d2:42:0e:6c:e3:c6:80:e2:f6:91:08:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:03:50:12:0C:B0:FF:7A:B7:4F:8D:9A:19:6E:69:6B:19:7F:77:A3
            X509v3 Authority Key Identifier:
                keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:30:3f:64:f5:88:6b:42:a1:13:68:03:03:9b:66:46:39:36:
         ac:98:28:aa:f7:cf:48:d1:76:1d:a8:a7:5e:1e:e1:04:33:0f:
         89:e0:54:aa:ad:89:50:64:11:ca:09:0c:96:e6:77:28:60:d8:
         a2:81:cd:f4:25:6b:eb:8c:b0:a2:d1:11:2e:e9:ed:94:ec:85:
         0f:ab:56:98:0a:c4:46:f7:66:00:6b:bb:33:63:41:5c:15:2b:
         86:4f:56:51:a3:17:9d:d7:39:45:66:70:36:89:d3:33:33:da:
         e3:bc:51:52:66:93:30:43:29:a8:c8:98:45:74:25:45:4a:1b:
         1a:18:ae:65:e2:8d:ed:87:e2:78:90:ef:b8:79:3f:2f:a9:eb:
         5a:6a:36:2a:f5:18:3c:1f:cd:4e:ab:46:18:35:a0:13:2d:e9:
         f9:f1:fb:71:5c:c1:80:49:b1:8f:78:9b:98:52:19:77:19:6f:
         8c:5d:cf:10:b6:b0:13:fe:b5:1c:6f:4a:35:57:11:da:17:92:
         98:1f:87:fa:72:a3:90:ce:cb:e2:d1:3c:bc:d7:4e:b2:a7:98:
         5f:e4:a1:05:3f:7b:3f:76:c9:7e:17:9c:9a:e6:57:81:ee:99:
         85:fa:be:a3:67:90:9a:17:70:da:3b:41:80:f6:f3:d6:4b:a2:
         4e:0f:c9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:48:44 2024 by rpki-client on console-fra.rpki-client.org