Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
File:                     _z73u2pGuvTbG6633ySkDB1MFU8.mft (raw, json)
Hash identifier:          PjxdoZgZ0Jv3mcFsL9V7up5JjOUXCxfhD69t1UZ9Ifo=
Subject key identifier:   18:FA:FF:63:CA:97:2C:00:EE:51:A9:66:CA:EE:E9:CF:02:AB:5A:1E
Authority key identifier: FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F
Certificate issuer:       /CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
Certificate serial:       01936669ED26475D9D085C575960B59120C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
Manifest number:          26
Signing time:             Tue 26 Nov 2024 03:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 03:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 03:00:38 +0000
Files and hashes:         1: _z73u2pGuvTbG6633ySkDB1MFU8.crl (hash: ft8drg4yUokOuQAi4DBgoIBF+0Pnt4SFfh8U3GOwKSo=)
                          2: yZF67enWwDvbj1zZccQSBqtdZXM.roa (hash: Um93McWIpj+jvYBcenulJJzqnVJqQUWtv9vVh70oyOE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:66:69:ed:26:47:5d:9d:08:5c:57:59:60:b5:91:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
        Validity
            Not Before: Nov 26 03:00:38 2024 GMT
            Not After : Nov 27 03:00:38 2024 GMT
        Subject: CN=18faff63ca972c00ee51a966caeee9cf02ab5a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:76:b5:86:ac:85:2f:39:a0:41:29:8d:5a:11:
                    21:b8:fb:b3:76:6a:3d:2a:f0:5e:ab:77:c6:75:a2:
                    e6:44:b0:a2:97:66:79:23:34:6f:d4:ea:50:d8:c1:
                    af:4d:9b:3e:dd:c5:bb:e8:cb:fa:3b:5c:0c:25:0d:
                    c8:33:62:a2:be:e2:a8:68:6d:10:0f:25:6d:16:ec:
                    36:9a:ea:fb:64:ba:48:95:96:c6:18:ab:29:4b:46:
                    e7:a0:bd:17:ec:af:1d:d6:d1:f4:6f:e5:e8:42:83:
                    23:19:e5:95:65:f3:a1:08:1e:3d:44:14:24:f4:5d:
                    7d:97:08:0b:bb:77:0e:8c:c7:87:36:77:9e:46:9b:
                    47:80:76:ca:02:64:fb:ef:06:61:67:92:04:57:bc:
                    cf:f8:df:de:28:25:3f:50:59:45:b1:e1:f1:af:c4:
                    0c:db:70:9b:76:21:26:96:87:90:0e:92:72:25:d0:
                    1d:23:e5:a9:39:cd:bf:c9:fd:66:57:ae:a0:a7:87:
                    d6:88:7d:19:fc:6f:00:44:90:42:79:51:14:be:05:
                    a4:e8:3c:bd:51:56:e0:f6:ac:5b:21:74:ed:2c:3d:
                    9b:bf:a1:38:74:4b:ee:aa:ac:bd:46:99:72:59:36:
                    8f:a7:ea:5b:f6:8d:e1:59:58:7f:b3:e6:e3:46:b0:
                    eb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FA:FF:63:CA:97:2C:00:EE:51:A9:66:CA:EE:E9:CF:02:AB:5A:1E
            X509v3 Authority Key Identifier:
                keyid:FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7a:a0:02:d4:14:2e:86:44:16:e1:e4:b7:e0:a2:b3:a5:cd:
         5e:90:47:90:b3:74:22:6b:c4:b0:77:e8:2a:c1:86:f8:93:5e:
         d0:53:dc:33:80:e7:dd:9f:e2:dc:45:5b:1a:95:5e:d5:6f:10:
         68:67:e0:fe:c0:e2:d9:35:78:11:70:58:06:b6:4e:ef:80:2f:
         62:c3:a2:59:4d:f0:8a:80:9a:c7:3f:a4:e3:ed:df:15:aa:76:
         b4:81:81:5d:58:97:1f:70:81:90:a1:22:a2:9f:90:ec:25:6c:
         f5:d6:4d:8a:3b:b5:93:73:86:87:2b:59:4c:92:c3:db:ac:cb:
         a0:cd:a2:4f:ab:2f:25:2b:bb:79:e4:f3:a8:e3:25:3b:98:e0:
         56:95:2e:a8:c2:90:98:e1:3c:e6:38:45:cc:d8:45:05:52:86:
         5c:bd:1b:e3:57:af:bb:d5:f5:8d:2a:05:c6:68:57:d5:3e:af:
         c0:fb:f6:bd:38:55:1a:f3:7d:ca:15:9e:d1:89:f7:ec:7f:c1:
         dd:4a:68:cc:0d:34:c2:19:08:3e:39:41:a4:6c:77:9f:30:80:
         e6:f6:e8:d0:62:dc:13:2f:c5:35:3a:be:73:88:31:4e:8e:2e:
         c6:93:eb:94:b1:5e:e8:07:18:e0:21:5e:6f:3d:69:b3:de:59:
         59:af:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:17:32 2024 by rpki-client on console-fra.rpki-client.org