Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
File:                     FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json)
Hash identifier:          eP5SaVT3ZlvFOK6/N2TXGS5gMuBYPUv5tsTStFovKUI=
Subject key identifier:   6D:07:84:1E:D0:B9:A0:B0:AC:AF:AB:4F:7C:2F:17:68:0E:BC:0B:5B
Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B
Certificate issuer:       /CN=156849587a23bfb5d65b2a1404082232b439271b
Certificate serial:       01935689BAFD147AC025C71E31DF958D4688
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
Manifest number:          0827
Signing time:             Sat 23 Nov 2024 01:01:26 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:26 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:26 +0000
Files and hashes:         1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: 70H2Xczrivuj+EvH3jGUltVaUzxcvKlP5As8IMC7BNE=)
                          2: jxZ94GmkD7el5YHnW31gY0A-pIw.roa (hash: qB7+f/c/c60CXX5QVaRicVqEF8PkUxeHGeifTEn1nBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:ba:fd:14:7a:c0:25:c7:1e:31:df:95:8d:46:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b
        Validity
            Not Before: Nov 23 01:01:26 2024 GMT
            Not After : Nov 24 01:01:26 2024 GMT
        Subject: CN=6d07841ed0b9a0b0acafab4f7c2f17680ebc0b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d2:5d:3c:cd:c2:ae:23:53:56:26:6d:cb:55:
                    69:06:2c:f7:ee:0b:de:52:f1:17:35:75:db:58:9c:
                    c5:65:81:e4:15:bf:b7:d0:a4:48:f4:45:7a:1c:05:
                    95:0c:3c:40:2d:a1:ef:d7:95:52:ab:49:db:90:a1:
                    3b:74:d7:88:08:10:03:83:01:20:5d:1b:73:3b:1a:
                    c3:24:01:f3:ee:90:a2:7e:21:7e:9b:ba:cd:3c:fc:
                    aa:2a:4f:8b:b8:83:0d:fa:c4:ec:00:37:01:16:d5:
                    e8:c8:70:60:77:28:52:1a:68:c0:07:24:61:d3:32:
                    33:84:1a:63:d4:33:df:78:47:cd:03:12:f8:c4:be:
                    33:dd:60:7f:9f:c3:81:3f:57:ae:95:3e:91:d8:fc:
                    e3:cb:43:1a:ce:75:98:05:40:60:dd:83:d3:e3:f9:
                    10:a1:8d:e1:3b:13:21:0e:7d:73:87:a1:9e:80:2e:
                    a0:95:da:58:66:a8:3c:01:2d:e3:32:89:b0:35:ab:
                    0d:32:df:b1:15:8a:d3:c8:ac:a7:50:62:dd:b0:bb:
                    b3:77:86:c9:86:18:54:43:b5:f0:6a:e8:0b:c5:2b:
                    dc:db:fc:28:bc:9e:1a:58:e6:78:99:d1:7f:a5:7d:
                    1f:63:7b:22:aa:39:94:b3:27:ff:6a:19:6c:70:94:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:07:84:1E:D0:B9:A0:B0:AC:AF:AB:4F:7C:2F:17:68:0E:BC:0B:5B
            X509v3 Authority Key Identifier:
                keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:d2:eb:23:a9:88:b7:2d:69:9c:7d:d8:f4:b2:28:5d:f7:c4:
         ec:91:6c:2f:d8:9c:3c:32:41:14:a8:7e:2e:04:ff:28:bb:90:
         38:82:6c:02:15:1c:9d:93:ed:5c:9b:2a:ec:ba:f4:5e:04:6a:
         7d:f8:bb:05:6f:91:4a:a6:5c:71:4d:6a:86:21:ed:cf:95:eb:
         02:35:7d:11:e4:00:01:30:cf:db:6d:c5:0a:da:30:83:11:dd:
         35:06:7b:d3:69:f5:00:ff:93:97:58:b7:0b:d7:97:5e:42:7f:
         13:b2:79:83:92:db:a3:08:39:ad:09:b0:80:8b:48:55:bf:d2:
         c4:e2:e7:ff:8a:17:34:03:73:46:a5:eb:f0:a4:b9:af:0f:43:
         88:99:0a:80:6a:99:1c:5c:36:63:72:27:d5:c6:03:3d:58:57:
         2d:8a:3c:8b:b8:04:b5:82:8e:2a:85:d5:19:09:a4:4c:82:2f:
         4b:19:c2:f3:89:a8:6e:c8:93:34:b2:0b:b8:c7:bf:b4:fa:b1:
         43:be:c0:41:7b:c8:17:42:c7:ca:f3:d8:40:b2:51:0a:3b:7e:
         d8:12:9b:f2:f2:2f:c3:a0:21:ae:d0:dc:73:d1:f4:16:10:8b:
         6c:d7:b4:ac:d4:98:dd:02:e4:bc:a5:16:d2:13:7b:e3:96:cd:
         47:98:83:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:53:36 2024 by rpki-client on console-ams.rpki-client.org