Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
File:                     cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft (raw, json)
Hash identifier:          iwS7UIfWlqLRdUWQEXHtIcHpxOlmqk+lWtP2GAom6/g=
Subject key identifier:   3F:98:39:D6:57:2A:CC:2F:67:9C:51:45:CC:13:0B:DD:17:0E:9E:0F
Authority key identifier: 71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28
Certificate issuer:       /CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
Certificate serial:       019352ACF8DC2F6378BADE307A69266FDFE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
Manifest number:          0DB0
Signing time:             Fri 22 Nov 2024 07:01:27 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:27 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:27 +0000
Files and hashes:         1: YFKyoofxckxFDQyh2KYl_5mL0HU.roa (hash: PVHYiV3rEU/mDZQf2BQjb0PDBN1mGFCq+gjDCGz3R5Y=)
                          2: cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl (hash: aYZJzWupHw3dWEGAi/N9/RwMwEzu0icVVAGN+cUkWwg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:f8:dc:2f:63:78:ba:de:30:7a:69:26:6f:df:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71cec269f84d5641ff63a63d1f3997c8cfd4fe28
        Validity
            Not Before: Nov 22 07:01:27 2024 GMT
            Not After : Nov 23 07:01:27 2024 GMT
        Subject: CN=3f9839d6572acc2f679c5145cc130bdd170e9e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:df:84:ab:b0:14:d6:b5:d0:c3:00:64:20:
                    d5:84:ce:7a:eb:78:80:7b:8d:0d:56:84:d6:57:93:
                    9e:d0:96:51:87:59:23:99:5d:33:25:79:2d:10:45:
                    fa:2a:63:04:27:bf:72:0c:bb:09:c1:99:d5:ba:a8:
                    78:66:3c:12:32:43:71:7e:a8:1a:08:49:8c:aa:d1:
                    42:49:c0:79:f5:b1:01:63:e5:54:ce:ef:e6:99:2e:
                    8b:fa:96:ed:db:07:09:ef:e1:62:ec:a8:83:9e:75:
                    c6:a2:79:a2:0e:fe:b4:43:61:25:ea:84:61:7e:6b:
                    c4:bb:64:ee:5c:7a:58:ab:54:5c:92:83:27:1e:4e:
                    48:05:6a:98:9f:2c:51:52:6d:09:e3:4e:fd:bb:4d:
                    5c:4a:a1:cb:bc:e3:c7:73:d7:4e:b6:98:99:8f:73:
                    35:26:0d:2d:8b:4f:45:ff:7a:1d:3a:fa:8c:02:bb:
                    ba:5f:39:e8:ef:b9:94:36:63:6c:1c:fb:b3:38:9d:
                    3f:a3:c9:7b:b1:a3:a5:7c:9d:5b:8d:aa:50:48:ba:
                    eb:92:f0:81:5b:0d:97:b0:ab:4c:97:78:49:c3:dc:
                    19:8c:67:08:7c:5c:e1:8c:a2:a4:db:09:cb:da:3f:
                    0c:0b:31:d3:1f:91:4e:7f:fa:13:ee:3d:b6:80:35:
                    f7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:98:39:D6:57:2A:CC:2F:67:9C:51:45:CC:13:0B:DD:17:0E:9E:0F
            X509v3 Authority Key Identifier:
                keyid:71:CE:C2:69:F8:4D:56:41:FF:63:A6:3D:1F:39:97:C8:CF:D4:FE:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8f551f-2425-434d-afb5-a762e9c0dd32/1/cc7CafhNVkH_Y6Y9HzmXyM_U_ig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:34:3f:5d:88:78:e6:bf:54:7f:36:fb:97:e6:a7:b8:56:33:
         f9:b4:48:e6:df:d3:2f:a6:46:80:ff:14:4d:60:c7:80:07:c7:
         9f:9d:0a:9d:a8:cd:59:84:34:6a:38:a5:5c:c5:11:b3:f6:35:
         ec:06:b4:c9:fe:38:89:e4:c8:b9:eb:d8:f3:ab:57:45:4a:ad:
         a9:5e:d4:9d:8a:60:62:cd:59:2c:28:92:73:af:f6:d7:63:7e:
         79:a8:ea:a7:2e:86:ed:62:52:0e:c1:85:c3:b6:b7:f0:b2:a2:
         7a:fe:a8:50:0e:19:b8:e2:29:6b:87:08:44:96:c8:8b:47:d8:
         60:fa:77:af:c1:eb:52:09:56:a2:0b:5a:a7:0d:87:03:28:c9:
         9f:e5:59:ae:d2:41:f0:37:96:80:4a:23:4f:18:6b:76:d2:53:
         8e:2d:fa:62:d9:c0:b2:1d:2f:dd:f1:c0:b1:a8:ec:18:3f:da:
         38:82:8e:65:ca:8a:b5:99:9c:e3:1e:a7:20:9d:91:d6:3c:1d:
         7f:d2:88:c9:b4:48:14:e5:bc:37:a2:9d:71:a3:8b:c3:07:ff:
         f9:06:b9:82:33:00:d8:21:0f:77:c5:79:0d:08:fb:ee:13:99:
         aa:97:5d:9f:dc:cb:36:6b:30:28:ed:da:7b:2f:1a:30:14:55:
         9e:ea:75:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:11:43 2024 by rpki-client on console-ams.rpki-client.org