Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File:                     1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier:          JFEzn7OiNET3JqJW3+sP5sYB3ZomN+szg1rM86n0Jp4=
Subject key identifier:   AD:07:D7:C7:EB:15:4F:DC:58:B8:6E:B4:F4:A2:52:79:D8:23:B2:10
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer:       /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial:       019358789EDD9E15B62AF4F6FDF558B76589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 10:02:00 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:00 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:00 +0000
Files and hashes:         1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: UnMkISexS0aSaCSm89fEl3cXm5UIDZQZtRSK/Sx8T3k=)
                          2: FZBs-XiLDeWJ5aTItPXxNu7Xzpc.roa (hash: b4T5BvA81dEB8ElpdVi4hUo3lNvOB+Zwv1/5R0+869I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:9e:dd:9e:15:b6:2a:f4:f6:fd:f5:58:b7:65:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
        Validity
            Not Before: Nov 23 10:02:00 2024 GMT
            Not After : Nov 24 10:02:00 2024 GMT
        Subject: CN=ad07d7c7eb154fdc58b86eb4f4a25279d823b210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:3d:66:00:6e:ee:a8:08:84:58:3f:e5:ab:
                    39:94:fa:d9:f6:92:05:6d:65:36:c4:df:03:a6:d2:
                    a8:db:4b:cd:d3:aa:cf:1c:0a:6c:9e:e1:e5:99:92:
                    e4:a8:d3:f7:aa:c1:32:c1:dc:05:31:e9:f1:0b:fd:
                    d3:d6:39:a9:53:64:0b:ea:0a:d9:1d:5e:d1:ca:62:
                    f7:3a:a9:50:eb:fc:be:fb:0f:fb:2b:59:9f:67:ed:
                    d2:86:b9:a9:29:e6:05:c2:a7:3a:5a:3b:92:48:b0:
                    55:cd:69:8c:7c:a3:02:3f:96:b4:fa:1d:f8:69:86:
                    00:d7:f5:cd:bb:66:07:5e:18:6c:3f:dc:70:0c:d4:
                    6e:1b:9c:4d:ed:a3:d8:67:84:d5:86:29:5d:93:29:
                    31:9c:62:35:2c:86:53:07:3a:19:73:ad:09:b0:93:
                    98:00:34:36:d5:4b:2a:71:1e:e7:c3:b6:da:5d:fa:
                    50:ad:67:9a:a4:bd:6c:9b:18:81:4a:16:b7:44:b5:
                    0d:e7:e8:8f:c0:2a:74:cd:f2:7e:f6:38:04:3d:84:
                    ca:3f:e9:a1:e4:c8:5b:f2:25:5b:83:72:08:37:d7:
                    cc:c7:dc:5c:a4:ba:4c:61:dc:df:ef:2c:b4:b1:72:
                    73:1f:7f:80:0f:b5:5e:13:b2:8f:68:d6:8e:5e:af:
                    63:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:07:D7:C7:EB:15:4F:DC:58:B8:6E:B4:F4:A2:52:79:D8:23:B2:10
            X509v3 Authority Key Identifier:
                keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ab:89:93:d6:43:0c:3f:57:dc:90:45:96:9d:6c:88:b1:f7:
         d1:1b:7c:de:03:9c:f3:bc:d2:5d:62:d8:2d:41:0d:8d:a5:43:
         93:ec:fb:2b:35:8c:85:35:1b:03:92:fb:4d:f9:c0:97:c0:64:
         8c:64:7b:69:2c:3e:25:4e:ea:2a:08:0a:17:e3:56:0d:42:9f:
         4a:c9:6f:2c:e2:58:1b:c3:54:ec:ec:cd:98:bd:1a:e0:2e:cc:
         f0:e9:6d:34:4a:bd:b0:50:7e:c3:40:c3:54:a6:86:88:4c:6d:
         72:61:c3:27:28:dc:24:0d:8b:09:5c:c2:2d:60:08:01:07:b5:
         85:83:7e:f6:af:9b:20:28:4e:b1:a4:aa:a4:da:18:26:94:38:
         7e:54:91:ab:17:5f:fb:3d:74:9a:50:f4:0f:dd:1a:5e:ea:68:
         09:09:8f:9a:5d:41:76:44:2a:e3:12:56:6f:63:f8:9a:ba:78:
         8f:88:f0:75:f8:da:4c:b1:0c:78:b8:8e:97:3e:b1:68:e8:5d:
         39:ba:b4:95:05:a9:57:f6:96:5a:cd:3e:19:07:87:d5:b9:7e:
         18:3b:b3:f7:33:ca:35:56:28:de:1c:0b:03:8a:82:41:e8:51:
         f3:3c:c0:a8:e8:a3:06:22:2e:28:19:fb:48:f7:87:5d:06:a2:
         44:66:61:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:11 2024 by rpki-client on console-fra.rpki-client.org