Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File:                     1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier:          eYu7bmTwK80PQ3cmuMIKPkK2JuEUQBLFZNgdUyF51Pg=
Subject key identifier:   C4:93:79:95:15:72:A5:31:2E:27:63:F4:F3:C1:C5:AE:8F:7A:ED:F2
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer:       /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial:       0193568AD8FBEEB22A02AE8EE586A07BB5A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number:          05A8
Signing time:             Sat 23 Nov 2024 01:02:40 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:40 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:40 +0000
Files and hashes:         1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: Le4H0sSJkVLxHfQCzhZr0fUCLrjQPpIUGRe7UgK1vYQ=)
                          2: 81MLV2nKZb1a29pz0Vx66TE4Yvo.roa (hash: 83OVzQIQn4VUNLjFKHoB+ksGVxDW5jNoAa1y9cqpCR4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:d8:fb:ee:b2:2a:02:ae:8e:e5:86:a0:7b:b5:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
        Validity
            Not Before: Nov 23 01:02:40 2024 GMT
            Not After : Nov 24 01:02:40 2024 GMT
        Subject: CN=c49379951572a5312e2763f4f3c1c5ae8f7aedf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:18:d6:76:ca:b4:57:76:cf:d6:00:39:37:
                    8c:7e:f8:3e:3b:70:07:e2:cf:aa:7c:9a:f7:c5:fa:
                    c6:cc:a9:d4:66:2a:08:a1:c1:a1:4b:03:91:9e:07:
                    47:71:2d:8b:f6:ce:91:48:b6:cd:52:8b:f4:6d:bb:
                    a3:b5:ed:a8:e1:51:e0:28:df:94:10:63:2a:32:7f:
                    6a:bc:d0:0e:a2:8b:bc:0c:a6:db:bc:e5:79:27:ca:
                    6b:d0:67:d2:f5:38:2b:ba:b8:cd:9c:23:c3:a4:b1:
                    73:16:a5:36:b9:7b:3c:94:05:42:de:80:14:52:a2:
                    35:a8:a5:39:ca:f6:61:93:be:0c:f3:f9:b9:45:d8:
                    2a:aa:45:b9:03:31:e9:31:6f:95:15:7c:85:4c:e6:
                    97:fc:a2:76:ca:19:31:9c:9d:14:27:c1:3b:36:08:
                    06:c8:fe:81:e6:18:56:35:31:f5:da:f5:e2:85:11:
                    73:42:6f:57:43:91:06:2a:22:5f:5c:e9:15:e9:7e:
                    b2:cc:d9:98:32:ce:00:2f:bb:74:b6:61:83:68:7d:
                    7f:22:a4:05:30:97:38:55:38:9f:62:4c:03:c0:9c:
                    81:2a:13:16:a3:12:6d:58:0f:79:3b:ab:a7:37:79:
                    17:07:29:fe:16:12:46:db:a3:5f:1c:53:bb:46:81:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:93:79:95:15:72:A5:31:2E:27:63:F4:F3:C1:C5:AE:8F:7A:ED:F2
            X509v3 Authority Key Identifier:
                keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:bc:b5:04:19:fa:5e:1c:ca:d5:3a:c3:02:90:7f:65:e7:c0:
         50:45:20:04:ac:aa:cc:a5:0d:23:d9:26:4a:e4:af:78:b8:79:
         0d:74:b3:37:2d:53:85:86:ac:06:dd:45:3d:52:2f:9d:c8:aa:
         3f:eb:0e:73:6f:9a:4d:b0:c3:b8:31:91:a4:64:12:16:f4:12:
         6e:d5:74:c2:23:82:f9:6e:a1:dd:5d:ae:fc:1a:c6:15:26:4f:
         a7:6f:0a:d8:43:45:d2:58:0a:2e:da:9b:21:70:ed:6e:c6:38:
         25:0f:f6:5e:36:30:60:e8:31:b6:df:9b:81:ba:d5:8e:bc:a1:
         9d:3b:1e:d7:30:50:6b:73:4e:dc:23:45:f3:a1:fa:31:55:e4:
         a0:ee:a1:4d:7c:fb:a0:2d:c9:23:05:3b:46:bd:1d:0a:e9:83:
         2e:86:61:08:d6:d3:e0:f7:dd:99:b9:60:39:61:95:95:ea:fd:
         59:83:2c:85:9d:53:39:4a:05:d8:d4:3e:15:3e:26:bd:91:ca:
         04:c1:21:a7:7e:e4:60:ce:a6:ed:44:57:3b:cc:92:2b:5d:0a:
         8b:f6:43:59:72:8b:8e:06:42:39:21:95:08:80:78:86:b1:27:
         55:56:0d:bf:67:7c:af:13:b1:45:da:71:f2:af:0d:5e:94:c2:
         79:8e:f3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:25 2024 by rpki-client on console-ams.rpki-client.org