Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File:                     sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier:          eL2Dfu3VJemq7DJz3fUjP9Z+Vh9R2Q98XBGbaaMpNGk=
Subject key identifier:   71:EF:6A:55:DB:1D:7B:A2:02:69:30:B4:5B:0F:01:45:41:01:A2:56
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer:       /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial:       019365FC125F52641096FD1675B71CA031A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 01:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 01:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 01:00:38 +0000
Files and hashes:         1: WCd1Ev1e9Nofz4kLVtDG3PtwYDM.roa (hash: DWZ4bxuNeMTbx5mspJAFy1NOqcx0YA3RpGq3Hv69Qd4=)
                          2: WF8c-GyDpaWF6fN0Zw-fBXDUoPg.roa (hash: 0vTTSB5mBZPYbST31/2xJZbiivnSMtuI4xW3GRgPSfI=)
                          3: oYSlRO_sF-PWLFjxQHdEFXg1qvo.roa (hash: W1ZeASeIjy9mI/4wmR2Nn7lWEu1/oQ/csuhOohWNeb4=)
                          4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: W9xkefh9DwVaRTGLPLwOISkBrXPyzGJ3lVUB23CswSo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fc:12:5f:52:64:10:96:fd:16:75:b7:1c:a0:31:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
        Validity
            Not Before: Nov 26 01:00:38 2024 GMT
            Not After : Nov 27 01:00:38 2024 GMT
        Subject: CN=71ef6a55db1d7ba2026930b45b0f01454101a256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:af:f5:38:1a:1e:40:62:30:8e:fc:d8:59:
                    3c:90:64:0f:ba:63:ad:4a:ec:df:19:61:16:15:bc:
                    d3:39:ad:93:ea:53:a5:9b:6a:6d:62:2d:92:44:ff:
                    97:7f:07:ed:f4:a5:e1:1f:c2:f3:36:97:00:1c:9a:
                    f9:7f:39:1a:a2:e8:aa:ba:39:3f:57:22:4e:94:99:
                    07:2c:f5:30:1e:9e:83:2c:6a:e2:19:4f:d3:57:a3:
                    70:3a:25:04:47:d5:97:07:2c:de:25:3f:b7:68:1b:
                    e6:07:5a:ce:93:62:e1:d2:10:a1:87:06:92:3f:4d:
                    08:a9:7b:05:b5:0c:cf:f4:db:2f:8e:f4:75:a9:c3:
                    8c:2d:93:5a:da:51:17:7a:60:e4:9d:15:b3:f7:43:
                    9e:30:1a:c6:95:06:9e:2d:0a:18:e0:ca:77:f6:5c:
                    e4:75:5b:51:e4:2a:72:f6:1b:53:db:6a:45:80:b0:
                    1c:94:45:9f:b5:a7:ff:60:4b:56:1b:45:a9:af:12:
                    97:b4:64:5a:d8:87:49:71:3e:00:04:aa:2c:0c:61:
                    93:a5:35:ab:0e:0a:42:00:a8:4e:f4:27:01:86:b2:
                    ea:71:30:1c:6c:1f:30:a2:63:24:ca:ed:17:19:2f:
                    f3:ee:7d:bc:54:0f:d2:83:fd:6c:f0:a4:4e:29:33:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EF:6A:55:DB:1D:7B:A2:02:69:30:B4:5B:0F:01:45:41:01:A2:56
            X509v3 Authority Key Identifier:
                keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:15:5e:67:47:fc:75:f3:d1:99:30:46:be:1e:23:21:c1:c0:
         4b:c1:60:f5:3f:38:94:52:7f:e3:f7:ef:71:d5:22:44:50:c1:
         9e:52:d4:83:25:1c:3d:81:45:21:6b:b2:d0:9b:7b:2b:41:75:
         04:33:cd:75:79:a5:a5:85:d4:ee:c0:97:6b:8c:b3:7d:6e:fc:
         8a:17:f8:d2:c0:11:57:1e:74:de:eb:9f:c5:55:a7:1b:9b:8f:
         9d:51:30:6f:2c:3f:cc:70:0e:35:fa:9d:8c:7f:24:b8:22:63:
         b9:bf:87:d5:34:95:e8:cd:f2:99:9a:29:ce:03:a5:aa:0b:45:
         a7:a0:8c:13:c2:53:6a:96:f7:b0:ab:3c:d9:f6:31:3e:5b:fe:
         88:9d:60:8f:fc:e2:97:11:ce:4b:ff:e5:74:91:77:fb:91:f8:
         46:15:25:50:76:6f:d6:8c:c3:6a:31:e7:b7:eb:13:fd:86:68:
         cc:e8:b3:2c:f8:6f:95:9f:d3:49:2e:a4:93:77:19:2a:38:8b:
         e3:42:f2:c2:7b:04:50:49:b9:27:cf:cf:ab:b9:5c:7f:2b:e4:
         e7:63:7b:c4:62:41:1a:f0:4a:4c:15:58:44:03:b0:b3:dc:e9:
         45:ca:56:01:d8:49:ba:fa:d4:2d:02:13:5a:6e:9f:09:52:c0:
         07:8e:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:12:35 2024 by rpki-client on console-fra.rpki-client.org