Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
File:                     78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json)
Hash identifier:          ojgRjFGFN6tdC0eAdAJllgxaDKmUMmMvVIYsmDI/Ajg=
Subject key identifier:   D7:20:33:6E:57:85:AB:6A:2B:2D:56:D5:9D:77:86:7C:22:86:0E:76
Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
Certificate issuer:       /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Certificate serial:       0193595336B6E57A51CB8113E7BAA922D7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
Manifest number:          0F69
Signing time:             Sat 23 Nov 2024 14:00:45 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:45 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:45 +0000
Files and hashes:         1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: brkJmQLI9kXq5AnPvG+LLdCx74PC+yuf73MW3V2XMlo=)
                          2: CvMAjknImyyxnAljqbyguBH8RB0.roa (hash: NS5gCK1k/+oqTCjiwyY/zckpc4ef9Z1061VZy9BvsLw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:53:36:b6:e5:7a:51:cb:81:13:e7:ba:a9:22:d7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
        Validity
            Not Before: Nov 23 14:00:45 2024 GMT
            Not After : Nov 24 14:00:45 2024 GMT
        Subject: CN=d720336e5785ab6a2b2d56d59d77867c22860e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:fa:78:b8:c5:c6:b5:fb:91:69:91:04:27:
                    12:74:c2:17:8d:42:c9:74:c8:42:d5:58:2e:ce:aa:
                    ac:47:ee:5b:61:11:74:a4:5c:c4:51:31:2b:b6:40:
                    89:41:45:1b:b4:33:8f:8f:3d:5c:06:05:ae:c0:4c:
                    ee:f7:c0:55:f8:3c:fd:c7:6c:ea:96:7d:59:ee:58:
                    f8:61:77:90:58:8d:54:34:ab:56:23:0f:d9:17:ea:
                    da:5f:37:50:7f:a4:d2:d1:e6:0f:16:aa:8b:94:82:
                    26:67:91:97:b5:29:f9:33:35:95:c0:d3:d1:67:32:
                    c9:64:bd:25:2c:69:b9:45:48:50:82:79:6f:ce:03:
                    06:93:f9:80:e6:57:56:71:d3:5a:e1:76:77:dc:c1:
                    61:0f:d1:17:d7:65:2f:d1:df:18:96:28:7d:96:77:
                    13:a9:51:33:58:22:60:00:aa:01:8d:8e:a8:99:bb:
                    55:5c:0c:41:17:61:ea:19:7c:3d:ac:9d:8a:3f:b7:
                    6a:c2:93:37:1c:25:df:57:8d:de:0b:f7:3a:dd:c6:
                    9f:4c:47:99:94:da:95:3d:40:19:3b:84:7d:4d:91:
                    e9:b8:01:a3:ba:16:e5:2b:c7:dd:30:1c:db:55:e9:
                    a1:50:ad:a2:73:8e:1a:ef:3c:29:41:60:28:06:01:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:20:33:6E:57:85:AB:6A:2B:2D:56:D5:9D:77:86:7C:22:86:0E:76
            X509v3 Authority Key Identifier:
                keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f0:71:62:85:8e:4a:3f:da:41:27:59:d9:df:08:75:be:7e:
         bd:09:f1:f8:7f:d0:2f:f2:2c:b4:6c:2a:e7:e9:c9:5f:1b:9c:
         72:d7:37:06:b6:be:f8:8d:a3:2a:0c:4d:53:f4:00:02:41:77:
         9b:0e:c5:bd:e0:5f:8c:30:54:d7:44:79:cf:e1:5e:6a:2d:46:
         e1:39:54:88:30:4b:c4:c9:a7:a5:38:32:a7:f2:9f:05:86:aa:
         07:13:c3:e9:28:43:f8:f8:ad:5d:96:94:61:07:07:0a:af:e4:
         37:36:1d:7c:c6:7b:87:97:7a:97:8e:fe:84:0a:93:af:e9:84:
         42:24:6c:28:52:82:41:e0:5c:76:2f:d1:b6:6d:fc:5e:e2:77:
         cc:90:c1:74:17:4d:3a:e1:62:eb:da:dd:66:42:69:b5:a4:81:
         43:ab:0f:63:b2:3e:c7:24:9f:55:bb:0a:d3:92:0f:f7:95:d3:
         51:9e:53:57:8e:7d:75:e2:18:a7:d7:c1:03:d3:01:fe:6c:d5:
         b9:6b:e6:f3:a5:c1:2a:4f:e7:d8:d1:3d:e7:c3:9f:56:d6:c5:
         2d:cf:f9:36:80:a1:17:fd:9d:3e:54:ec:0c:70:17:76:e1:60:
         35:f4:9f:cf:75:a4:48:43:22:f8:ea:9c:d2:fb:a8:ec:9c:46:
         64:a9:d4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:12:54 2024 by rpki-client on console-ams.rpki-client.org