Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File:                     Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier:          uj3SoPVdix49goQMr++ZqACshGEJwjLbn/sRto8cBbI=
Subject key identifier:   F4:D8:E7:FA:69:F5:5C:85:EA:88:40:5C:0D:EF:ED:3E:B8:E0:88:D3
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer:       /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial:       019369A1B16EEA075561DF1EEDE58BC3DD21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number:          035B
Signing time:             Tue 26 Nov 2024 18:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:24 +0000
Files and hashes:         1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: Xd/3/1Ax+vspjH/bgXeRA0hAHz24uQ+4qQjRuAQt2W8=)
                          2: pDVmUDWcaRN7Ng8vzqc1QzdKSIc.roa (hash: 0sAdHbSXp1c0t8zllBkrXYiNgoIHRb7FBz4QmeMAbSk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:b1:6e:ea:07:55:61:df:1e:ed:e5:8b:c3:dd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
        Validity
            Not Before: Nov 26 18:00:24 2024 GMT
            Not After : Nov 27 18:00:24 2024 GMT
        Subject: CN=f4d8e7fa69f55c85ea88405c0defed3eb8e088d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ce:12:40:7e:b8:6c:ed:e1:ef:12:54:42:3d:
                    25:ec:59:ea:1a:49:7f:13:cf:63:14:5f:b5:8e:28:
                    37:0d:4b:1c:18:7e:d9:a3:73:d1:11:77:20:80:c2:
                    58:aa:d2:08:5b:a4:45:ae:2f:69:9b:3b:5f:6a:b4:
                    d6:45:b2:f3:71:c4:94:44:70:b0:79:4e:8f:8b:c9:
                    08:7e:28:48:a9:b2:da:61:3c:52:6d:71:34:76:cc:
                    ec:2b:da:72:b3:0e:7d:83:5c:3b:68:48:90:46:23:
                    4f:5d:4d:84:06:f6:8d:dc:b4:23:a9:95:61:ed:7e:
                    8f:49:f4:20:c1:3f:8f:ab:be:fd:5e:62:3f:ad:7b:
                    83:9a:a3:29:ac:24:da:38:e3:b4:49:f2:9d:96:7f:
                    39:4d:d5:f4:27:36:8b:37:d0:ed:44:8b:04:e3:09:
                    b8:e9:b2:f9:3d:e2:b9:1c:1b:d8:36:57:8d:55:bc:
                    58:36:01:08:cb:42:73:5b:b1:bf:25:28:d6:86:26:
                    b1:ac:64:15:94:7c:3e:0c:34:0d:f2:61:4f:7a:98:
                    7e:be:d8:ec:e7:42:cb:50:48:c7:89:aa:e5:64:40:
                    e7:53:02:88:9e:12:06:fe:09:61:16:2d:bd:8f:8b:
                    3e:6e:0d:07:ea:e7:86:ae:d9:e4:ee:bc:a4:78:0a:
                    7c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D8:E7:FA:69:F5:5C:85:EA:88:40:5C:0D:EF:ED:3E:B8:E0:88:D3
            X509v3 Authority Key Identifier:
                keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5c:10:05:8e:b7:df:53:03:b2:e4:7b:d3:86:1b:37:bb:8e:
         7f:08:3a:ca:a7:7a:11:53:10:2d:63:c8:a5:8f:4b:6f:42:25:
         e4:99:28:ea:e6:23:1d:ed:14:55:99:aa:3d:2c:cf:ae:30:00:
         fa:55:df:30:be:2c:20:22:e0:45:d1:b4:23:17:54:96:61:c8:
         e7:79:3d:b7:92:99:b8:7f:e5:f6:ad:a1:5d:ee:df:2d:40:18:
         22:7c:ef:bd:dc:bd:c9:54:13:5c:e1:d5:f4:0c:b7:10:4f:7d:
         30:ad:16:17:54:cc:59:78:be:8f:7a:68:bc:45:f3:e8:26:0b:
         fe:b8:b6:e9:67:cf:18:8b:55:18:c7:1f:a1:c3:a4:39:58:cb:
         3b:79:29:71:6b:9e:6e:83:02:9e:45:86:dc:51:a0:ca:f1:74:
         ef:5d:e5:28:ee:15:a3:1d:ad:be:b5:fa:31:40:d0:04:9d:1f:
         59:2a:58:d8:87:52:94:8f:c4:17:d6:f1:82:19:f1:94:dd:03:
         0f:99:ef:30:2d:d4:54:c8:a8:59:94:96:d2:f4:06:40:2c:1a:
         1d:c6:24:40:fc:db:be:dc:61:d0:ab:7f:2c:71:fb:34:b6:c5:
         b8:c1:2d:e1:f5:3b:9f:e4:c6:8b:e9:89:78:dc:35:97:ad:5e:
         02:00:f1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:42 2024 by rpki-client on console-fra.rpki-client.org