Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
File:                     1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json)
Hash identifier:          kPnVwXgaVngROsgrX4cx1t37o+DLa33iTaeQfPL5dGw=
Subject key identifier:   6D:BA:F8:5E:C2:35:3C:A6:EF:DF:06:61:62:24:1F:9A:D4:A0:36:48
Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
Certificate issuer:       /CN=f966238becd356df87d0c630248123f8f219e18c
Certificate serial:       019369D93DDE8A61015731BB4AC8CBBA87DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
Manifest number:          02B8
Signing time:             Tue 26 Nov 2024 19:01:05 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:05 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:05 +0000
Files and hashes:         1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: Mrd4yJ+oUjWnWBLy/P2jtP469DHbkPpj2tgt/29EI0A=)
                          2: BfqmmtYmqYuArDUKy7o7y3-o8cU.roa (hash: 1xNaPJGkuqt18QN9Q7a2gkIyy1ndibL0j4REaz18DyY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:3d:de:8a:61:01:57:31:bb:4a:c8:cb:ba:87:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f966238becd356df87d0c630248123f8f219e18c
        Validity
            Not Before: Nov 26 19:01:05 2024 GMT
            Not After : Nov 27 19:01:05 2024 GMT
        Subject: CN=6dbaf85ec2353ca6efdf066162241f9ad4a03648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:09:76:f2:3f:c2:59:6a:87:68:ea:40:0a:19:
                    26:42:35:c3:b9:d2:5a:46:76:4c:63:35:4b:ad:68:
                    b1:d8:f2:cb:d7:3d:fa:08:ce:30:f9:fc:3c:e1:5a:
                    8c:4a:96:2a:cc:7f:1e:f7:dd:ac:09:20:7e:7a:30:
                    1e:b1:7e:d3:76:53:b6:ce:6b:21:ba:c0:58:85:45:
                    b9:97:07:3b:23:73:48:89:3e:e6:2f:16:40:fc:cf:
                    b3:1b:95:8d:f8:5d:5b:11:75:ba:76:fd:e1:ef:03:
                    2c:c0:23:35:ba:fb:93:79:0d:7b:85:e4:77:95:ff:
                    4f:ec:4c:1a:5d:54:f2:e0:cc:c1:22:28:13:06:af:
                    0b:d8:80:cb:40:e1:98:00:69:9e:38:da:28:0c:5b:
                    70:ee:e8:c3:04:ef:0a:9c:37:23:65:8d:3b:69:76:
                    e4:d3:1b:a8:4a:0a:cd:9f:e8:9b:18:82:c5:47:ac:
                    7d:65:a0:c7:34:d9:2b:ee:65:54:9f:81:9c:96:e5:
                    44:46:73:de:51:a2:7f:04:59:89:c1:7b:ef:57:4f:
                    3c:d3:01:df:f3:61:7a:a3:79:c0:70:92:8a:df:a4:
                    13:72:97:7d:e5:b7:45:b2:eb:6f:e2:62:d8:5a:8a:
                    7b:a4:2a:90:c4:5f:f9:0e:56:c8:7c:86:4c:76:0f:
                    30:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BA:F8:5E:C2:35:3C:A6:EF:DF:06:61:62:24:1F:9A:D4:A0:36:48
            X509v3 Authority Key Identifier:
                keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:48:c3:02:45:aa:65:5e:0c:bb:44:53:38:76:62:68:ac:9e:
         6c:ee:4b:0f:04:20:5f:eb:b0:e9:88:31:50:82:9e:8e:40:e2:
         9f:3b:4d:4f:98:3e:01:42:ad:03:d1:cc:ec:14:94:99:fb:0f:
         c6:95:14:75:67:60:62:fb:75:27:79:a9:1d:63:41:cf:a3:1b:
         ce:76:b0:4e:24:37:cf:d0:d0:28:5c:18:fb:9d:a8:58:65:f9:
         d7:4f:f2:aa:ac:97:d5:6c:33:53:79:1d:75:37:76:6c:dc:fe:
         80:34:89:4b:65:47:57:1c:90:a0:d9:ee:32:8e:ad:1b:c1:df:
         f5:6d:02:f6:ef:54:ad:e2:f3:4f:45:17:e6:48:41:49:ea:4d:
         78:8f:cf:be:23:3e:6e:44:4f:84:68:b7:58:6c:23:41:ea:4b:
         a7:6e:e3:fd:02:7f:73:30:8a:f2:39:71:6e:89:ee:94:7a:b3:
         56:09:1a:7a:bf:7d:d3:af:d4:fe:fb:20:21:30:ce:18:65:23:
         55:b4:7f:47:c2:98:8b:50:b5:74:9e:39:7f:f5:3c:1b:d2:a7:
         26:d5:01:73:1b:f3:c8:15:d9:30:17:86:5f:62:56:d7:7f:eb:
         6a:5a:be:15:b2:ec:01:ff:10:f3:6a:c0:42:16:ac:4c:5b:e0:
         d7:7f:5a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:33:18 2024 by rpki-client on console-ams.rpki-client.org