Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File:                     1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier:          TylrCMLxtNHJIonXZkBO8KI0X6Z+24DBMU4SMudpt4Q=
Subject key identifier:   F5:79:EA:38:76:E1:D8:B1:FA:91:47:5B:BF:3C:91:04:BF:AA:7F:EE
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer:       /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial:       01936AB4D6CD27211A5F8A40E85BA8DC635D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number:          0101
Signing time:             Tue 26 Nov 2024 23:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:56 +0000
Files and hashes:         1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: +CFEE7WScJjcPldTEyqYMhdRVW5g42lLE017hH5FA2Y=)
                          2: YySq0kT2l2oRHlcHOHNexHk6g5E.roa (hash: EiXxkIAa/Q6eFVae7fC2J8bjpPnLClNlg5zKsHO3Nho=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:d6:cd:27:21:1a:5f:8a:40:e8:5b:a8:dc:63:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
        Validity
            Not Before: Nov 26 23:00:56 2024 GMT
            Not After : Nov 27 23:00:56 2024 GMT
        Subject: CN=f579ea3876e1d8b1fa91475bbf3c9104bfaa7fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:58:87:bf:41:12:08:09:c0:d6:62:c1:0b:
                    ed:bb:89:fc:f8:c9:27:50:b9:d6:17:c8:cb:de:10:
                    fe:77:d1:31:a4:b6:b2:70:d3:53:40:dc:f7:3c:7a:
                    48:b9:46:03:58:34:77:64:21:dc:e0:b2:da:2b:66:
                    3b:f7:7f:e1:12:c2:5e:a1:0c:be:8c:89:95:ba:46:
                    9f:5f:b6:e7:58:cd:8e:00:58:9a:f4:79:a8:6c:c1:
                    be:04:74:e2:80:a4:ed:75:51:67:eb:d8:14:4d:7e:
                    9d:4e:0b:2b:ff:0a:e8:9d:31:61:68:e6:02:c5:69:
                    86:84:e0:8a:4b:4b:cc:89:f4:94:de:64:a7:65:1e:
                    25:f6:f8:56:9a:2a:fd:f6:58:07:f1:b5:09:b1:c9:
                    7e:a5:f0:28:e4:8d:7e:ca:61:bc:c6:ce:77:3d:d5:
                    66:5b:dc:af:9c:93:f0:ee:9a:6e:b4:31:f3:ef:71:
                    c2:c4:7d:3c:95:96:e5:95:b6:df:a4:55:68:d6:71:
                    9f:3f:25:0f:94:ca:8f:21:86:c6:27:56:90:f1:d5:
                    2f:98:5f:75:d5:d5:66:fa:0b:e1:74:d6:63:5b:2b:
                    00:ce:16:38:72:ce:6e:7d:5f:00:92:bc:f7:57:6a:
                    9e:78:39:54:d7:91:19:7a:4f:03:ea:07:97:bc:92:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:79:EA:38:76:E1:D8:B1:FA:91:47:5B:BF:3C:91:04:BF:AA:7F:EE
            X509v3 Authority Key Identifier:
                keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:63:9d:2f:f0:dc:b4:ea:9c:60:b0:9f:66:6c:a3:25:9e:59:
         d0:cf:cd:db:de:ec:b7:ce:b5:56:22:81:77:f4:b4:b3:bb:7c:
         88:b5:f5:aa:83:da:11:3c:cf:f4:37:bc:7a:8b:8a:3d:a4:a6:
         89:b4:96:f4:c0:ef:56:8c:c6:23:f5:67:a1:88:a6:68:83:6e:
         c8:11:53:e4:99:3c:11:3b:f5:e5:29:e2:58:8f:6b:27:11:18:
         fd:4a:b3:11:27:75:66:5c:56:2b:e5:57:41:8f:82:8d:72:a1:
         3c:cd:38:e0:3d:5f:0b:65:03:34:0f:31:b7:82:16:61:3a:01:
         b9:eb:50:93:c7:a6:f3:26:bd:ae:54:da:5c:06:92:2e:08:c4:
         5f:db:cd:07:5a:6f:91:52:10:00:ec:10:3f:1d:b1:59:63:e3:
         f6:c9:6b:a1:e6:60:88:24:fa:82:8e:b8:13:3f:f2:a8:4a:67:
         a4:79:f2:1c:57:09:e4:95:9b:a2:b1:04:68:cd:0d:69:ac:19:
         e5:a2:fd:8d:4c:9c:3f:28:02:e7:f8:ff:8d:57:49:1d:27:91:
         c2:f2:66:9b:c5:07:74:4b:40:a5:8f:c1:75:b0:d6:13:7e:43:
         29:79:15:e4:51:6b:97:51:0e:a9:60:95:1b:09:91:dc:b8:9e:
         ce:d3:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:57:44 2024 by rpki-client on console-fra.rpki-client.org