Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
File:                     Ac8qcbLHv1QcbMBBUc0CB402mSY.mft (raw, json)
Hash identifier:          lXQdzVVwvL/FL9Og3yIb1xOLJe8D9QGk4e0Hxvb3eEU=
Subject key identifier:   02:10:AF:C4:2A:3F:BE:70:33:93:A4:C1:7C:D4:AC:05:54:F4:91:4D
Authority key identifier: 01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26
Certificate issuer:       /CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
Certificate serial:       01935809444A4ADDDB0B5A01A6D28DABE548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
Manifest number:          78
Signing time:             Sat 23 Nov 2024 08:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:22 +0000
Files and hashes:         1: Ac8qcbLHv1QcbMBBUc0CB402mSY.crl (hash: DSCQaM+QpsaAqvwi7L4F3uxaIElxrSTMhecb6Eozs+k=)
                          2: bpZvU2Q1Ghj2ztwGLUb3AkPvUEs.roa (hash: HbIBYT0GpUswScn/PM3UrO6NPxEk/cdbgAanzp7Eln0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:44:4a:4a:dd:db:0b:5a:01:a6:d2:8d:ab:e5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01cf2a71b2c7bf541c6cc04151cd02078d369926
        Validity
            Not Before: Nov 23 08:00:22 2024 GMT
            Not After : Nov 24 08:00:22 2024 GMT
        Subject: CN=0210afc42a3fbe703393a4c17cd4ac0554f4914d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:11:d4:ae:38:49:89:af:51:f6:b5:4c:6e:
                    b8:1c:f6:8a:5f:b7:75:15:7b:f0:64:d2:93:20:7b:
                    ee:f3:bc:41:08:d3:89:8a:f1:ca:54:42:7f:27:08:
                    01:bb:4a:25:30:9d:dc:c9:8b:36:cd:af:5a:e7:8e:
                    3d:0e:c4:0f:e1:00:5f:da:c7:e7:a8:50:05:1d:da:
                    55:fc:b6:6e:3d:45:f9:de:be:3f:16:85:46:25:4d:
                    90:c4:3a:b0:5a:d4:df:ea:60:4d:45:21:f9:93:ec:
                    00:4b:02:3c:a5:e4:88:e0:51:b8:51:b6:ae:85:a2:
                    82:ff:86:2b:c8:8c:d2:23:b3:48:b8:bf:7f:0c:0f:
                    fb:32:e9:b4:ae:cf:f3:30:9f:ee:95:81:7a:26:00:
                    72:c6:2f:48:e3:98:32:f7:d9:cd:53:47:90:ad:f9:
                    2e:5f:2f:fc:f4:48:79:a6:d2:75:a8:da:ca:a2:3a:
                    46:3a:10:e5:32:69:aa:41:e4:18:2e:1b:b3:f6:ab:
                    f0:cf:04:5a:02:25:7d:c6:db:93:7d:f0:c1:18:18:
                    21:94:af:7d:e0:97:be:78:e7:06:d3:d8:8a:a3:9c:
                    f4:c6:d7:24:31:6c:08:62:5c:0e:a7:9e:2d:1e:1e:
                    75:bb:5e:3d:62:02:18:00:97:fd:dc:f9:ff:7f:a9:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:10:AF:C4:2A:3F:BE:70:33:93:A4:C1:7C:D4:AC:05:54:F4:91:4D
            X509v3 Authority Key Identifier:
                keyid:01:CF:2A:71:B2:C7:BF:54:1C:6C:C0:41:51:CD:02:07:8D:36:99:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac8qcbLHv1QcbMBBUc0CB402mSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c24ee1-2cb2-4907-8048-b0f4fbe26b61/1/Ac8qcbLHv1QcbMBBUc0CB402mSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:97:6a:48:74:3d:a3:07:cb:2e:93:8d:72:ff:79:36:91:dc:
         5c:e3:4d:e4:fe:4c:7b:8e:0a:75:8e:cd:9d:8a:34:b9:e8:61:
         b0:d5:a9:95:84:b5:51:9c:67:4f:39:46:6f:09:e9:d9:66:40:
         9c:69:68:eb:19:8b:0b:cd:7d:ad:97:ab:86:d3:96:1c:8e:42:
         83:f5:40:1f:81:40:6f:62:7e:6e:7d:3e:28:d3:33:bb:25:a4:
         5e:03:bb:dc:10:cf:cb:9f:30:d5:70:16:a4:aa:49:4a:ef:40:
         6d:c2:87:23:c4:37:e0:56:dc:13:03:22:5c:69:5b:36:ba:5f:
         03:e8:fe:48:69:8a:50:5e:32:e1:0d:4f:9c:76:7a:86:a7:14:
         d6:68:9e:8d:a2:00:c4:95:1b:60:fd:bd:2a:01:57:96:53:b5:
         21:8c:09:ef:96:73:ff:a4:52:58:e3:66:26:9a:0f:f6:b6:26:
         22:3b:79:d9:52:c3:05:d3:bb:61:52:4e:16:1d:1a:4d:11:2d:
         a1:33:c7:61:96:7e:39:0b:4c:03:07:be:ba:39:22:9e:54:63:
         dd:4f:fa:d3:1c:6a:be:51:31:4c:23:c0:ee:6a:fb:13:a5:2b:
         02:ec:fa:e0:96:e5:12:58:95:fc:25:68:dd:10:dc:39:4e:82:
         7d:db:e0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:12 2024 by rpki-client on console-fra.rpki-client.org