Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
File:                     sffQCUrcmNmwMnIOgePbWqdYHHQ.mft (raw, json)
Hash identifier:          V+YX1/l6Cc1G7iKtTcH6ehFRKP5+/W+7sfW9xiYJk6Q=
Subject key identifier:   BF:3A:88:9B:73:46:EB:A4:FB:37:3F:DC:6E:D9:74:EE:23:FD:1A:A4
Authority key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
Certificate issuer:       /CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Certificate serial:       01936A46963D7F67C9E1843A4A1932FB0268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
Manifest number:          0902
Signing time:             Tue 26 Nov 2024 21:00:31 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:31 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:31 +0000
Files and hashes:         1: kYQWe7abGXbCa7mxrBpfV99WXuw.roa (hash: l0b1gGrZwDnL5wKWiyBsMK5v64l5R3hgleR9XiY4n5c=)
                          2: sffQCUrcmNmwMnIOgePbWqdYHHQ.crl (hash: dgY7+F7GT9aw+VYnkMfCaOZ9/Fy5aHrLB6iWLXkDnls=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:96:3d:7f:67:c9:e1:84:3a:4a:19:32:fb:02:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
        Validity
            Not Before: Nov 26 21:00:31 2024 GMT
            Not After : Nov 27 21:00:31 2024 GMT
        Subject: CN=bf3a889b7346eba4fb373fdc6ed974ee23fd1aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:fa:53:61:14:f7:bb:59:d2:48:5d:e2:c9:
                    49:8e:72:87:88:b9:a3:55:b8:72:e8:dd:47:fb:51:
                    d8:99:03:0c:ef:b0:43:01:b8:c5:c4:df:0f:dd:a5:
                    71:a4:11:39:37:2a:bb:d2:e1:25:fb:0f:99:74:52:
                    58:fe:ef:85:94:22:38:ed:ae:bb:88:2c:22:88:e4:
                    93:73:c4:81:8c:9d:54:b9:58:3f:9f:ce:08:5e:4c:
                    72:1c:b1:6c:e4:5a:9a:75:08:4a:39:93:96:83:9d:
                    44:38:53:82:27:76:41:18:9c:f5:a3:9d:60:f9:c6:
                    c3:25:ce:c8:2a:d6:1d:14:e4:f1:85:29:ab:b0:f1:
                    24:fc:c1:79:8b:c6:a9:47:fd:f6:85:31:50:6f:08:
                    6e:dc:02:d1:2e:09:57:0f:d6:d4:91:5f:d1:81:a9:
                    7d:78:ce:87:c3:b5:b6:0d:49:74:f9:37:77:19:02:
                    07:ad:16:98:13:b4:16:06:2d:88:8e:68:36:14:3c:
                    94:87:ce:6f:b6:4e:6e:6f:e8:91:b6:1c:c6:fe:22:
                    29:91:47:dd:21:28:3d:c5:54:93:76:bc:c1:bc:9a:
                    cc:76:93:fc:ce:93:4c:a4:95:e9:36:c1:7d:8e:f9:
                    22:37:65:6b:dc:cf:f3:a3:32:5e:d5:7d:ae:dc:1d:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3A:88:9B:73:46:EB:A4:FB:37:3F:DC:6E:D9:74:EE:23:FD:1A:A4
            X509v3 Authority Key Identifier:
                keyid:B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:34:25:21:c8:78:4a:5e:17:78:31:2b:53:1b:2f:ae:a5:38:
         9f:76:d9:23:97:4f:98:c2:cc:c6:e9:33:cf:61:f2:ce:e9:17:
         4b:ec:90:d4:62:5f:58:9e:cb:50:8d:70:c6:b6:fa:89:59:30:
         c1:b2:4d:a5:54:1b:cc:88:46:4f:3a:d2:db:a9:3f:19:a7:ff:
         fe:5c:d1:cf:85:93:e4:2a:e4:e3:af:66:82:39:1f:10:0c:e4:
         37:01:4e:a7:d5:d4:bd:bc:dc:03:a0:01:82:65:81:44:bc:4b:
         02:b1:32:9a:2b:81:9b:61:83:7f:1f:6f:b8:67:dd:1c:55:98:
         1a:ac:c6:a5:21:fd:b3:17:e8:27:f3:c0:3f:42:db:02:f7:77:
         47:c0:f2:a9:f0:62:a3:dc:d3:ff:2a:00:73:07:00:66:96:4b:
         a2:1b:01:45:c9:78:96:8e:31:c4:39:14:4d:a3:23:55:07:29:
         75:27:15:c4:d4:b3:36:3d:2d:8c:b9:de:b6:a2:d1:2b:d1:a4:
         fe:3b:6c:3a:fa:27:17:4d:d7:4e:bf:1e:dc:73:07:a1:b1:b8:
         4b:f6:04:99:f2:3c:ca:16:73:22:2a:e0:9b:33:dc:99:b4:ed:
         fa:3b:36:b7:dd:c8:ca:e6:a5:2d:61:c6:89:de:16:63:4a:81:
         c4:9a:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:33:26 2024 by rpki-client on console-ams.rpki-client.org