Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File:                     1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier:          uhlNoaPJpDc4rqIaa8ynaAJBQNWoPpCC9WHrhsSdb44=
Subject key identifier:   DA:EC:28:A1:32:73:7A:0B:30:41:D5:C0:4F:2B:CF:85:54:B6:A7:33
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer:       /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial:       019405A116F7ED24BA4BE2567C088805D773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number:          13CB
Signing time:             Fri 27 Dec 2024 01:00:30 +0000
Manifest this update:     Fri 27 Dec 2024 01:00:30 +0000
Manifest next update:     Sat 28 Dec 2024 01:00:30 +0000
Files and hashes:         1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: bxPKmzBlGig2lMFTfhiq8VjzvLLHCFPmJmR7pZlMCLw=)
                          2: VLcwt_MG46zoJLPWAIrECkhpTJI.roa (hash: B4OmaIllIyPP+sKqGyw33Kq24TBDlmw2gAgW6milLdQ=)
                          3: n5f3AmmhF3Lbj24erb9mt0NLXOU.roa (hash: oCzHZVqJ6FXGBEnt7soEf16ZQrU8eZmPKjkyybvcpFo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:a1:16:f7:ed:24:ba:4b:e2:56:7c:08:88:05:d7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
        Validity
            Not Before: Dec 27 01:00:30 2024 GMT
            Not After : Dec 28 01:00:30 2024 GMT
        Subject: CN=daec28a132737a0b3041d5c04f2bcf8554b6a733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:08:99:95:2d:94:e3:70:1a:d6:e0:d3:66:
                    22:68:c7:27:59:2b:17:21:af:b6:f7:ee:a2:3e:ce:
                    7c:67:84:a6:93:bf:2c:b7:96:d4:ad:4d:9c:3d:25:
                    e9:b5:04:aa:78:20:82:36:d8:a3:71:80:c0:63:94:
                    a5:59:fc:af:8b:42:38:6d:5e:cf:c7:fa:3f:88:c5:
                    11:1c:39:c3:40:f0:56:89:69:f1:bd:b1:72:cf:ab:
                    89:a3:7e:f0:97:17:cb:95:d4:a4:4a:09:4c:09:f3:
                    ce:82:fe:82:98:0f:13:04:0d:98:e7:a3:3c:9b:80:
                    4c:b5:04:c4:52:e7:dc:f5:e7:5d:d3:27:89:cb:e2:
                    0d:eb:b6:ee:e6:8a:a5:e1:23:3d:56:fa:46:e3:5a:
                    a6:5f:f6:0e:9b:d7:81:f5:6e:ec:88:e8:f2:c8:8b:
                    e9:82:bf:23:a2:4d:1d:d9:7b:0b:fb:bf:53:42:4d:
                    e0:8a:36:53:c3:f5:c5:b3:eb:9e:bb:25:bd:d7:eb:
                    f8:ab:47:c6:ec:9c:a3:fb:9b:fa:1b:74:37:57:00:
                    88:21:0c:3d:88:e6:1b:75:04:f8:0c:01:23:b7:9b:
                    87:91:28:50:4a:67:b9:66:7d:e9:f8:f5:60:71:1c:
                    79:c5:f5:fa:e5:51:6f:aa:1d:af:ba:32:c2:25:2e:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EC:28:A1:32:73:7A:0B:30:41:D5:C0:4F:2B:CF:85:54:B6:A7:33
            X509v3 Authority Key Identifier:
                keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:af:55:b2:e2:ef:6c:de:5a:4e:59:e3:bb:3e:fc:b9:ff:ba:
         c2:b3:3d:17:9c:84:ad:8d:6d:5d:26:b0:25:d7:21:cc:18:72:
         31:7e:68:27:77:5b:f9:49:17:09:e3:e7:3e:3f:24:28:38:21:
         b5:c6:62:bf:bb:00:44:8f:41:39:98:fe:06:0d:8f:73:a6:d2:
         92:0e:88:a0:09:f1:73:95:ab:31:7a:cb:49:4d:1a:72:6b:da:
         0f:62:5c:52:f2:ab:42:ec:cc:01:71:c6:ea:0d:1e:33:62:86:
         3a:f5:dc:af:d0:93:bd:21:ee:c0:95:e2:78:d5:97:bd:2f:3f:
         b6:88:d5:60:07:79:89:e4:c8:a2:e5:1f:26:7c:76:ed:0a:2e:
         82:a4:48:9e:58:d7:ab:b8:c9:ff:85:a2:e9:13:d1:2d:98:70:
         2a:dd:3f:c9:12:3f:6c:f7:58:3d:bf:a4:3b:d3:f7:b0:5e:89:
         0a:fa:f3:41:8d:61:bf:e7:4a:03:4c:22:64:78:62:a3:44:b4:
         19:5b:fa:8c:7d:61:8b:92:b0:75:43:83:b2:a9:9a:89:79:5f:
         0a:b7:5c:b9:e7:d8:ec:e6:f3:14:87:be:2b:ae:03:8b:27:87:
         6c:84:d0:94:66:29:3e:99:6b:cd:01:3e:8d:ea:5b:11:0f:88:
         3e:f2:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 10:00:55 2024 by rpki-client on console-ams.rpki-client.org