Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.mft
File:                     foYqjKWsvWxd_CQSbDOqCpTg4fI.mft (raw, json)
Hash identifier:          Jjz0Dy8gfNlJNL1oVI2uWjO7jcoHPAkdu0Ppo8/gdlI=
Subject key identifier:   1F:4B:7B:E9:E0:69:82:DC:E5:7E:69:64:60:1B:ED:D1:86:76:9A:5F
Authority key identifier: 7E:86:2A:8C:A5:AC:BD:6C:5D:FC:24:12:6C:33:AA:0A:94:E0:E1:F2
Certificate issuer:       /CN=7e862a8ca5acbd6c5dfc24126c33aa0a94e0e1f2
Certificate serial:       019358779F06BA125C965DC8261729605D9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/foYqjKWsvWxd_CQSbDOqCpTg4fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.mft
Manifest number:          1304
Signing time:             Sat 23 Nov 2024 10:00:54 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:54 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:54 +0000
Files and hashes:         1: cpLSd6188Ka3T8fFLt_H-1a7kP8.roa (hash: tNYmCYxqBJK08gwUDQkQyN/gKBIRIAio9QBU31PacN4=)
                          2: foYqjKWsvWxd_CQSbDOqCpTg4fI.crl (hash: TQqFkFDjTe53rtpt9A63GV7UcPaFJJv4ykMsr3p9TUI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/foYqjKWsvWxd_CQSbDOqCpTg4fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:9f:06:ba:12:5c:96:5d:c8:26:17:29:60:5d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e862a8ca5acbd6c5dfc24126c33aa0a94e0e1f2
        Validity
            Not Before: Nov 23 10:00:54 2024 GMT
            Not After : Nov 24 10:00:54 2024 GMT
        Subject: CN=1f4b7be9e06982dce57e6964601bedd186769a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a1:17:56:5d:aa:bb:3d:57:39:48:8b:9e:b1:
                    ab:f5:67:b8:1a:b4:9d:41:d6:e8:22:9d:68:e6:a0:
                    fc:43:34:c0:db:a1:41:55:b9:2b:03:c9:51:4d:8b:
                    18:62:e1:dc:9c:70:08:f7:e1:fa:f8:b7:c4:ba:93:
                    0a:ed:6a:9f:7a:6b:2b:7e:29:8d:ef:ad:8e:b1:c4:
                    54:05:9c:2e:c7:21:13:ba:a8:1d:10:e2:a8:6a:00:
                    13:b7:5b:a2:db:56:9b:ae:b0:6a:4d:a0:fb:41:cf:
                    eb:4c:9a:23:b8:bb:3b:7d:6d:78:8b:c3:02:c2:9f:
                    93:0a:e4:4b:bc:09:00:46:ea:d7:90:f9:af:77:1b:
                    82:aa:91:8b:c3:96:4f:c5:88:47:91:86:0b:0f:cd:
                    7e:bc:00:af:59:f1:39:f2:f0:18:09:f1:b6:b5:d8:
                    63:00:09:fd:c1:68:c9:38:15:b7:a0:b2:c6:45:81:
                    bf:91:88:67:73:f0:19:9b:ab:20:51:f1:fb:aa:af:
                    e5:1b:71:e8:86:f3:01:ce:84:d2:6d:20:ff:f6:6d:
                    22:3f:59:49:d1:26:22:00:5e:6a:09:4f:d7:39:c1:
                    a7:fa:78:54:5b:84:f4:f7:80:d2:08:e2:cd:dc:36:
                    2b:55:f3:ba:f5:db:65:d4:23:7d:13:22:2c:3b:a5:
                    f2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4B:7B:E9:E0:69:82:DC:E5:7E:69:64:60:1B:ED:D1:86:76:9A:5F
            X509v3 Authority Key Identifier:
                keyid:7E:86:2A:8C:A5:AC:BD:6C:5D:FC:24:12:6C:33:AA:0A:94:E0:E1:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/foYqjKWsvWxd_CQSbDOqCpTg4fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a587e1-4187-4b1b-b605-7acb83199967/1/foYqjKWsvWxd_CQSbDOqCpTg4fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:84:09:d7:92:f1:f8:da:83:ec:00:4d:df:43:e5:64:bb:f9:
         dd:ce:8f:18:dc:d5:f9:1d:1e:47:5e:34:99:0b:e2:e2:57:9b:
         f6:3b:12:ad:ae:e4:be:cb:33:5f:ae:fb:1c:4f:66:47:fd:67:
         39:a3:78:14:ca:89:4d:0d:6b:eb:76:f2:0d:14:5a:77:51:73:
         e0:3b:f0:94:8c:7b:93:42:2b:81:db:2e:98:4c:ce:21:39:2a:
         bb:16:3f:5c:09:d2:e4:9b:a9:2a:63:24:11:9c:e7:bd:96:be:
         fe:4e:8c:30:3a:44:85:b0:21:99:b4:66:2d:92:49:31:33:05:
         41:22:51:62:bb:34:bf:61:be:b5:c3:f1:d5:a1:17:54:18:c5:
         50:43:ab:07:14:b6:13:6e:de:b3:0d:6e:6e:9b:f3:77:c8:62:
         8d:eb:b5:1d:61:4f:29:bf:0f:d8:e0:6d:49:f7:f8:89:fc:68:
         c6:a8:59:d2:10:55:2f:21:7a:fb:67:ad:58:49:cf:24:2c:2a:
         8b:31:b7:c7:e4:d1:ae:77:5c:91:cd:65:b6:e9:41:08:91:41:
         b3:c8:c1:60:0e:58:d7:10:b4:26:43:26:e6:63:83:9e:c7:31:
         57:e7:b9:00:c3:2f:5d:76:1e:3f:00:3f:87:8c:15:4d:16:3a:
         37:ca:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:22 2024 by rpki-client on console-fra.rpki-client.org