Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
File:                     Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft (raw, json)
Hash identifier:          6gErKBFkjVM07VKRopjEuFr8ylteR3YYmwfp4yjsIDk=
Subject key identifier:   C8:A0:8E:EF:D3:E5:6A:0A:49:0D:E0:57:60:27:19:35:50:2D:97:90
Authority key identifier: 23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25
Certificate issuer:       /CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
Certificate serial:       01935879480D87699215FD5587670CC05DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
Manifest number:          101F
Signing time:             Sat 23 Nov 2024 10:02:43 +0000
Manifest this update:     Sat 23 Nov 2024 10:02:43 +0000
Manifest next update:     Sun 24 Nov 2024 10:02:43 +0000
Files and hashes:         1: Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl (hash: 10hvz8AHuD20gdcwqCm4Ph9hcxk3Je/Cg2jDD3hb8X0=)
                          2: ks6QKpubsw0WwceKutFI1bEnnJ0.roa (hash: qSmT0U60trdFL6qfVbb+Aww5YObQVulxjFOf9eYHZG8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:79:48:0d:87:69:92:15:fd:55:87:67:0c:c0:5d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233e3828411bafab006e75fd0dd5f5f9ef55ec25
        Validity
            Not Before: Nov 23 10:02:43 2024 GMT
            Not After : Nov 24 10:02:43 2024 GMT
        Subject: CN=c8a08eefd3e56a0a490de05760271935502d9790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:bf:68:7a:23:10:f1:03:c4:8f:b8:f7:14:
                    da:5c:6b:c5:6b:b0:8b:52:25:fc:81:26:10:fd:5c:
                    1b:a9:7c:c5:92:85:e3:3f:d5:37:14:6e:c7:ce:43:
                    a8:cf:a3:be:17:6f:72:4c:41:46:6d:8a:51:34:c0:
                    cf:49:22:4a:8a:65:c8:5d:4b:f7:c8:fe:64:20:b2:
                    c3:94:aa:ef:1f:57:20:aa:84:23:69:4e:6c:16:a7:
                    b5:23:b5:25:57:40:fb:fa:2a:be:5d:e8:3b:4d:3c:
                    f4:3d:9a:e6:74:97:fc:2d:44:7f:53:6d:c1:93:c5:
                    db:d0:02:f3:e4:35:0c:e8:7b:35:df:5b:b8:6a:51:
                    f3:21:85:af:4c:de:ac:ed:3a:12:be:bd:28:16:a6:
                    d1:6d:79:e1:f1:a7:3b:a9:d4:4f:9a:55:f6:7c:76:
                    df:f0:eb:3b:50:57:0f:8c:5d:31:43:e4:11:9d:30:
                    35:70:57:c6:5e:cb:e0:ee:aa:63:ab:2b:08:1a:07:
                    76:8f:d6:d5:3c:8e:89:98:c4:b6:ab:ea:6d:de:97:
                    31:50:d2:0e:f3:0d:7a:b6:99:a7:c8:4a:d1:a7:8d:
                    8f:b7:34:62:77:ea:76:83:2a:00:4b:5a:d0:37:5f:
                    6a:8e:e0:e5:a8:71:a8:59:96:ef:e7:ff:ae:82:42:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A0:8E:EF:D3:E5:6A:0A:49:0D:E0:57:60:27:19:35:50:2D:97:90
            X509v3 Authority Key Identifier:
                keyid:23:3E:38:28:41:1B:AF:AB:00:6E:75:FD:0D:D5:F5:F9:EF:55:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz44KEEbr6sAbnX9DdX1-e9V7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a6cffc-be64-4d08-94a6-a15f0e78a5a9/1/Iz44KEEbr6sAbnX9DdX1-e9V7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:19:a1:54:58:f0:a4:c3:b4:00:dd:8a:d3:98:86:85:b3:b6:
         36:78:59:78:df:1c:43:56:f5:f0:68:74:30:9d:20:e0:d6:68:
         ed:8b:c4:15:3e:6b:31:9d:8a:da:54:1d:d4:d1:d4:b8:cf:3b:
         75:8c:20:90:e7:b3:5b:9b:87:44:95:8b:9e:70:c7:be:df:93:
         42:4d:ec:ce:47:bb:01:24:55:a8:86:80:6b:36:d7:3a:5d:02:
         88:d1:d8:12:39:82:3d:18:2a:d3:54:c1:96:ac:ae:36:d4:6f:
         0f:eb:69:16:47:f9:c8:29:28:62:ef:74:a8:d9:30:d3:c9:ac:
         32:31:00:e4:e4:4c:ef:7b:31:d4:62:6e:c5:26:6b:f2:cb:6d:
         dd:4c:6a:5f:f2:a2:44:4f:cf:2b:7c:30:0b:fb:75:7b:5f:71:
         48:14:9b:54:3f:6f:e0:eb:ed:49:bd:e9:37:83:ea:bf:0a:4a:
         76:bb:52:ed:a6:62:43:07:79:32:08:59:f5:0f:11:cb:d0:1d:
         48:10:c2:19:18:a2:c6:de:4b:e8:21:2d:89:0f:a2:fc:c9:7b:
         6b:d2:85:87:c0:32:77:cb:bb:46:df:de:bd:74:dc:ad:b1:eb:
         d7:84:7b:b0:21:98:7d:a8:ba:49:1f:65:e4:bc:ee:5b:77:bb:
         88:a1:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:22 2024 by rpki-client on console-fra.rpki-client.org