Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File:                     1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier:          l5dgMh1eWJo73AFdKdF6appkPtuRADBagg1JHYhwKho=
Subject key identifier:   1F:7B:87:29:EF:C2:83:B6:AC:75:AD:00:A5:30:54:D2:A2:A1:BF:91
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer:       /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial:       0193568AD58E501B8024284467722FE40889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number:          1305
Signing time:             Sat 23 Nov 2024 01:02:39 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:39 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:39 +0000
Files and hashes:         1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: RifQJWnBJo4iXypvpWd8lkIP86bZwPuNaqQ1ztt1yXc=)
                          2: QzlGiWv7IOP17jhB5YJtotpK1IE.roa (hash: D6A9W83Vd2ISppjp1kQCk5EAEzohA/4EEsTr6/ruVOI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:d5:8e:50:1b:80:24:28:44:67:72:2f:e4:08:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
        Validity
            Not Before: Nov 23 01:02:39 2024 GMT
            Not After : Nov 24 01:02:39 2024 GMT
        Subject: CN=1f7b8729efc283b6ac75ad00a53054d2a2a1bf91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:bf:ce:24:2d:f4:d4:a3:b3:8a:ab:cd:6c:
                    26:aa:f0:ad:8b:9c:2a:d1:d9:82:47:9e:36:1c:b6:
                    35:63:b6:a4:d7:e0:a5:c3:3d:df:a3:aa:66:1b:94:
                    bc:86:36:98:7b:ea:28:5d:9c:4d:a9:6d:d2:3a:1d:
                    4c:12:a8:57:9c:2c:ff:10:13:a4:2d:db:d7:51:cf:
                    67:ff:80:9b:c8:6b:66:a8:90:2e:d0:89:21:91:65:
                    bd:28:ec:e0:ae:f6:66:64:e9:22:1c:6a:cc:a0:cf:
                    bd:0d:ac:7b:2c:76:3d:ac:96:7f:59:3a:09:78:15:
                    60:42:a7:70:93:df:a5:64:bf:c0:e9:e7:43:c9:68:
                    4f:dd:ac:10:dd:47:23:94:5e:90:8e:53:b8:fe:8f:
                    db:f6:22:3d:27:a6:1e:1e:f4:0e:c7:b3:67:d2:fe:
                    d7:a0:f2:aa:c9:6d:1d:1c:f5:90:b8:44:c5:d5:da:
                    4e:ad:cb:17:2e:80:63:07:c5:32:46:a4:64:46:ab:
                    9d:06:23:8e:89:2a:e3:11:d3:65:db:36:c5:0f:7e:
                    67:0a:70:a9:63:65:9a:64:26:67:42:81:df:5d:f6:
                    03:e8:09:fa:3d:1e:cc:39:07:49:5a:2a:39:fb:77:
                    c4:15:fd:96:55:d9:ae:f6:1d:8f:5c:0e:a3:82:19:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7B:87:29:EF:C2:83:B6:AC:75:AD:00:A5:30:54:D2:A2:A1:BF:91
            X509v3 Authority Key Identifier:
                keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:04:9d:92:b6:b9:cc:09:71:c6:ea:a3:8c:84:f7:31:03:54:
         ea:67:4e:04:00:42:ff:16:38:64:cf:43:c7:8a:f4:d9:2d:bb:
         77:39:69:10:aa:cf:15:a6:fc:60:b9:9b:78:d7:a8:0b:d0:c6:
         5d:3a:75:a5:bb:6f:b0:75:07:ab:50:21:79:f5:02:30:30:52:
         9d:a2:2d:22:0b:16:50:b8:ca:48:b0:b7:6c:1c:23:bb:5a:35:
         f7:71:80:07:ed:44:93:37:89:25:4e:e7:2c:b0:46:a7:53:bb:
         ac:f4:ba:c8:69:e6:01:e8:03:fe:32:70:94:30:05:35:26:e4:
         84:0f:92:38:99:4a:13:57:f8:e6:f9:e9:38:34:28:52:f0:c5:
         3f:0f:91:82:ec:51:6b:d3:90:5a:2b:e5:cf:ce:d6:77:75:ad:
         8f:09:a6:d5:10:e7:93:cc:89:a2:50:b1:b7:19:c8:df:b0:d4:
         a9:8a:32:43:11:63:7a:94:9c:90:26:b8:2a:54:03:f6:cc:b4:
         67:55:11:3a:20:d1:c0:45:e8:13:b5:53:a6:bb:8b:79:ce:c8:
         c1:90:ae:b9:6a:57:49:44:07:19:20:90:33:5b:ac:5e:00:f4:
         07:f2:42:ae:0f:43:a4:9a:8c:99:18:e5:ea:93:4b:e7:17:3f:
         00:cf:bf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:06 2024 by rpki-client on console-fra.rpki-client.org