Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File:                     j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier:          PyaEBsjd0DBghd0fKGwkNFVK7Ci5k272jWuHA3G8vyg=
Subject key identifier:   2F:9E:41:D6:84:3B:A1:75:55:73:9E:05:AC:94:8A:5D:2C:1D:CF:A7
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer:       /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial:       01936B22B49A7C0F3D66C3398B3CE05B820D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number:          07F2
Signing time:             Wed 27 Nov 2024 01:00:56 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:56 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:56 +0000
Files and hashes:         1: KnZ0ZSW47tSLqQd0wPKskRLRShM.roa (hash: D9huI5DR/POTm7eSVZdmpxYYfTgXH8G7ceQzQDvW9hQ=)
                          2: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: nHs25QZSwLedesKnt6FtoQfrlSbf1LSG1u6+Dn8n9kA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:b4:9a:7c:0f:3d:66:c3:39:8b:3c:e0:5b:82:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
        Validity
            Not Before: Nov 27 01:00:56 2024 GMT
            Not After : Nov 28 01:00:56 2024 GMT
        Subject: CN=2f9e41d6843ba17555739e05ac948a5d2c1dcfa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:21:c7:04:94:60:ae:5b:a7:80:09:18:e2:
                    4e:24:b0:27:33:38:27:66:4e:fb:7d:a6:04:28:6a:
                    1e:43:df:e9:7a:cf:93:17:75:3d:20:5d:5f:e0:d6:
                    cd:75:43:87:86:f4:a9:95:99:cc:a9:57:ad:65:bc:
                    4b:57:8d:89:9c:a8:aa:da:26:1f:a5:3f:ea:af:83:
                    47:21:ad:51:d8:b2:83:79:3f:e0:70:87:6a:53:00:
                    be:a5:6c:7b:56:6a:e6:fa:39:5f:12:92:1f:e0:b4:
                    fa:3c:dc:89:da:cd:d4:75:09:06:9a:07:04:29:5f:
                    88:4c:c7:b9:c5:2c:bc:3d:19:3f:c9:a6:e9:bc:a0:
                    67:1e:2f:7f:8f:1f:46:2c:9f:66:3f:07:6c:2b:72:
                    9a:8f:55:46:d9:6c:8e:d0:f0:70:ea:6c:c1:36:2b:
                    be:74:a6:a2:51:3d:b0:ba:16:d9:f8:45:96:9b:84:
                    48:8d:13:8c:d4:49:1e:0f:f2:d1:59:b0:27:62:e3:
                    fc:98:9b:40:f9:21:98:9c:ca:de:f6:cf:42:64:76:
                    0c:28:4a:ae:29:54:8d:02:33:1b:30:80:d2:ad:00:
                    48:1b:46:03:2f:fb:cd:99:aa:98:ec:64:44:39:55:
                    1b:df:71:25:c2:c5:da:0c:e1:e5:ec:2f:22:c0:ff:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9E:41:D6:84:3B:A1:75:55:73:9E:05:AC:94:8A:5D:2C:1D:CF:A7
            X509v3 Authority Key Identifier:
                keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:75:1e:a8:4d:db:c7:43:3c:b9:7a:ed:94:e3:71:2b:26:3e:
         8c:1c:b1:49:ec:14:57:73:3a:df:5c:be:a9:23:28:f9:7d:30:
         50:72:81:77:af:cd:f4:f3:63:40:61:91:d8:ed:fe:0e:a8:29:
         7d:fe:a6:2f:fe:90:b8:8c:bf:b0:ce:4b:11:11:d1:75:6d:97:
         b9:e8:89:ad:56:d2:23:97:98:55:9e:5e:c9:94:54:89:05:0a:
         46:d9:84:8f:06:13:99:fc:fc:53:3b:f7:99:81:07:ae:cc:d6:
         f7:65:64:21:63:82:3e:a0:0f:83:e1:c0:52:5d:89:8c:20:97:
         90:cd:b8:eb:dc:cf:db:bf:db:59:26:ff:2e:a7:f1:23:eb:b8:
         e9:a7:60:4c:8d:16:ac:84:6a:4a:c8:4d:75:a0:b8:0a:13:33:
         97:21:9e:1d:aa:6d:1e:35:cd:15:08:bb:56:c6:2a:3c:a4:00:
         70:42:30:fb:03:9b:4e:e9:5c:59:90:9e:45:25:f4:f3:6c:c8:
         4b:85:7d:98:ca:7d:db:96:c9:14:b1:d7:79:de:a3:a3:60:05:
         a5:26:28:cf:8e:84:93:1a:53:3c:64:e9:d5:ad:b5:43:76:79:
         4f:7d:29:45:53:e3:d2:13:79:20:f4:15:79:cf:e7:9e:08:c7:
         07:9a:b4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:35:22 2024 by rpki-client on console-ams.rpki-client.org