Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
File:                     ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft (raw, json)
Hash identifier:          Q7eocc5VIaZm0L3H0midKA+Vn2l4G55Ls6fvqVcd+5U=
Subject key identifier:   47:0F:32:74:16:4E:5B:B4:76:33:D8:EB:A2:D9:D7:E9:AB:B9:3D:EC
Authority key identifier: 8E:EE:BE:4A:6C:22:D2:B0:FE:D1:76:CB:77:51:0D:99:16:F1:81:1F
Certificate issuer:       /CN=8eeebe4a6c22d2b0fed176cb77510d9916f1811f
Certificate serial:       01935764A019534EA0A2B00E0CA1A3E79801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ju6-Smwi0rD-0XbLd1ENmRbxgR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
Manifest number:          0656
Signing time:             Sat 23 Nov 2024 05:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:32 +0000
Files and hashes:         1: ju6-Smwi0rD-0XbLd1ENmRbxgR8.crl (hash: 2J+mMvVynjx3Nt0eY9PYnBwoZ0HXFSy7xWjt+igU5I0=)
                          2: knJ3v9SuBpUggvU871xdzBEfYLU.roa (hash: e40bX06EmnEzxwP6ecyEMZb9QrUcKFNFjkQraV+6IFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ju6-Smwi0rD-0XbLd1ENmRbxgR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:a0:19:53:4e:a0:a2:b0:0e:0c:a1:a3:e7:98:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eeebe4a6c22d2b0fed176cb77510d9916f1811f
        Validity
            Not Before: Nov 23 05:00:32 2024 GMT
            Not After : Nov 24 05:00:32 2024 GMT
        Subject: CN=470f3274164e5bb47633d8eba2d9d7e9abb93dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:ce:25:69:c2:1a:fe:85:c3:99:67:b0:d1:
                    73:9e:92:28:34:59:86:47:69:f3:17:a9:fe:a0:58:
                    c9:3b:0b:92:20:b5:75:f8:f7:e5:d0:7f:6c:71:b7:
                    5a:c5:58:6f:df:7a:4e:d4:3b:b9:b9:b3:1a:fa:da:
                    16:e8:08:28:d4:a4:29:25:5b:b7:da:09:99:b2:13:
                    74:43:50:6c:b1:17:b9:7e:93:10:f4:47:eb:d0:28:
                    9c:20:43:42:b1:c4:b6:f5:36:9b:96:cb:5a:0e:2e:
                    b3:5b:ce:20:4a:93:df:cf:2d:b3:4d:0b:c5:c0:3d:
                    5e:2d:a3:74:45:09:81:f7:25:f9:9c:6a:9c:af:e8:
                    d3:de:e1:2e:f7:2d:75:ea:99:4d:eb:f5:0c:f6:df:
                    6e:c3:d2:57:f0:21:ad:ff:04:91:14:ab:7e:58:c1:
                    90:9f:1d:2f:04:8b:33:ad:79:27:03:a5:bc:0a:ed:
                    69:be:09:fe:74:7c:1c:d1:86:f7:6e:6b:7c:6b:db:
                    a0:29:05:1e:37:8a:36:da:b8:77:77:eb:f2:99:5b:
                    69:a6:4b:8b:ee:00:93:c9:7f:e6:06:c1:2b:60:16:
                    80:4a:10:62:c0:fb:21:5b:d7:b4:2e:30:e6:e0:43:
                    aa:90:47:0f:a5:ac:89:c6:f9:48:6a:e0:a2:bd:e7:
                    3a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0F:32:74:16:4E:5B:B4:76:33:D8:EB:A2:D9:D7:E9:AB:B9:3D:EC
            X509v3 Authority Key Identifier:
                keyid:8E:EE:BE:4A:6C:22:D2:B0:FE:D1:76:CB:77:51:0D:99:16:F1:81:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju6-Smwi0rD-0XbLd1ENmRbxgR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/172e1a-793c-432e-b5cb-8116df399dab/1/ju6-Smwi0rD-0XbLd1ENmRbxgR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:47:5e:85:3f:3d:37:fd:07:f6:30:26:55:1a:de:c5:8e:cb:
         6f:ea:02:04:a5:4c:75:7a:27:fd:89:c4:39:24:fd:97:07:6d:
         a2:14:23:bb:24:23:40:e4:dc:3e:89:b9:af:09:c8:3b:0e:8d:
         45:ad:db:15:de:4d:23:98:41:30:69:d8:ac:cd:af:75:f4:ba:
         f5:f6:13:43:b9:94:47:34:00:ce:0b:55:36:86:13:0f:c1:84:
         41:55:19:b7:e6:38:e8:08:28:f2:4f:f8:2e:40:15:ef:00:e2:
         ba:58:bd:fe:30:7a:88:48:c1:03:6f:bd:d9:a5:f1:b4:77:e0:
         1d:c8:60:65:f1:73:7e:63:0a:03:93:9e:82:bd:21:cf:1e:40:
         76:44:a4:58:4e:24:c9:dd:bb:09:62:67:6a:0a:84:aa:9a:1b:
         97:74:3a:cb:09:90:9b:f8:38:b6:e2:ee:c3:5a:0d:a7:d9:59:
         51:13:7f:b6:bc:dd:2d:7d:66:6f:b4:07:fa:9c:2b:6c:6a:a5:
         bf:db:27:0d:63:d8:84:75:65:25:45:64:dc:18:b9:2f:52:4d:
         d1:d5:d0:f7:19:3c:44:7c:8b:01:04:2d:fd:5c:c6:76:de:2e:
         a2:3a:5b:4f:4a:84:a7:63:f6:0a:d0:4e:c0:e4:b9:a5:14:a7:
         1a:6f:2a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:44 2024 by rpki-client on console-fra.rpki-client.org