Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File:                     fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier:          qeCOKnNJAh9MzpUN1c/jOftkyS7KsbLQMj8iIHNHiLs=
Subject key identifier:   FA:71:A1:91:88:63:2E:83:9C:21:A9:B4:C2:EF:95:4E:8C:B7:4A:8E
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer:       /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial:       019355AD3AF33554A6BE65C566B21D7A8F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number:          89
Signing time:             Fri 22 Nov 2024 21:00:36 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:36 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:36 +0000
Files and hashes:         1: cVmHsP8Rowa_T2Kx7w85WzFqUtI.roa (hash: eCzXrFeAfULRCr6VQpA1RPAjIXUzXuPgfwgHNCZsv5c=)
                          2: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: OjjD3vOnxWW8L2D8aXTRjglHludBOsOxLSo9Akem2HA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:3a:f3:35:54:a6:be:65:c5:66:b2:1d:7a:8f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
        Validity
            Not Before: Nov 22 21:00:36 2024 GMT
            Not After : Nov 23 21:00:36 2024 GMT
        Subject: CN=fa71a19188632e839c21a9b4c2ef954e8cb74a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:6a:3b:36:2a:43:f4:59:05:0e:ef:21:a0:
                    c3:f4:c3:8f:8e:5e:0c:8f:49:d4:45:39:54:00:70:
                    ee:49:d3:31:f5:1e:2f:24:96:19:2b:22:2a:de:bd:
                    45:c8:3b:39:57:43:ec:b5:5b:a8:2e:2e:56:9b:e4:
                    25:00:2c:8f:5a:83:82:9d:00:82:8c:8e:06:b5:ce:
                    f5:89:8e:b8:6c:32:a6:82:23:79:f9:cc:50:40:b4:
                    b9:9d:e7:3d:93:27:ac:1c:6d:ad:2c:ea:2b:2c:b7:
                    4f:00:49:d1:e3:34:49:7c:00:db:67:cb:2c:46:d9:
                    5c:14:c2:81:2c:4a:9e:c2:4d:ff:6c:ef:c6:31:49:
                    08:94:59:7b:10:72:2f:7e:8f:87:49:7d:27:12:83:
                    55:30:22:a3:60:d9:bc:db:2c:14:45:66:f2:6e:c5:
                    87:79:88:43:61:d2:9a:18:03:74:2f:91:ca:2e:ac:
                    64:f0:c4:c1:e3:84:46:1f:3a:0e:7d:a6:e1:92:d6:
                    75:08:13:46:12:b1:94:06:87:48:ed:be:9a:10:41:
                    10:a6:22:f6:5e:6e:49:10:bf:eb:91:92:ca:8d:fe:
                    77:c4:ef:d1:07:55:da:50:e6:f8:06:14:5b:45:47:
                    7c:a0:8e:52:9f:6c:4c:c9:a4:6b:6c:73:81:c5:f2:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:71:A1:91:88:63:2E:83:9C:21:A9:B4:C2:EF:95:4E:8C:B7:4A:8E
            X509v3 Authority Key Identifier:
                keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:67:ff:e8:5f:32:7d:b7:b9:c7:14:86:61:fb:61:02:80:33:
         85:6c:1d:e0:8e:3f:7e:a1:52:51:5a:4d:dd:21:47:72:9b:b0:
         2f:aa:30:b9:5c:a6:77:89:1b:4d:74:64:76:ed:9b:fc:3f:39:
         59:33:c0:f1:79:b9:b4:1e:b9:c1:0e:8f:b9:70:87:7d:16:49:
         ba:4d:2f:e2:bf:4d:01:11:e9:b3:a5:92:b1:78:5a:55:4e:a2:
         ad:7f:29:b1:c7:0d:2f:09:95:89:a5:41:35:9c:c3:d7:8e:16:
         dd:c3:16:98:59:04:57:ad:80:66:cf:8b:ad:43:a9:dc:ff:16:
         ea:75:f2:ff:04:26:e4:6b:c2:55:4c:9a:99:f1:58:fe:cc:79:
         81:3a:ea:c8:1b:ba:02:d4:b1:cc:7e:38:49:47:3b:a6:5e:02:
         87:93:cf:2c:fc:0a:bb:51:03:89:ae:00:9f:56:81:d5:56:c6:
         fc:fa:30:ac:58:eb:b6:0c:64:3c:ec:56:f4:62:be:b6:af:94:
         01:6c:da:ce:d1:a4:85:91:97:2b:38:89:e1:00:7d:a3:a4:8f:
         fe:c4:a9:96:a5:89:b8:51:1b:44:87:8f:a0:32:f8:c3:a0:75:
         42:eb:a7:fc:5b:21:b8:55:59:90:41:88:b3:1c:df:ac:0d:d2:
         97:b9:e5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:21 2024 by rpki-client on console-fra.rpki-client.org