Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
File:                     she1rEZ0EuJJxE4nOcKJ67BM0zc.mft (raw, json)
Hash identifier:          pgib2OhVUzJCG1wtOpuVJtbpC1hwx4zlRHlm+rfiXsw=
Subject key identifier:   BA:C6:9B:00:09:3A:26:36:AF:CB:D9:DE:3A:13:95:0C:21:1A:6C:B5
Authority key identifier: B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37
Certificate issuer:       /CN=b217b5ac467412e249c44e2739c289ebb04cd337
Certificate serial:       019365FDBB3708DF3A70767F270DCA41E449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
Manifest number:          0721
Signing time:             Tue 26 Nov 2024 01:02:27 +0000
Manifest this update:     Tue 26 Nov 2024 01:02:27 +0000
Manifest next update:     Wed 27 Nov 2024 01:02:27 +0000
Files and hashes:         1: 1-SEfF-zAyv4LtcTDj-66Zlg-btQ.roa (hash: b9djkwbGVQ217VQux2vVeROxgAC7tB62rSIBs5BF2zY=)
                          2: she1rEZ0EuJJxE4nOcKJ67BM0zc.crl (hash: CcF8ita2JIFkX8efVMTHx9iGPZIvjAcy8hd1jcu8UTw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fd:bb:37:08:df:3a:70:76:7f:27:0d:ca:41:e4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b217b5ac467412e249c44e2739c289ebb04cd337
        Validity
            Not Before: Nov 26 01:02:27 2024 GMT
            Not After : Nov 27 01:02:27 2024 GMT
        Subject: CN=bac69b00093a2636afcbd9de3a13950c211a6cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a4:e9:f6:39:be:1f:5d:20:bb:a6:dc:e1:3d:
                    24:a5:e1:26:4e:12:8b:b7:34:71:c2:88:7c:3b:d2:
                    e9:02:56:9c:77:59:67:d5:b6:6c:b3:85:c7:1a:13:
                    b7:e3:0c:ce:3b:dd:46:7e:c3:b3:57:1e:62:bc:c0:
                    cd:ca:64:86:7b:8a:04:e3:7c:87:3f:da:5e:3d:de:
                    bc:f1:f3:00:dc:3a:54:61:c1:c6:7f:16:05:15:aa:
                    94:87:f1:eb:60:03:a0:a0:76:10:07:51:89:04:6d:
                    7a:68:a2:d2:cb:f3:1f:f6:3b:a0:36:b0:60:d3:5b:
                    ce:b8:bf:6e:b2:eb:eb:4f:ea:e6:14:a4:05:d0:c5:
                    f9:0a:94:0c:f9:f0:93:26:14:15:66:18:47:a8:72:
                    f0:d0:70:61:ee:8c:68:7a:b8:d5:37:80:fe:ef:cf:
                    34:5f:34:7e:4a:9c:6f:8a:00:d5:ee:18:bf:17:11:
                    b5:a9:8f:3a:f3:e4:80:c2:77:00:27:42:73:5e:dc:
                    3d:ce:fa:a5:de:41:32:3b:b8:46:3d:17:89:46:4b:
                    62:ee:9b:d2:85:8f:4b:fc:6a:65:8c:d5:c5:58:52:
                    25:f1:df:78:8b:23:0a:c4:e2:83:6f:d1:09:2b:52:
                    58:e3:f6:b7:6f:77:cf:75:5f:e1:15:0f:7a:8c:18:
                    b4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C6:9B:00:09:3A:26:36:AF:CB:D9:DE:3A:13:95:0C:21:1A:6C:B5
            X509v3 Authority Key Identifier:
                keyid:B2:17:B5:AC:46:74:12:E2:49:C4:4E:27:39:C2:89:EB:B0:4C:D3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/she1rEZ0EuJJxE4nOcKJ67BM0zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b98336-4c3e-4795-a1f7-3dbd32d6992e/1/she1rEZ0EuJJxE4nOcKJ67BM0zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:a6:c7:31:c7:bd:6e:95:9d:3e:5f:13:e9:73:35:44:ad:
         5f:a1:ad:48:1d:62:6d:40:0a:1f:73:6c:df:8b:a9:e7:4f:4f:
         33:13:e2:2b:4d:e9:21:90:fa:43:57:4d:99:53:34:f6:7a:79:
         44:18:ed:a0:b5:39:06:87:67:4e:2b:4f:7b:88:48:e4:7c:39:
         2d:6c:ad:1e:6b:6c:bc:60:39:75:d6:f8:87:eb:de:96:5f:65:
         c3:46:fe:e7:07:96:94:41:f4:c3:b3:04:4d:02:4c:82:e1:00:
         3c:58:d0:e7:78:88:c0:d3:e5:0c:d2:b1:05:ae:44:52:ed:78:
         19:3e:3a:29:03:54:b6:93:b2:0c:19:a1:44:e0:af:5e:a0:e0:
         85:ca:f0:e3:04:24:78:75:53:10:2c:3e:a3:ca:53:f1:8d:53:
         7e:ee:75:8d:4c:b6:7d:bf:7d:29:6f:a3:f7:dc:e7:cc:39:75:
         1b:9f:04:80:25:e9:27:91:2d:8f:b7:e6:fd:8c:91:e7:c9:c0:
         d9:79:55:2f:e9:d5:6b:2b:e0:23:c0:af:4a:22:24:54:e1:86:
         1a:e4:41:fa:6e:b6:9d:fd:0b:5c:09:87:fb:ca:e5:da:64:1f:
         55:c9:22:de:c7:75:1a:52:99:93:b3:c0:eb:86:58:55:65:29:
         72:12:c5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:14:07 2024 by rpki-client on console-fra.rpki-client.org