Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
File:                     MvG4X6XeV6X-Ej3jqQXzyzariv4.mft (raw, json)
Hash identifier:          19cyi2jDJCskNNP01pxE/ai8hed4UKRMJKneAVeegLs=
Subject key identifier:   1F:D3:D2:2C:ED:F6:D6:33:4F:C5:F7:A1:8C:BF:9A:9E:E6:A9:D5:91
Authority key identifier: 32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE
Certificate issuer:       /CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
Certificate serial:       01936A0F74D337EA3C36D7E18629543EE4D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
Manifest number:          028B
Signing time:             Tue 26 Nov 2024 20:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:18 +0000
Files and hashes:         1: MvG4X6XeV6X-Ej3jqQXzyzariv4.crl (hash: mZlMAhCCwqa/995b1DjwfpiGiD/COd9wXWoWj4vDJyA=)
                          2: NJqkdUMOfnGbBHemnhplENQDiVk.roa (hash: KwswTrz70xrs+o9JbTzRp3VqIyqC4RE+U83OEBysZqQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:74:d3:37:ea:3c:36:d7:e1:86:29:54:3e:e4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f1b85fa5de57a5fe123de3a905f3cb36ab8afe
        Validity
            Not Before: Nov 26 20:00:18 2024 GMT
            Not After : Nov 27 20:00:18 2024 GMT
        Subject: CN=1fd3d22cedf6d6334fc5f7a18cbf9a9ee6a9d591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:23:5a:c9:8a:f4:ee:f0:07:45:92:c4:f3:5c:
                    2f:11:1a:3c:5e:2b:42:db:bf:1f:b7:0c:1e:72:81:
                    cc:9f:bf:83:61:ee:26:36:88:03:d8:1c:db:e5:66:
                    58:85:b6:a4:5d:0b:fe:a3:1b:0c:16:28:c3:a3:09:
                    2a:27:c7:8b:70:97:8e:34:9a:d2:6a:5c:cc:f8:39:
                    55:a7:00:d5:f9:c4:ec:42:7a:da:f3:61:8c:17:ec:
                    dd:92:40:7c:2f:39:36:8c:ef:7b:9a:4b:23:6d:14:
                    1a:ca:e5:6e:05:81:6e:32:48:60:4f:ac:9b:9f:a0:
                    32:6b:5c:6c:e1:fb:0f:54:6f:3d:f2:dd:05:de:71:
                    e8:47:80:39:e9:ad:d4:09:6b:4f:7a:29:0d:7e:82:
                    28:6f:22:a0:1a:1f:a8:4e:2c:d2:c7:ce:c1:f7:3e:
                    3a:f4:0d:64:6a:c4:ab:9d:9b:57:f0:11:5a:15:8b:
                    f1:f4:63:61:f0:ed:5b:e0:c5:f8:c0:28:90:a7:b6:
                    a8:f2:a1:09:4c:a3:43:90:a3:a8:2e:05:bc:70:2e:
                    a6:b3:36:4d:f5:20:ae:19:9e:b8:f4:a3:4e:bd:00:
                    75:52:9c:e0:29:f7:f4:ff:8c:23:d4:4c:f5:0c:07:
                    d2:14:f1:a9:fb:a9:20:bc:cb:22:a4:a9:de:9e:dd:
                    2b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D3:D2:2C:ED:F6:D6:33:4F:C5:F7:A1:8C:BF:9A:9E:E6:A9:D5:91
            X509v3 Authority Key Identifier:
                keyid:32:F1:B8:5F:A5:DE:57:A5:FE:12:3D:E3:A9:05:F3:CB:36:AB:8A:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvG4X6XeV6X-Ej3jqQXzyzariv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bc1828-3536-4d0f-952b-9d27091784cc/1/MvG4X6XeV6X-Ej3jqQXzyzariv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:04:62:e1:ed:09:cc:31:57:1c:f7:2d:3b:29:3c:05:ff:09:
         cf:69:cb:29:77:65:68:18:7a:7f:a7:b9:9a:e8:e9:df:c3:f3:
         ba:3b:a6:84:7d:b2:9a:74:29:1b:dc:1b:a2:20:7b:dd:ac:7a:
         54:90:73:73:33:9d:e0:ba:aa:2e:5e:81:ad:4b:c6:0f:8d:56:
         4e:ba:0d:26:98:c5:96:92:00:fe:2c:e8:58:4f:9a:b3:96:cc:
         6c:a9:e3:11:c9:4c:00:f7:31:19:7e:f4:9e:1f:b2:ec:b6:33:
         9e:28:e1:58:94:1f:22:bf:64:a7:47:9c:af:6e:2a:cc:1e:c6:
         db:5c:ad:98:c3:04:43:29:45:9c:0d:9e:b6:00:c7:61:a8:32:
         95:31:a4:26:c9:42:e4:5d:bf:71:f7:6f:51:a6:0c:ab:cc:ca:
         69:7c:f1:9a:e2:8f:c4:78:ac:db:3c:9c:81:58:f8:0a:4d:f0:
         1b:2f:02:ea:1a:e6:90:af:96:13:c0:71:41:46:c3:b4:e3:81:
         42:5a:79:d6:6a:27:6f:6b:cf:e1:55:1f:16:73:43:49:98:e6:
         e0:50:8c:68:fa:07:f7:a0:d2:26:18:c5:bb:da:cc:25:61:a4:
         46:a2:e1:e6:8e:79:6a:b6:e0:37:c3:7e:03:b5:0e:bb:9a:1c:
         a1:37:07:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:59:14 2024 by rpki-client on console-fra.rpki-client.org