Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
File:                     pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft (raw, json)
Hash identifier:          rfuvRlFiXbazRtxPVkNvqhot/OxGF3HfhX69FdS5MYA=
Subject key identifier:   03:1B:C9:32:C3:CE:F4:9E:45:C3:D6:FD:CF:65:43:0A:74:DE:D1:CC
Authority key identifier: A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9
Certificate issuer:       /CN=a4917d885b675672fc8efb89d6e14e23675052d9
Certificate serial:       01936BC90407558E9044ED65A5FE7A078103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
Manifest number:          05F8
Signing time:             Wed 27 Nov 2024 04:02:36 +0000
Manifest this update:     Wed 27 Nov 2024 04:02:36 +0000
Manifest next update:     Thu 28 Nov 2024 04:02:36 +0000
Files and hashes:         1: lkjkMWrX6lGULtyjvA4Qel-S6zs.roa (hash: lUjWAtT2V2Ppb/Mntn9O4GHXTLaiETvs3goALmmrACg=)
                          2: pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl (hash: j16u9GoUK+P4QhhPpmJw1pxFIijGMz9c6gWIQHKpoV0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c9:04:07:55:8e:90:44:ed:65:a5:fe:7a:07:81:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4917d885b675672fc8efb89d6e14e23675052d9
        Validity
            Not Before: Nov 27 04:02:36 2024 GMT
            Not After : Nov 28 04:02:36 2024 GMT
        Subject: CN=031bc932c3cef49e45c3d6fdcf65430a74ded1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:f7:c3:fd:fb:7e:8c:89:82:94:82:98:a3:
                    dc:d0:17:b4:b4:bf:a7:f9:1b:16:f5:04:64:5c:ab:
                    e6:81:49:3d:87:ae:f6:3a:4a:36:41:cd:5c:bd:c8:
                    5c:e3:d1:97:a9:91:ad:8e:ac:77:57:a0:f6:5d:8a:
                    f1:2e:4f:82:1a:5f:c3:bd:90:ac:87:dc:6d:1f:55:
                    db:47:2a:d7:e8:79:d1:67:39:49:76:75:81:7a:52:
                    af:f8:3e:25:b1:72:9b:0b:7d:76:e9:ba:85:eb:b0:
                    77:66:fa:d8:80:b2:c9:d2:26:56:c8:d9:6d:b0:6b:
                    af:4a:79:b7:9d:d1:db:4b:3e:43:0d:2c:33:6e:3c:
                    54:94:d0:08:e9:05:89:9a:c4:a5:03:2f:00:01:31:
                    2d:78:bd:1a:33:cd:bb:ef:e3:a2:95:fe:52:59:a9:
                    8d:a3:2e:b4:58:45:dd:61:0e:ac:4a:ee:5a:7d:2a:
                    10:32:5d:83:8f:6e:c8:b4:02:6a:c8:2e:a5:84:5a:
                    40:95:30:7a:fb:43:88:06:33:fe:fb:c9:ed:db:d5:
                    8d:8f:57:c1:84:1a:a7:f7:9f:31:d6:e1:75:a9:0f:
                    9a:e6:72:31:12:1e:78:f1:2e:d0:b3:1f:3c:e0:91:
                    98:98:5a:a6:50:6f:24:89:d0:ec:a9:60:23:cb:3b:
                    88:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1B:C9:32:C3:CE:F4:9E:45:C3:D6:FD:CF:65:43:0A:74:DE:D1:CC
            X509v3 Authority Key Identifier:
                keyid:A4:91:7D:88:5B:67:56:72:FC:8E:FB:89:D6:E1:4E:23:67:50:52:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/13bc29-4ef3-421b-a30f-1344d02cfda8/1/pJF9iFtnVnL8jvuJ1uFOI2dQUtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:af:09:e0:22:48:db:e3:78:68:93:46:5d:a3:aa:63:28:87:
         58:1b:44:7a:31:0b:bd:f2:b0:ef:fb:83:8b:2c:52:84:d1:fa:
         01:18:24:f3:19:cd:a2:f9:d9:b7:a2:2f:f7:83:ad:64:25:40:
         84:ba:17:fe:27:ec:41:fb:22:d4:4b:c9:c9:e9:89:26:3d:18:
         cb:1d:ce:4b:6e:ad:19:c1:72:15:09:28:71:a4:ef:52:26:2a:
         24:14:d1:de:1e:ee:af:81:6f:69:6f:cd:cd:95:c4:48:e4:b6:
         e7:e0:df:6e:93:41:6e:d9:73:bf:9d:c8:d8:5e:7d:c1:9e:e7:
         6d:7d:6f:be:d5:68:24:f7:fd:d2:03:70:6c:f1:c0:b1:b3:c4:
         a2:25:46:ed:41:83:43:69:b5:ee:f1:b1:39:2d:32:d3:3d:29:
         5c:9e:85:3e:65:66:e8:c4:ae:43:07:af:29:57:83:d8:91:81:
         37:0a:2e:96:ca:55:54:c5:3c:a4:41:69:ef:3e:2b:3f:7c:16:
         11:d4:12:1a:3b:52:b8:52:2e:57:e8:f8:35:ed:d9:5a:f7:fb:
         fd:26:46:e2:fb:0e:21:76:d4:54:b6:08:31:a1:31:01:5e:06:
         b5:a3:8e:99:a3:d8:c0:d8:2d:ff:99:39:74:7b:49:25:2e:8b:
         54:ce:4e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:21:59 2024 by rpki-client on console-ams.rpki-client.org