Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File:                     Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier:          JPdWw0DeuUVH9ElkGwLypBro3UUg65Rp8KQkSJ+j+nY=
Subject key identifier:   26:75:E3:B5:97:FF:81:F1:3C:B9:B7:D4:FC:5D:05:13:B7:B2:AE:6F
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer:       /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial:       01935207AF3DB2DE27CB3106378F4F491DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number:          1295
Signing time:             Fri 22 Nov 2024 04:00:55 +0000
Manifest this update:     Fri 22 Nov 2024 04:00:55 +0000
Manifest next update:     Sat 23 Nov 2024 04:00:55 +0000
Files and hashes:         1: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: Y2/RL4ldh4tth+c40/gxLR9CExP9SQ6fqPALub7VR9k=)
                          2: s9aaZUpv-8Ef7ns3_OVlQUamkcE.roa (hash: LMP+MIWxCWX9/Q1pZgwUl2q10Z0Yk8WC+Qf6zibj1xA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:07:af:3d:b2:de:27:cb:31:06:37:8f:4f:49:1d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
        Validity
            Not Before: Nov 22 04:00:55 2024 GMT
            Not After : Nov 23 04:00:55 2024 GMT
        Subject: CN=2675e3b597ff81f13cb9b7d4fc5d0513b7b2ae6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6c:c9:8e:69:63:36:cf:71:9d:50:44:e6:f6:
                    5d:d6:f6:49:5a:ff:a4:bd:52:1f:6f:5d:57:78:20:
                    85:fb:ec:a0:66:45:f5:e7:9b:46:67:fd:cb:dc:ae:
                    c8:ef:a5:03:fb:5b:b1:b8:c7:7f:c9:7e:75:1b:9c:
                    cd:22:4d:fd:ff:1e:63:26:e3:65:ce:b1:52:af:07:
                    06:84:dd:c4:8e:e7:f4:5a:8f:b8:7a:b6:89:ed:a1:
                    92:a1:8f:f2:56:d9:49:ba:02:74:ea:87:c0:a2:33:
                    63:d8:a7:ac:e1:f4:2f:3e:d5:6a:18:ff:6f:13:98:
                    e6:92:04:7d:5a:de:b0:4e:3d:1e:ba:2f:81:05:22:
                    10:c4:37:53:b7:cd:a0:2d:f1:07:e9:02:2b:05:15:
                    e3:ad:1c:6f:c3:3c:6a:47:c4:cf:b7:b3:0b:41:9e:
                    7a:c1:72:23:d0:a3:04:0e:83:a0:4d:70:cb:6a:61:
                    c2:0d:8a:f6:3f:9d:76:0d:0c:15:01:61:38:bf:c1:
                    46:f4:72:a3:b9:7d:32:9a:2a:86:79:f9:50:18:c6:
                    44:47:f5:9a:9f:f3:22:b0:fd:6d:18:e6:b3:c3:cf:
                    d4:b7:31:8b:f0:39:6c:10:1f:26:dd:b8:0b:30:31:
                    75:8a:7e:d0:35:7a:91:d2:c4:21:a0:95:1b:32:e8:
                    6e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:75:E3:B5:97:FF:81:F1:3C:B9:B7:D4:FC:5D:05:13:B7:B2:AE:6F
            X509v3 Authority Key Identifier:
                keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f0:d6:a2:e8:96:bf:2a:b2:78:55:f7:8b:cb:18:60:9d:f2:
         0f:32:da:5e:a6:e1:5d:79:f5:a2:3c:7b:38:e9:0c:14:b1:ad:
         d3:63:c4:3a:02:33:37:ee:4a:46:bf:34:3c:73:77:7f:dc:c2:
         ad:11:e9:89:ae:16:03:2c:38:9e:89:b1:09:8e:da:61:44:55:
         bc:f8:c9:93:ea:be:36:9d:7c:32:2d:51:2c:4f:43:df:4a:ff:
         e7:38:bd:6f:d9:9f:98:4d:41:9c:e6:27:ee:cf:cc:9e:c5:fd:
         98:82:c2:43:1e:17:f8:17:7c:5e:aa:7c:64:ac:ec:bb:51:a3:
         52:81:56:08:1a:3f:c6:00:b4:5d:90:17:f7:a1:f5:15:23:6b:
         9a:54:4b:a2:68:3f:4f:47:92:91:44:b6:75:0b:be:3c:d5:48:
         91:1d:a0:a5:93:3e:bd:2a:95:0a:dc:88:d7:5e:25:f8:b6:4e:
         b0:72:94:30:6c:52:56:57:5f:e2:ed:cb:18:46:47:ce:dd:3c:
         e2:af:0b:02:ee:ef:15:5d:5f:25:f6:dc:18:0d:d4:30:8f:36:
         8d:9b:f0:77:f6:30:d3:b5:b0:4d:8b:cd:44:f9:3c:4e:df:63:
         e0:b3:51:40:20:b4:ed:c7:bd:be:14:02:6d:bb:bf:c3:d0:32:
         4a:e6:cb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:53:00 2024 by rpki-client on console-fra.rpki-client.org