Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File:                     Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier:          SPcwhzdHjdcMZ+4XIoZ51nTO25vYj+m8KH7fbwsYRFA=
Subject key identifier:   D5:FB:2E:23:3C:65:83:01:D4:B4:DD:E9:24:48:9F:DF:06:E8:CB:F6
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer:       /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial:       019355E48B8100B8AB7B22C517EEB41ECE78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number:          1374
Signing time:             Fri 22 Nov 2024 22:01:01 +0000
Manifest this update:     Fri 22 Nov 2024 22:01:01 +0000
Manifest next update:     Sat 23 Nov 2024 22:01:01 +0000
Files and hashes:         1: BhHlkBqvgfUznKIhtb1FFJflTSc.roa (hash: 1hJQUyjSo/LZB7qrcW6UTXNW99et1+/0rkKXb9T9w7w=)
                          2: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: zpv8RQeUJEFTxHR7LzVnwsoLaCMhpgWqsEaR3bWOdFs=)
                          3: _Wb3WToh2P69MrbUzizIxI7kjxY.roa (hash: Bf/tzhtjIgTQqOnVwWYEa6VAOOs3RZ5NXA/vPvn5JfA=)
                          4: ngKcR3T7_oMmgJGib6Idz2NccNk.roa (hash: BhlfKNC3A6JNIaaMkJj+gLaTEPSgDlF/0+WUJ1Ubp98=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:8b:81:00:b8:ab:7b:22:c5:17:ee:b4:1e:ce:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
        Validity
            Not Before: Nov 22 22:01:01 2024 GMT
            Not After : Nov 23 22:01:01 2024 GMT
        Subject: CN=d5fb2e233c658301d4b4dde924489fdf06e8cbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f0:e7:db:81:01:34:6f:d0:87:39:e1:46:9e:
                    41:79:19:42:88:ad:03:8e:ca:cb:0a:00:ac:71:b0:
                    5e:0d:8a:07:9a:c2:81:55:97:c3:fa:ae:58:83:30:
                    0d:9c:3b:ab:de:a3:41:16:72:a9:05:49:a2:bb:ca:
                    47:b6:b7:80:1c:2c:bc:62:70:72:46:33:a7:78:a2:
                    99:e6:36:e0:74:66:75:a8:6a:07:c4:42:26:7d:ab:
                    51:2e:4e:56:4d:b9:5e:36:eb:f8:fb:1a:e9:5f:59:
                    2e:3e:2d:e1:20:1e:49:ab:21:06:55:4d:ce:b6:73:
                    28:88:a2:90:5d:da:55:65:50:79:7b:3a:9b:90:17:
                    d4:65:16:ad:71:a6:5b:7d:0f:da:78:c5:d5:f8:b9:
                    c7:25:f3:16:3e:21:5f:f0:bd:e3:2e:9e:f4:4a:b0:
                    1e:cd:0f:1a:61:16:b2:9a:66:4b:45:3e:e7:48:1a:
                    19:c3:a9:61:a4:af:20:21:4c:5e:df:6e:97:4f:cc:
                    01:84:20:99:7a:5e:e9:f0:c1:ea:c9:0c:30:76:7f:
                    50:cb:fe:11:64:49:d2:96:bf:ff:39:85:b4:08:0f:
                    c8:e9:7e:fa:6f:46:a7:6e:63:cf:f3:6a:81:d5:0f:
                    93:53:cb:5f:b7:29:43:0a:b2:90:18:23:bb:10:d0:
                    35:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FB:2E:23:3C:65:83:01:D4:B4:DD:E9:24:48:9F:DF:06:E8:CB:F6
            X509v3 Authority Key Identifier:
                keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2a:fa:33:a2:86:84:d1:50:7f:c8:de:04:fb:7e:76:2c:96:
         b3:cf:11:4f:58:62:39:9b:77:d3:5a:9b:76:2b:99:04:e5:5c:
         6a:24:30:42:e5:65:a6:b7:3d:f9:db:6e:99:09:62:6b:4e:ec:
         5d:a4:b4:ba:55:81:ba:09:53:2e:de:d1:e4:7f:ea:14:75:af:
         c6:a5:55:7f:de:f0:97:ba:fd:a2:23:76:87:61:c6:6d:11:75:
         26:f0:96:1a:1f:42:73:4d:51:68:11:7d:a1:8d:d0:83:0d:ec:
         a2:08:4b:b0:1f:f4:70:34:84:36:2d:4e:1d:09:37:5e:55:79:
         d6:ce:9f:13:4b:86:b4:e0:9b:3f:cc:95:dd:67:d6:91:26:d8:
         24:d7:30:e8:65:ad:4c:b2:cc:7e:d1:e6:d8:3d:bb:66:cc:4c:
         f2:34:5f:2a:bf:ac:7c:1b:1c:7c:e9:47:25:1e:2c:f1:0b:dc:
         66:2c:2a:f1:9a:b6:31:f6:0e:b2:8f:e1:b0:36:28:d9:4b:53:
         2a:32:6b:e7:36:8c:f1:57:be:5b:79:80:e4:76:cc:38:d1:7f:
         8a:98:72:53:5b:e9:2e:20:d7:71:1f:0d:2f:12:b4:48:d1:df:
         96:d9:bf:e9:ad:c9:83:5c:60:cf:7f:7c:cf:3d:5b:e0:9e:9c:
         52:a2:85:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:39:00 2024 by rpki-client on console-fra.rpki-client.org