Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File:                     c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier:          4q9iKIfgYYnBtXm4Nom1vZs/JKXa0J25cK4uWX3By3Y=
Subject key identifier:   83:FF:CA:90:67:3F:D2:5B:7C:8E:68:66:24:38:D0:AC:44:01:42:BC
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer:       /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial:       0193591C1A7070AC8095F456DC1861DB7FA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number:          1377
Signing time:             Sat 23 Nov 2024 13:00:34 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:34 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:34 +0000
Files and hashes:         1: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: c1sr2XkGGZlL56EdVtHsC9XVCJdTeseBr+/IBKBKVwI=)
                          2: vpaVcBvY2LYg_w5I_lxs0SfFFbU.roa (hash: zrYFGhk2ONf6DQnvAPvSGdED3yswxvcIpw3Kl3X91gA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1c:1a:70:70:ac:80:95:f4:56:dc:18:61:db:7f:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
        Validity
            Not Before: Nov 23 13:00:34 2024 GMT
            Not After : Nov 24 13:00:34 2024 GMT
        Subject: CN=83ffca90673fd25b7c8e68662438d0ac440142bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:0d:8e:4a:15:8f:ac:30:0f:3e:67:fb:af:
                    77:10:33:1e:e0:7b:a3:6f:a3:0e:e3:72:c9:f5:b1:
                    f7:9d:66:da:88:5a:e7:89:e1:d9:ad:9b:96:b6:7f:
                    3f:d5:20:c9:fc:8b:98:fd:40:25:3d:8c:97:a2:78:
                    53:7c:12:2f:aa:40:ee:42:ef:14:d7:8a:ae:ad:52:
                    84:d3:53:92:71:af:7a:56:44:32:45:a9:8f:16:b0:
                    7f:0e:7f:0c:ca:ae:e6:4f:9b:2b:cb:f0:13:6a:57:
                    49:f5:2a:a6:46:53:6a:ee:08:ce:1b:44:0b:d0:7f:
                    6d:25:35:bd:02:ec:4a:91:62:db:51:89:d7:95:39:
                    1c:2b:6a:0c:1e:c9:48:25:97:8f:b2:1f:99:e5:e4:
                    ba:49:c4:d5:b2:9f:10:2d:1e:3e:40:5c:ad:b2:b9:
                    16:2f:fe:13:d9:64:07:b6:8b:52:42:d9:4b:8a:cd:
                    f1:54:36:37:4f:7b:9d:5d:0a:70:01:76:37:e4:a0:
                    5c:1c:77:cb:a5:0e:00:1c:04:2b:ec:07:ef:ce:18:
                    2d:67:f7:1b:da:dd:9d:45:a1:ce:7f:15:3d:c1:13:
                    96:16:80:72:5a:07:a8:2c:00:d3:a0:b3:a9:52:76:
                    36:0e:05:d6:c2:43:61:8e:50:97:58:49:85:09:15:
                    4b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FF:CA:90:67:3F:D2:5B:7C:8E:68:66:24:38:D0:AC:44:01:42:BC
            X509v3 Authority Key Identifier:
                keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:3d:38:ab:e0:c7:35:16:01:5c:32:8b:ca:d1:09:e0:81:d0:
         c4:a4:17:ae:d2:d6:f0:70:4f:72:c6:9d:54:72:c9:c2:0c:f1:
         29:69:83:c4:a9:09:39:f9:bb:b3:4e:ab:f8:ef:5e:b3:6b:a1:
         69:af:c0:df:74:ac:a9:3f:74:a5:9b:ed:08:54:31:fe:e7:bc:
         dd:34:58:20:ac:33:b4:ad:b1:4a:b3:52:fb:e0:a1:d7:90:f2:
         9b:02:b2:69:e5:c5:cc:74:19:b1:02:7e:e4:13:52:c9:2f:4a:
         94:0c:23:86:15:05:d3:c8:61:26:3d:d0:23:42:f1:eb:ab:ac:
         ba:17:c0:79:c3:c4:93:02:a5:1e:9b:00:c1:84:c9:ed:39:91:
         0e:dc:95:19:e3:a7:48:6a:c4:c5:89:52:2c:eb:3c:0a:a3:b6:
         10:9c:ea:f0:11:1d:db:17:d5:b9:4d:38:52:51:2b:4e:11:89:
         f2:42:97:d1:94:90:dc:73:74:3a:14:0a:7b:60:eb:53:b9:78:
         a4:0c:ef:dd:d3:b2:88:d6:db:8b:95:92:16:93:af:0e:39:0a:
         37:d7:9c:49:ff:56:5b:71:20:c3:b9:c5:91:f9:5e:3c:2d:dc:
         16:8f:36:5c:42:0a:36:f6:ae:46:c0:71:54:48:ae:e5:e6:f3:
         dd:da:99:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:54:47 2024 by rpki-client on console-ams.rpki-client.org