Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
File:                     0SFb_EiHbDZRg1bv1uKAJVod7jw.mft (raw, json)
Hash identifier:          Hvq8DduhUYzrEARbhXdC6miShw/M3h8YMcmN+Q/hQ3o=
Subject key identifier:   41:5F:F3:79:CA:C6:36:78:51:6B:F5:D1:09:9C:28:32:DA:EB:81:CC
Authority key identifier: D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C
Certificate issuer:       /CN=d1215bfc48876c36518356efd6e280255a1dee3c
Certificate serial:       01936A46C2B6893609CAE957D8365B65BEF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
Manifest number:          0AF6
Signing time:             Tue 26 Nov 2024 21:00:42 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:42 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:42 +0000
Files and hashes:         1: 0SFb_EiHbDZRg1bv1uKAJVod7jw.crl (hash: qn9igUvsn5L5Ck3H5OjHytd3FoGnEfDdR8Xr6FLGFi8=)
                          2: i3oQKzukNLg6jSitsEuB-kXQErY.roa (hash: fNME+ktNDegyMwCN9dpi3uDKhBMY25hIpAMficqmzFA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:c2:b6:89:36:09:ca:e9:57:d8:36:5b:65:be:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1215bfc48876c36518356efd6e280255a1dee3c
        Validity
            Not Before: Nov 26 21:00:42 2024 GMT
            Not After : Nov 27 21:00:42 2024 GMT
        Subject: CN=415ff379cac63678516bf5d1099c2832daeb81cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3d:70:c3:cd:ff:81:ad:a5:26:37:67:64:48:
                    51:98:8b:6e:ad:68:ab:49:d6:16:7a:83:c7:0b:f7:
                    74:cd:f2:b4:c4:f7:ca:57:af:6c:92:5e:c4:f1:fd:
                    ee:63:18:cb:13:66:eb:9d:83:80:6a:36:87:69:4a:
                    f4:41:13:b6:c6:3d:55:6b:6f:58:e1:7f:eb:51:f2:
                    b7:7e:97:0d:9a:c7:fd:2e:96:cf:66:9c:f7:c7:eb:
                    44:c8:12:5f:98:76:3e:dd:7e:c4:48:36:ca:ba:46:
                    23:1b:98:a4:b4:94:d3:0d:c6:83:1c:bf:ce:53:d4:
                    38:9e:99:8a:2a:e4:0b:3d:1c:f5:92:c3:ab:e3:45:
                    79:42:cb:d7:1c:09:1b:3e:93:62:78:af:6a:9e:eb:
                    7a:a1:47:34:c7:40:76:48:de:5b:36:99:f2:68:30:
                    17:45:18:95:81:30:35:27:99:08:69:0f:81:59:2a:
                    b3:05:bc:1d:05:ca:81:b0:44:9f:fd:8c:08:e9:6c:
                    65:7d:97:74:73:fb:e0:5c:4f:fe:47:0a:40:94:3a:
                    d1:22:f8:e8:06:46:0c:bb:f7:12:35:9c:20:90:08:
                    87:1f:ea:0e:03:c2:6d:99:09:c6:e1:ff:fa:a8:55:
                    4a:8c:9c:bf:9f:db:93:86:a3:e9:d8:4a:a3:a3:82:
                    6a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5F:F3:79:CA:C6:36:78:51:6B:F5:D1:09:9C:28:32:DA:EB:81:CC
            X509v3 Authority Key Identifier:
                keyid:D1:21:5B:FC:48:87:6C:36:51:83:56:EF:D6:E2:80:25:5A:1D:EE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SFb_EiHbDZRg1bv1uKAJVod7jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d0c45c-2a8d-4c3b-809d-09bf4071aea2/1/0SFb_EiHbDZRg1bv1uKAJVod7jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:cb:18:7e:6d:3d:12:53:da:9e:02:fc:a7:fa:cb:cc:87:ab:
         15:81:cc:92:ed:62:50:f8:d2:9e:31:c5:da:84:f4:bb:84:f4:
         08:f7:90:68:d4:48:60:d7:e4:72:21:e7:83:9d:95:2a:c9:83:
         cc:0b:7e:43:42:a1:3c:b2:d4:63:0b:80:3b:cd:2d:6c:ea:85:
         d1:56:b5:94:b9:7c:30:cf:8c:4c:23:2c:61:ab:cb:7a:99:6d:
         3b:d3:19:54:67:93:5c:40:b9:e0:2b:9f:ce:64:97:c6:a2:60:
         db:c4:cb:eb:a1:ef:74:02:b3:7b:99:f4:df:8b:d6:22:ed:5b:
         68:1a:f9:f6:58:b8:4f:ab:1e:eb:ab:3f:03:16:d6:4c:a2:a4:
         9f:b6:e5:11:ed:83:fd:26:f0:ea:dd:0c:29:92:1b:1a:af:63:
         36:32:a4:ca:0d:7a:f2:6f:e8:02:fa:ac:8b:06:9a:e1:fe:46:
         20:ec:a5:1c:8a:38:78:c3:29:bd:5b:27:cd:29:16:90:5c:c1:
         41:2b:7a:81:d5:cc:43:4f:78:7d:04:28:07:a9:84:26:f6:ed:
         2e:39:c3:96:72:3f:68:fb:15:0e:a4:31:6e:df:fd:cc:9c:6e:
         cf:7c:6e:b5:16:f1:14:f9:ac:6d:12:7c:9d:ce:4a:02:5d:37:
         fa:76:9e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:14 2024 by rpki-client on console-fra.rpki-client.org