Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
File:                     JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft (raw, json)
Hash identifier:          k+oML6qRoqyHKBibIQGMhY+QVWpwfw+VcI14gq8FUnU=
Subject key identifier:   53:21:92:75:5F:64:1C:75:D5:14:B3:2B:47:B2:97:CD:CC:AF:2C:43
Authority key identifier: 25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
Certificate issuer:       /CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Certificate serial:       019369DA0896C8218E4CE14E0C058CF0835B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
Manifest number:          0EAE
Signing time:             Tue 26 Nov 2024 19:01:56 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:56 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:56 +0000
Files and hashes:         1: JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl (hash: kf7XGYHyh7lfI+BlFtLJEUZhjgGxkpmRDdjGZdUPTiE=)
                          2: fxZptTwIxhCZNGnFpkwbRjVxYjs.roa (hash: Eh/ykMYQRw5ZTlQ8l3nlrPGEMWROReOdcaH3Cdk/0GA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:08:96:c8:21:8e:4c:e1:4e:0c:05:8c:f0:83:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
        Validity
            Not Before: Nov 26 19:01:56 2024 GMT
            Not After : Nov 27 19:01:56 2024 GMT
        Subject: CN=532192755f641c75d514b32b47b297cdccaf2c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c8:7b:d1:47:da:be:5e:19:23:61:f6:8f:44:
                    68:9e:cb:0c:35:c4:16:b9:6c:b8:f2:e3:67:d8:6a:
                    fe:0b:cd:7d:f4:4f:b1:39:66:b9:02:ca:47:86:04:
                    c1:a5:fe:c4:35:66:50:39:17:92:f1:19:35:86:99:
                    eb:68:2f:49:1e:0f:b3:c0:72:65:94:c5:eb:b5:11:
                    e2:f6:e9:02:f9:b1:50:84:28:09:c7:aa:07:99:4c:
                    e7:a0:a0:60:d1:01:34:01:e7:d3:5a:0a:9e:58:09:
                    e2:57:3d:e9:ec:a9:63:fd:56:dc:75:4f:06:c4:cf:
                    e4:48:36:1c:3f:8c:d3:54:6a:e1:c7:3a:e0:27:01:
                    df:b0:f8:97:3d:43:23:35:6c:fe:1f:b7:3e:b1:3e:
                    47:75:84:f9:b1:92:24:38:4a:22:21:e9:88:b3:68:
                    8b:2a:bc:9a:6e:e6:7b:c9:be:cd:25:df:89:81:a7:
                    a5:0b:be:e0:fe:c9:c4:26:2c:b3:b6:38:5f:4c:70:
                    bc:61:8f:5e:7f:ff:8e:be:b4:be:66:d5:94:4e:63:
                    32:3d:6c:8f:05:d6:fa:14:7c:32:49:cb:c7:55:47:
                    40:d7:62:3e:41:83:e4:41:e1:6a:b6:d2:1e:b2:12:
                    fd:c6:9d:f1:5b:8f:ce:06:30:91:bb:ea:2d:1c:8e:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:21:92:75:5F:64:1C:75:D5:14:B3:2B:47:B2:97:CD:CC:AF:2C:43
            X509v3 Authority Key Identifier:
                keyid:25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a0:9d:e6:68:d7:e3:e6:90:dd:6c:54:2c:a0:aa:7b:a6:b0:
         7b:aa:be:a9:3e:16:1c:f0:7a:ea:ba:11:bc:39:2f:28:ec:fe:
         04:a3:6c:d6:e9:8e:ab:4b:99:69:b6:d8:9f:06:48:28:93:38:
         d8:be:6c:c4:ca:b6:95:74:69:37:5b:7e:76:ed:67:d5:7d:57:
         99:86:f8:ce:71:bf:fb:65:52:3d:7d:33:fe:7b:b8:2e:a9:8e:
         c9:3d:14:e8:35:10:8c:75:15:27:be:20:06:15:6f:48:87:33:
         5a:1f:d6:3a:75:0f:b5:e1:d8:ca:45:b3:15:91:c9:84:76:64:
         36:b4:fd:6d:f0:72:8a:b1:d6:bc:61:22:86:24:70:93:e3:30:
         07:27:e0:e9:1d:36:9f:de:56:03:a5:4e:82:55:ea:1c:2b:f5:
         8b:3b:10:7a:6e:bc:e0:56:63:98:29:5d:b9:8f:71:4d:34:53:
         2e:20:cc:78:48:21:a4:79:dd:ce:1f:2d:b5:a3:37:e2:35:98:
         c5:ee:4f:af:a5:4c:a4:97:2e:60:7c:4b:95:3c:41:8b:e9:62:
         5a:6f:b2:03:85:2d:8d:fe:91:fc:04:71:d6:97:5d:a4:de:16:
         da:00:22:2e:30:48:78:2a:31:ee:04:fd:5d:61:26:25:69:34:
         4b:d5:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:26 2024 by rpki-client on console-ams.rpki-client.org