Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File:                     7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier:          4UruUYLMxCJlV/MKJs47ceU3jdh0X97paD4o4SaYjxs=
Subject key identifier:   E9:BB:D3:A4:76:8C:E0:3F:D5:BB:35:38:B9:C3:5D:4D:E5:D7:CD:99
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer:       /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial:       01936A46B8D8AEC20DE7058C64B1FA42EEEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number:          0914
Signing time:             Tue 26 Nov 2024 21:00:39 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:39 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:39 +0000
Files and hashes:         1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: XqB6+s1Fxl+2rasfQp3nR5dGZVKdg5WPjU5Ihi08R2Y=)
                          2: wTgEBqELpl-kfLYLIw86txTYOYg.roa (hash: qx2VAA2tUrDjqAq4zI6porgwdOvSRDaVwV0Sasae6Y0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:b8:d8:ae:c2:0d:e7:05:8c:64:b1:fa:42:ee:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
        Validity
            Not Before: Nov 26 21:00:39 2024 GMT
            Not After : Nov 27 21:00:39 2024 GMT
        Subject: CN=e9bbd3a4768ce03fd5bb3538b9c35d4de5d7cd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3d:57:1d:09:c4:93:29:75:66:1d:77:c1:51:
                    b1:6e:e8:a2:5d:1d:ff:8a:56:49:f5:49:b5:58:86:
                    bb:e0:32:82:3b:7a:ee:2d:c1:53:73:a3:95:2e:b3:
                    1e:0e:70:8d:35:99:59:ed:dc:03:97:6d:b1:28:08:
                    06:f3:56:69:95:45:55:23:ab:3f:f6:74:27:7e:7a:
                    68:65:ec:22:61:0a:7a:56:d2:a3:fd:40:6f:6e:20:
                    83:9f:87:18:47:d1:af:63:16:34:b1:49:ea:59:fb:
                    13:04:9d:2b:c5:76:f4:dc:93:db:52:10:90:e7:be:
                    b1:34:ea:18:16:cd:d4:b1:45:ee:2d:95:a3:34:ee:
                    f7:bc:8c:e6:06:78:f7:87:d6:2e:1a:ab:06:46:07:
                    ed:7d:53:e7:32:50:d0:a5:b4:21:09:11:a0:aa:b1:
                    f6:da:c1:c5:00:b6:97:a3:93:5e:50:39:56:ac:cd:
                    59:0d:f1:f4:49:a6:2a:27:e5:d3:63:20:c8:09:d0:
                    40:43:64:31:19:89:c0:d7:91:d6:d0:c7:5f:38:b0:
                    fb:99:67:be:55:a2:75:f4:c5:b7:f9:6e:f2:ae:5a:
                    ef:fc:09:93:81:7b:d5:f5:fa:41:a4:73:ba:6c:fa:
                    78:2d:9e:62:9f:8f:71:7d:ee:d5:03:96:70:06:f0:
                    ef:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BB:D3:A4:76:8C:E0:3F:D5:BB:35:38:B9:C3:5D:4D:E5:D7:CD:99
            X509v3 Authority Key Identifier:
                keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d8:f2:4c:40:f1:ec:61:52:e5:60:77:df:12:a4:5b:ce:8c:
         52:a2:17:f8:b3:8d:2a:1a:86:76:85:0c:6a:f8:e6:18:34:b2:
         14:7c:95:a3:2b:8a:69:ee:89:05:8b:b2:98:60:06:90:d8:e4:
         23:d5:c6:7e:d9:ea:ef:72:92:4c:28:cc:59:f2:2f:d5:d8:65:
         30:32:6f:ac:98:23:62:04:1e:5e:97:28:67:77:64:be:02:86:
         45:45:3c:56:0e:82:78:4e:13:60:4d:5b:20:19:0b:17:39:20:
         52:a1:a5:28:52:f6:76:ed:ff:4d:a4:a0:f9:6d:d5:4a:e2:c5:
         c9:6d:c1:58:d0:6b:66:01:8a:85:6b:0f:1a:89:f4:f1:bb:9d:
         00:19:95:9a:9c:7f:cc:3b:39:c0:89:d3:8b:b1:6b:2c:06:10:
         29:3e:d3:06:cd:b8:23:c5:2b:52:8b:d3:36:36:b9:3f:10:29:
         33:1b:44:05:7f:4b:58:e0:b9:80:54:5a:67:94:25:28:ed:16:
         77:0e:7d:ca:6d:ad:1c:dd:c0:54:c5:39:87:6a:16:ad:5e:48:
         a8:07:30:24:43:ca:bb:5b:6c:4b:75:19:70:9e:95:1e:db:04:
         bf:65:01:9a:5d:db:a7:0e:16:52:a9:91:81:e2:78:ad:eb:23:
         18:35:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:00:50 2024 by rpki-client on console-fra.rpki-client.org