Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
File:                     MfePPgBBCSbb2JyOj1xACxArA3k.mft (raw, json)
Hash identifier:          n/2PZJtTBXR/n5ho7MBuhvPJAqGnz0QPW+p8GUE/aDA=
Subject key identifier:   FC:8F:D7:8F:E4:7A:D6:33:E4:02:B8:94:09:7B:00:45:47:68:AD:DB
Authority key identifier: 31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79
Certificate issuer:       /CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
Certificate serial:       01936A0F876CDECBC992CD7D64C6C728B960
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
Manifest number:          05A5
Signing time:             Tue 26 Nov 2024 20:00:22 +0000
Manifest this update:     Tue 26 Nov 2024 20:00:22 +0000
Manifest next update:     Wed 27 Nov 2024 20:00:22 +0000
Files and hashes:         1: MfePPgBBCSbb2JyOj1xACxArA3k.crl (hash: w3dtWHETnFsdFs3xB2pD3CY8RwmobTIKBw2QAHozilk=)
                          2: o9huJ3LylhXNtSCte0p9O9JU68Q.roa (hash: FIHXhfRRIiKWfrjNim/0lH48cwRl5t6Q7zWIjy69MUs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:0f:87:6c:de:cb:c9:92:cd:7d:64:c6:c7:28:b9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31f78f3e00410926dbd89c8e8f5c400b102b0379
        Validity
            Not Before: Nov 26 20:00:22 2024 GMT
            Not After : Nov 27 20:00:22 2024 GMT
        Subject: CN=fc8fd78fe47ad633e402b894097b00454768addb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:ad:41:32:f9:93:35:ed:94:e7:ea:47:32:
                    c3:01:be:5a:b3:5a:20:db:57:a7:69:e3:50:b1:93:
                    c0:f9:ac:3b:0c:34:ee:10:94:aa:c0:51:70:3a:73:
                    22:f8:84:10:47:11:ed:82:1f:44:53:bb:29:2e:9e:
                    99:bc:3e:b2:a0:14:8a:06:9c:e6:2e:46:5f:ca:9d:
                    ef:68:53:31:34:56:d4:bd:c6:90:59:70:4d:e9:51:
                    ad:67:52:88:9e:9e:c5:97:28:77:80:bd:d5:97:88:
                    5a:62:d6:5a:f3:07:a9:a6:cd:a1:86:11:db:0e:49:
                    ea:79:b6:01:1e:37:20:99:73:91:5d:eb:f2:49:c2:
                    da:49:05:0e:a5:46:4e:c8:05:3d:f3:d6:d5:79:25:
                    0e:40:a6:dc:88:5a:1a:64:d3:56:90:76:d1:6d:48:
                    7f:41:5c:c7:7b:c1:69:e4:31:b6:ff:81:12:b8:20:
                    84:39:3a:f7:5d:cf:b1:a4:72:c5:38:8b:a1:ea:39:
                    5f:93:81:43:7c:bc:4f:ba:9a:7b:e1:d0:e5:12:33:
                    70:b7:8b:7b:96:7b:df:70:9c:a2:74:b6:c8:82:b5:
                    ca:eb:be:9a:d3:3c:f4:7a:57:85:99:79:ee:85:b4:
                    19:07:cf:b2:1f:df:f0:bb:49:c3:8c:48:62:6b:e2:
                    05:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8F:D7:8F:E4:7A:D6:33:E4:02:B8:94:09:7B:00:45:47:68:AD:DB
            X509v3 Authority Key Identifier:
                keyid:31:F7:8F:3E:00:41:09:26:DB:D8:9C:8E:8F:5C:40:0B:10:2B:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfePPgBBCSbb2JyOj1xACxArA3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/07560a-062b-4802-89af-19192e81b831/1/MfePPgBBCSbb2JyOj1xACxArA3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cb:65:bc:c3:c8:8b:2c:5d:8d:7d:09:33:ff:84:10:23:d5:
         dc:b1:2a:60:0d:53:d3:e3:09:47:95:4e:e4:54:07:1d:c4:1b:
         8e:30:ed:82:21:59:81:0f:28:e4:15:3a:c4:ba:3a:73:5f:cf:
         35:3f:3c:da:37:cc:5c:f8:9c:b8:33:63:3f:ad:3b:ae:2e:cf:
         4c:41:8c:15:ac:42:6f:e5:31:7f:03:8a:d6:35:82:b1:ad:d7:
         09:3c:57:4a:3e:aa:ff:8a:31:36:d7:cf:75:a5:4d:24:61:f8:
         9c:da:8d:e3:55:b5:29:2b:4e:54:19:ba:be:ef:49:15:28:ad:
         bc:af:12:ba:56:16:6d:77:0c:78:62:78:95:e4:24:66:c1:41:
         48:9d:f8:e9:18:04:d5:4d:7c:08:25:72:20:b7:0d:3c:89:c0:
         c9:05:3e:f0:1b:52:6f:7a:c5:1a:6b:02:36:21:7b:66:52:f8:
         28:2c:87:76:49:7d:07:d1:68:43:f4:b9:d5:99:7f:02:27:c5:
         a0:b4:43:83:ba:52:90:12:2a:08:43:3c:01:d1:a0:b6:e2:53:
         69:76:d9:a9:66:6c:87:9e:75:d8:76:53:61:80:e5:45:74:30:
         1f:d0:0c:f6:72:d5:87:ed:f2:bc:19:91:4c:ed:b0:4d:b1:cd:
         ea:42:12:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 21:29:18 2024 by rpki-client on console-fra.rpki-client.org