Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
File:                     _COczybqOCV6B9QJT6bXCyaWn7k.mft (raw, json)
Hash identifier:          +ddid/Rvhan4HUCSVa5sxLvhsH/ydaxc54Jl06+2/AQ=
Subject key identifier:   C5:90:CD:8F:CA:62:F2:52:01:0F:4D:91:41:80:C9:23:D2:97:2F:DE
Authority key identifier: FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9
Certificate issuer:       /CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
Certificate serial:       0192F064FF9C0BE75D5516FF495CFB684CE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
Manifest number:          0174
Signing time:             Sun 03 Nov 2024 05:00:03 +0000
Manifest this update:     Sun 03 Nov 2024 05:00:03 +0000
Manifest next update:     Mon 04 Nov 2024 05:00:03 +0000
Files and hashes:         1: _COczybqOCV6B9QJT6bXCyaWn7k.crl (hash: nq00b1l+ZWeQQEzQbH7Yo7+Guiu0qoOEbD/JuejfR4A=)
                          2: eOmACI8M2Z09m05eBVtVLkOsCow.roa (hash: Rw/Ny34aLgw2IZ7oQuaG25FVruDBfKX3f1FqKhAn4bg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Nov 2024 04:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f0:64:ff:9c:0b:e7:5d:55:16:ff:49:5c:fb:68:4c:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc239ccf26ea38257a07d4094fa6d70b26969fb9
        Validity
            Not Before: Nov  3 05:00:03 2024 GMT
            Not After : Nov  4 05:00:03 2024 GMT
        Subject: CN=c590cd8fca62f252010f4d914180c923d2972fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:18:3d:76:1c:ef:85:64:5d:a0:80:f8:6e:
                    fc:2c:69:a0:bd:af:63:98:e6:f8:c3:a4:34:c2:da:
                    0f:a0:fb:ce:0e:80:ba:1c:47:92:6b:e6:b7:d8:fe:
                    c8:f6:b7:1f:53:88:cc:8f:ef:4b:b4:4d:83:b3:00:
                    cc:95:6d:8c:d6:bd:ea:78:e9:25:b1:ff:0a:4d:49:
                    88:02:9b:67:e3:0b:86:c9:03:a8:0a:29:42:4c:50:
                    9b:6a:5e:40:6f:b4:c1:9e:61:a4:2a:60:3d:3e:c0:
                    d3:ed:f1:fc:6b:9d:39:21:06:5c:d9:f7:30:e5:81:
                    85:9a:1d:23:c2:53:18:b7:cc:f6:5e:6c:27:d4:47:
                    16:82:e1:a0:5c:8d:97:68:af:19:f7:d0:d0:94:5e:
                    ab:f8:28:a4:31:d0:97:72:55:ea:77:25:45:ba:18:
                    70:02:f4:33:32:59:55:b1:5c:37:61:d4:41:50:12:
                    d8:ae:f0:50:eb:ac:88:cd:ee:fa:12:75:92:5a:43:
                    b3:2e:51:a4:6c:84:04:3a:65:2a:85:87:b6:93:d3:
                    c5:4a:21:6d:27:bc:69:29:53:49:48:53:61:60:59:
                    86:c8:fd:d3:d1:ce:b1:39:27:64:f4:cd:1e:4a:7c:
                    37:9b:62:1d:a7:9d:0e:6e:99:96:ce:1b:17:ed:46:
                    3e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:90:CD:8F:CA:62:F2:52:01:0F:4D:91:41:80:C9:23:D2:97:2F:DE
            X509v3 Authority Key Identifier:
                keyid:FC:23:9C:CF:26:EA:38:25:7A:07:D4:09:4F:A6:D7:0B:26:96:9F:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_COczybqOCV6B9QJT6bXCyaWn7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f06c79-7c7e-4504-88c0-a8a911a3e2e0/1/_COczybqOCV6B9QJT6bXCyaWn7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:45:07:54:2f:4b:a2:37:48:56:c9:5f:fd:d2:b0:bf:e6:99:
         7a:f6:18:1d:1d:6b:e8:87:19:c2:93:ea:53:74:42:3a:25:3f:
         3c:a8:00:62:3f:39:04:e2:85:ed:cb:c7:b8:fd:e3:c3:65:10:
         2c:11:5a:9c:0d:0c:4f:d4:ed:51:c4:03:ea:b7:f3:fc:09:ce:
         d3:9e:45:b0:4f:4e:01:72:d3:01:39:35:5a:bc:c4:c8:71:52:
         7b:c4:e9:a0:29:5e:64:87:b4:89:4a:62:8e:98:fa:7c:0b:ec:
         58:66:37:01:83:51:bc:dc:c7:20:ea:89:f9:5a:c7:a4:f6:24:
         c4:3d:9c:c2:d5:93:61:22:ec:94:7b:31:ba:c6:36:27:f8:a5:
         a5:c2:d9:cf:db:21:f7:05:ec:8f:f1:b5:8e:d9:15:2d:1d:a2:
         6b:a0:93:ee:39:57:02:d6:97:93:98:18:20:53:2c:c0:1a:a8:
         a4:fb:d1:bf:ba:18:fd:94:83:ff:c3:72:99:5f:a0:00:3a:07:
         4e:35:fa:98:b9:bd:49:69:a2:f6:ce:a9:0f:86:c8:c4:61:c8:
         fc:bc:6f:63:a5:75:c3:8e:d0:7d:02:7e:82:21:98:4e:21:f1:
         bf:db:dd:16:9a:cb:7a:d3:48:0a:1c:ab:af:9b:67:c3:2f:f3:
         7f:ea:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 10:40:23 2024 by rpki-client on console-fra.rpki-client.org