Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File:                     jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier:          T0E5Xj3kKaupiWDAwEAZVqlyIIisV4Y0XLsTgy9Wovc=
Subject key identifier:   C9:3E:41:73:BB:D0:A1:9C:75:CA:DA:50:D0:65:08:BA:5A:1B:1A:59
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer:       /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial:       019356F6EB1FF035145C3AD734FFECDD768E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number:          03CE
Signing time:             Sat 23 Nov 2024 03:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:42 +0000
Files and hashes:         1: NuoEBykgNJ8wntY1daEIfYtdSWQ.roa (hash: Hy4vyU7fI56WAeDYEdBe2J0Suqq6Jtr5MIHYxqAjeys=)
                          2: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: OoPjcYkGqkggUOhAu6PA8ujGrjRUqh/OdWGtuMqRddk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:eb:1f:f0:35:14:5c:3a:d7:34:ff:ec:dd:76:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
        Validity
            Not Before: Nov 23 03:00:42 2024 GMT
            Not After : Nov 24 03:00:42 2024 GMT
        Subject: CN=c93e4173bbd0a19c75cada50d06508ba5a1b1a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:13:1c:1c:60:82:5f:68:96:be:bb:aa:16:7f:
                    81:68:13:fc:1a:c7:15:be:a6:20:9d:22:f7:1d:63:
                    21:d0:14:68:51:a9:d0:82:72:c9:0b:41:0c:5a:ac:
                    c7:de:a6:f1:8f:01:46:17:c5:56:7a:00:bf:76:0d:
                    c4:6b:92:4b:18:1f:f5:2f:b8:45:5a:b8:03:63:23:
                    9b:17:6b:ba:bd:3c:cc:70:a6:27:8d:17:83:04:4d:
                    e1:3f:6c:35:de:6e:92:cb:69:c3:45:a7:d9:81:95:
                    bf:4a:c0:5d:43:c4:db:f5:d7:34:83:42:e8:e7:3b:
                    66:da:5a:08:3d:88:7b:be:41:23:d6:a9:45:c4:72:
                    05:f6:40:47:94:38:5b:20:27:65:9b:76:8d:96:09:
                    f4:30:85:81:1c:31:19:ad:e1:20:50:10:48:21:96:
                    9b:b0:7c:5c:42:44:88:48:e5:6c:3c:3b:6d:c2:9d:
                    26:57:d5:38:f0:df:cc:86:04:b9:5a:e5:5d:9c:d9:
                    63:8d:14:a4:54:d5:db:fb:a5:0b:f7:6c:ef:77:30:
                    77:e7:6a:8f:28:a5:ef:cd:56:44:18:b3:c4:90:4a:
                    cb:8f:f1:d6:0b:2a:de:20:b7:bc:fb:6c:7e:d6:29:
                    9b:73:a9:e9:c6:a2:97:d0:42:6b:05:ae:3e:74:c3:
                    39:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3E:41:73:BB:D0:A1:9C:75:CA:DA:50:D0:65:08:BA:5A:1B:1A:59
            X509v3 Authority Key Identifier:
                keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e7:33:b8:cb:47:57:a3:13:20:ec:0a:3d:76:7f:bc:bd:1c:
         41:09:97:8f:ca:ff:2d:bf:5b:8d:c1:3a:d3:13:7a:6f:9a:ea:
         49:a3:5f:51:34:18:c4:a5:ab:e2:41:e3:8a:d8:8b:b1:35:18:
         66:57:e9:ec:b4:08:46:d8:88:f8:bf:f4:85:46:e6:1b:15:bc:
         a0:5d:21:be:29:d3:ce:19:52:6d:43:1f:0d:bc:79:6c:2d:6b:
         fe:2b:77:78:b2:cc:80:82:e9:09:bd:f2:ad:5a:ec:58:1a:99:
         90:6e:33:4c:fe:75:38:38:25:63:bc:f5:4e:8d:4f:97:8f:e6:
         ab:05:19:b7:bd:1d:aa:a3:e7:43:d0:8c:a4:62:56:db:7d:cc:
         4e:62:24:83:ce:b5:8c:42:4d:6b:b2:3f:46:3e:e0:0b:c9:d3:
         40:6f:68:4a:ee:8c:13:c0:3c:94:cb:3b:bb:ba:f2:9b:77:4a:
         17:f8:aa:34:44:a8:59:68:56:d9:54:35:4b:55:21:a5:8a:de:
         99:bc:9f:92:46:45:a0:7b:cc:22:e0:14:88:f9:8c:fe:ef:3f:
         f5:46:ec:25:b5:cb:55:02:c5:5e:8d:c3:71:07:c7:7a:7d:3f:
         75:8a:bd:9e:05:15:a4:de:a1:99:4c:80:61:9a:75:5e:06:72:
         c5:3b:bc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:18 2024 by rpki-client on console-fra.rpki-client.org