Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File:                     ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier:          XrYpvQxniYDMXiJj6Na7DjX3gYo2povLMi++m17y6gw=
Subject key identifier:   F8:7C:03:47:1C:A6:0D:A7:58:E4:9B:7F:94:3E:65:80:87:9C:D6:07
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer:       /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial:       0194067CA6726A29885D79E1C1490C450920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number:          02E1
Signing time:             Fri 27 Dec 2024 05:00:19 +0000
Manifest this update:     Fri 27 Dec 2024 05:00:19 +0000
Manifest next update:     Sat 28 Dec 2024 05:00:19 +0000
Files and hashes:         1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: Vv4JpOpJNOKh7aBBQlBojCiK+4xK69l9i/qzdx8fmog=)
                          2: j5pHZJDILAzvxnw217vMUvD8Ubk.roa (hash: 17ZHEbzWuKc4HADtRyJNYCwNXyuaaUxAm031hLHyjpU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 05:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:06:7c:a6:72:6a:29:88:5d:79:e1:c1:49:0c:45:09:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
        Validity
            Not Before: Dec 27 05:00:19 2024 GMT
            Not After : Dec 28 05:00:19 2024 GMT
        Subject: CN=f87c03471ca60da758e49b7f943e6580879cd607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:69:f1:3c:1a:2c:db:25:2b:e4:52:a3:0c:
                    fe:a3:67:92:47:14:82:cf:51:c1:a6:ed:f3:bc:44:
                    a6:40:6b:8c:20:86:1f:30:85:0f:d1:62:db:54:af:
                    76:18:3d:03:54:a1:6a:d7:74:65:e4:04:00:40:44:
                    35:c7:cb:a7:90:d5:46:1d:56:73:a1:f6:b7:04:5a:
                    01:ca:51:bd:d0:66:74:93:3a:f7:71:10:5e:85:71:
                    43:ad:eb:aa:fe:e8:ab:fc:6f:9c:e7:b0:26:7d:8b:
                    92:55:34:d1:2b:f8:36:73:8a:49:03:e8:8e:83:a3:
                    af:18:96:71:54:2d:f8:ed:02:fb:f0:5f:53:c0:da:
                    9c:24:8c:6b:f3:9b:d8:f3:3a:21:12:67:c5:97:a2:
                    13:3e:d4:74:34:72:ed:3d:43:ab:a6:99:9d:23:d4:
                    d1:90:42:b0:a3:10:9a:56:d8:ac:cc:ea:21:35:d3:
                    a7:a7:ad:20:b9:7f:81:9c:19:1a:35:49:5d:08:ee:
                    39:9e:01:95:5d:90:21:5f:4e:a5:63:99:9f:34:62:
                    ee:70:0b:fe:51:34:e9:e4:f6:d9:b8:04:1f:d9:b6:
                    54:0e:ff:87:47:cf:6c:ed:c4:2b:09:32:7c:91:8d:
                    c2:9a:54:eb:29:d6:c5:4d:71:1a:c1:4e:d4:aa:69:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7C:03:47:1C:A6:0D:A7:58:E4:9B:7F:94:3E:65:80:87:9C:D6:07
            X509v3 Authority Key Identifier:
                keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:55:ca:4b:78:53:0e:09:2d:92:b4:33:80:ac:fe:2f:9d:4f:
         1e:a5:25:ea:8c:6f:6a:75:b8:12:e0:1c:bd:f8:47:54:38:c8:
         9c:a1:9b:8f:84:ec:f8:1c:20:1c:08:f2:4b:49:65:96:a6:f5:
         0a:08:c7:63:59:c0:47:87:32:25:18:0c:41:cc:a9:94:4f:78:
         78:a2:ff:f3:fa:eb:8f:e0:cc:e7:d8:0c:3e:c8:7d:6a:44:db:
         15:83:08:48:9a:52:6b:a2:e3:ea:0c:23:70:d8:01:82:3e:25:
         67:c3:f1:3c:32:18:53:ed:ce:1c:24:4a:1a:50:29:72:57:f9:
         a9:d5:ca:15:66:15:f4:a7:5c:6a:bd:08:e1:35:53:f9:48:b1:
         72:ff:3f:0d:87:42:5f:83:7d:61:9f:de:f4:d3:aa:d7:98:7b:
         a5:d5:4f:aa:63:f6:18:05:b3:1d:d3:4c:ef:61:d1:00:02:84:
         b4:0e:23:b1:da:ea:f4:09:64:78:49:fc:b5:5a:5b:9d:2e:8c:
         d0:4a:5d:47:cf:04:37:38:9f:ea:1d:1c:c4:c4:ef:2e:63:13:
         6a:07:5d:11:c2:e0:da:11:9c:19:d0:4a:d8:26:a7:23:59:bb:
         7b:ba:c7:ad:3c:1b:30:43:68:18:e9:79:f2:71:0e:7f:76:07:
         56:e8:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 11:11:37 2024 by rpki-client on console-fra.rpki-client.org