Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
File:                     Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft (raw, json)
Hash identifier:          HdFHvp6Z/LijGIAmY1Pvw8YsG/19njMHYdSkGWVdDs8=
Subject key identifier:   7E:47:2F:DF:13:2A:4C:31:E4:06:BA:8A:74:44:5F:2C:16:4D:F3:2B
Authority key identifier: 21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
Certificate issuer:       /CN=21ae8e675e2ed20095983cbb72084f9740281b74
Certificate serial:       01935877752D966447A9633515C47AAC5C39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
Manifest number:          03AD
Signing time:             Sat 23 Nov 2024 10:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:43 +0000
Files and hashes:         1: Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl (hash: 5O4JoJyAaCHOJeuVQ9WzTL3AsqBDFHaJT43ebTT90H4=)
                          2: sin2FfPgi3AAT6bJHGYaOM-7Kms.roa (hash: fZAT2p+5sr3TMBVyI3xwmkUd/eF711hXnJBSlrfw60Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:75:2d:96:64:47:a9:63:35:15:c4:7a:ac:5c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ae8e675e2ed20095983cbb72084f9740281b74
        Validity
            Not Before: Nov 23 10:00:43 2024 GMT
            Not After : Nov 24 10:00:43 2024 GMT
        Subject: CN=7e472fdf132a4c31e406ba8a74445f2c164df32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:95:3b:ce:7c:0a:13:b8:f7:7d:ad:af:52:
                    70:22:19:b4:ea:62:6c:73:9b:f0:89:b1:81:13:16:
                    f5:d5:46:89:a1:34:d1:15:6d:27:a8:5d:04:6c:76:
                    f5:59:38:49:46:1e:9a:d3:46:06:82:12:a3:16:bb:
                    41:aa:71:1f:9b:63:fe:f4:c2:9a:e8:4b:68:65:98:
                    57:ed:aa:bd:8c:d0:53:57:db:77:ce:07:00:f8:cc:
                    2e:af:b6:f3:52:b5:8c:80:2c:81:ef:f6:ea:28:cd:
                    1b:64:f1:e0:3e:b0:8b:7e:68:5b:a6:0e:94:0e:96:
                    97:23:32:e4:87:25:fc:84:01:6d:c8:e7:d6:9b:f1:
                    55:60:d1:f3:c9:c8:f7:24:f8:0b:66:ee:69:a3:d2:
                    f0:fc:f6:30:63:b0:ba:0a:42:f0:69:ab:b8:dd:0d:
                    dc:98:db:12:27:01:aa:72:62:6e:fe:41:99:b6:de:
                    43:38:cc:e0:d3:f0:56:7e:60:b0:36:ec:af:a1:07:
                    a8:68:5f:79:f3:35:d4:bb:af:af:0a:df:a2:1f:c1:
                    f5:a7:69:c7:ac:f3:77:95:64:f0:0d:f3:45:20:c6:
                    4d:ab:83:78:a2:ef:ed:cd:e9:5f:32:23:e8:ec:66:
                    62:b1:54:ed:3a:33:29:59:eb:4f:dc:38:35:59:a4:
                    60:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:47:2F:DF:13:2A:4C:31:E4:06:BA:8A:74:44:5F:2C:16:4D:F3:2B
            X509v3 Authority Key Identifier:
                keyid:21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:4e:47:87:4a:38:0f:08:53:a3:6c:fa:3c:d4:d6:06:44:6c:
         ea:8a:c0:7c:3d:85:2c:4f:d1:0b:24:9a:32:6d:82:86:9a:0b:
         56:dd:4f:63:64:bc:c3:6b:91:28:b9:2b:a1:23:5d:50:66:a3:
         e6:29:79:fe:ac:ec:86:d9:8b:09:a1:b0:d1:bf:34:40:70:ba:
         7b:cf:7d:be:d3:ae:95:5c:ae:e7:6d:c5:a2:b7:14:9b:3e:f1:
         ce:35:7e:3a:93:ab:3e:ee:29:5a:75:44:e8:28:87:7a:89:1a:
         11:80:3f:39:ef:f1:32:da:8f:08:fc:36:e1:ed:2f:cb:25:da:
         29:9e:fe:2f:c3:71:51:40:f6:3a:14:a2:d2:2e:34:a9:83:e9:
         75:fc:2b:e8:e0:cb:3e:0e:db:29:4c:88:b0:85:12:24:c4:0a:
         40:61:b8:81:5a:2a:b5:ce:00:14:fc:ed:c1:d7:e5:65:f5:d9:
         b7:9c:4d:78:a1:ae:9a:35:7f:91:34:35:d9:d4:73:de:92:2c:
         6e:60:b2:e2:23:6d:8f:cc:f2:fb:03:ee:32:f7:54:dc:4a:0a:
         32:fe:25:4d:05:5e:3e:63:d3:6c:8c:f1:19:84:d4:34:5b:64:
         09:51:aa:c7:a3:b6:53:df:dc:a2:39:07:1b:03:c5:d7:ad:83:
         9a:5c:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:05:17 2024 by rpki-client on console-fra.rpki-client.org