Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
File:                     J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json)
Hash identifier:          4arWgAkvv/BGtpQ8Hw6XLE6yoC3jDe0OZlDYyMfAWe4=
Subject key identifier:   2C:37:3D:1B:2B:47:DD:09:36:F9:7F:70:86:99:0B:1B:78:C3:02:0F
Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
Certificate issuer:       /CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Certificate serial:       0193696AB50204FF17C1390F8EE9BDC73C3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
Manifest number:          065A
Signing time:             Tue 26 Nov 2024 17:00:20 +0000
Manifest this update:     Tue 26 Nov 2024 17:00:20 +0000
Manifest next update:     Wed 27 Nov 2024 17:00:20 +0000
Files and hashes:         1: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: vYcZZUfhJqVc9A3uPeiXMrpLD2+qbhxi3e0X3oga9xg=)
                          2: SbucjNaBf0iFMZ4RmEFQ3waUGpw.roa (hash: E0ikUb/Jtkg17u1payevWcxT01/YOVAOXJGawI3ZTcA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:6a:b5:02:04:ff:17:c1:39:0f:8e:e9:bd:c7:3c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0
        Validity
            Not Before: Nov 26 17:00:20 2024 GMT
            Not After : Nov 27 17:00:20 2024 GMT
        Subject: CN=2c373d1b2b47dd0936f97f7086990b1b78c3020f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:11:50:d1:08:b9:40:7a:f5:00:b9:d2:ec:
                    b3:fc:a0:7d:9a:80:ea:fa:9d:3e:e4:16:e9:61:f3:
                    43:8f:67:39:17:cc:c7:b7:9a:66:41:4d:a0:ac:09:
                    11:52:1b:c7:4d:9e:b3:65:2e:aa:74:5b:5d:fc:a8:
                    55:6d:84:ed:e6:ae:ed:45:c1:07:42:ae:40:ec:49:
                    08:cd:e4:df:95:38:83:4e:a8:7c:1f:be:d0:e4:7a:
                    73:84:b5:0c:c0:6e:fc:70:20:30:6e:32:67:45:50:
                    06:fc:a2:73:7c:37:ea:f0:28:dc:aa:43:86:29:4d:
                    69:73:dd:29:33:82:6c:42:6f:ab:5d:27:0d:65:09:
                    ea:27:90:c9:0b:1c:90:e8:31:02:ea:87:74:22:73:
                    e7:4e:de:b1:8c:34:78:1e:38:29:0e:8a:da:b6:29:
                    14:c5:d3:52:52:0a:53:31:1a:9a:91:c1:d3:ed:20:
                    ea:54:ae:5d:be:49:41:5c:76:6e:d6:71:03:02:b4:
                    6b:af:db:08:a1:dd:fa:25:35:cb:53:25:84:16:b5:
                    7d:63:e5:c9:4c:48:6d:8c:50:f8:88:62:4a:29:9d:
                    ff:5e:cc:e0:fd:77:12:ec:93:c5:6a:f2:07:85:85:
                    2f:a2:10:ec:ca:dd:6e:e0:8f:4a:19:88:d7:20:73:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:37:3D:1B:2B:47:DD:09:36:F9:7F:70:86:99:0B:1B:78:C3:02:0F
            X509v3 Authority Key Identifier:
                keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b6:81:f6:de:c0:36:89:1f:2e:ce:88:14:52:4e:f2:1b:f8:
         7f:0b:96:ca:14:f1:c4:d6:72:e8:b2:d4:40:83:0e:c4:29:9a:
         ea:34:40:ef:bf:3b:58:b1:fa:67:57:a7:2a:3f:47:99:23:11:
         34:e6:46:71:25:63:37:a4:55:a5:f9:05:a3:48:16:2e:3c:bb:
         12:65:14:88:34:03:5d:88:6c:02:a8:b0:89:bf:63:31:a3:a6:
         8d:2d:46:f5:38:22:e7:6f:83:8c:38:9b:40:4a:f3:4a:b3:98:
         53:f2:df:6b:f9:bc:c4:ee:42:99:b7:41:b3:eb:be:88:85:8b:
         b2:a5:87:11:93:30:91:c7:20:ca:47:b6:79:a6:e8:e4:09:aa:
         f4:04:52:c7:e0:ee:8d:d1:cc:99:04:97:58:e2:71:90:25:f7:
         d1:bf:18:49:b3:1a:8a:d3:14:6f:52:9a:2e:ed:07:b9:b0:5b:
         fa:bb:b4:e6:ae:17:51:f7:94:e4:8d:eb:90:7c:2b:86:1d:29:
         03:bd:d3:5f:d1:db:b5:75:6a:ea:04:23:10:0f:ff:1e:95:3b:
         44:db:f0:fa:6f:e7:56:fa:e6:0f:96:cf:65:7e:a0:95:3d:f0:
         5b:c1:53:5a:43:e7:6e:bb:d8:50:d5:9d:8d:a9:9e:d4:74:1a:
         e0:43:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:12 2024 by rpki-client on console-ams.rpki-client.org