Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
File:                     _CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft (raw, json)
Hash identifier:          ESkfMdBSo3N3xz/qpDIftFeRYhV2mHPGbJOW2X1Rhpg=
Subject key identifier:   8D:90:78:DD:E3:6B:66:32:3C:31:97:A5:B4:37:71:27:01:EA:8A:BC
Authority key identifier: FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D
Certificate issuer:       /CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
Certificate serial:       019355AD49BC043C8DCFEE1E0645340B5A00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
Manifest number:          11F0
Signing time:             Fri 22 Nov 2024 21:00:40 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:40 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:40 +0000
Files and hashes:         1: _CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl (hash: MK24+AUDsyS95FuwZn4+NONqvbY5iL0B619REiK9Tq8=)
                          2: hY9M2QeeTwiRu68HDF_CqD_J6hk.roa (hash: ZKXcCWK/ttM6DEvxrgBvlnwtXLr2gVoCzFpUYkJei/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:49:bc:04:3c:8d:cf:ee:1e:06:45:34:0b:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2621ee31e06aadc1ca3a376e457d8d0496b10d
        Validity
            Not Before: Nov 22 21:00:40 2024 GMT
            Not After : Nov 23 21:00:40 2024 GMT
        Subject: CN=8d9078dde36b66323c3197a5b437712701ea8abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:25:3d:7b:db:7e:b8:0d:7e:3e:0d:40:89:
                    f9:ae:59:a0:e6:ec:c7:ee:c1:a5:6a:a6:ea:96:2b:
                    5d:f2:01:4a:ea:f7:a7:09:53:5f:0f:c6:b4:93:a9:
                    6c:58:d6:b2:06:f6:90:6f:d0:ab:57:1a:b9:dc:53:
                    b8:0a:ba:06:58:03:a2:6b:c8:ed:83:07:31:0e:3c:
                    03:34:a9:7c:00:ce:1a:db:01:46:b8:bc:cf:b6:42:
                    bb:b6:d6:74:e1:d5:be:b2:0a:2b:b2:a0:13:d5:6e:
                    6d:9b:b0:32:16:f1:24:dc:34:ce:90:b1:89:1c:75:
                    4f:d6:3c:f9:85:79:4d:72:78:9f:81:9e:0d:a8:95:
                    8c:48:1e:b2:17:73:7d:e1:41:ef:67:0d:d6:74:f6:
                    bd:b3:14:c6:76:f5:50:04:2d:8e:f1:c7:ee:ed:a7:
                    20:9f:27:bc:eb:b4:55:c8:18:62:5f:f7:5b:5c:1b:
                    81:97:07:ad:3c:bf:90:60:c2:a0:f7:bd:22:02:1f:
                    5a:92:db:85:f6:30:1d:e4:3e:fc:ed:52:5a:ac:8d:
                    de:d4:cc:0c:c7:9c:85:6e:14:95:b0:9a:f3:bb:21:
                    be:fb:a2:31:63:3b:58:85:94:6d:3d:6b:02:9e:fe:
                    0f:1a:43:91:a2:60:ca:5d:c3:9a:89:1f:a7:0f:22:
                    2a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:90:78:DD:E3:6B:66:32:3C:31:97:A5:B4:37:71:27:01:EA:8A:BC
            X509v3 Authority Key Identifier:
                keyid:FC:26:21:EE:31:E0:6A:AD:C1:CA:3A:37:6E:45:7D:8D:04:96:B1:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/418fe2-4f7d-40ac-abe4-119bbd761973/1/_CYh7jHgaq3Byjo3bkV9jQSWsQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a0:8a:e2:a2:09:d7:75:09:38:c3:27:b5:cc:62:f4:cb:5f:
         f2:19:ea:db:2f:e2:ae:76:cb:35:fb:c7:da:f3:71:0e:8d:6e:
         65:39:f5:f3:5c:29:bf:58:d2:68:31:73:cc:d8:3a:92:57:64:
         e0:78:1d:bd:3e:9d:5a:14:1e:8c:00:97:bb:55:b2:24:e1:ed:
         10:6d:95:b7:6f:1c:07:48:fe:91:6e:37:af:58:9a:e6:0e:61:
         cd:43:a8:05:ae:61:c4:59:f4:7f:d9:a4:4e:33:2b:06:22:39:
         fc:3d:d8:fb:40:0d:71:99:1a:fb:4a:81:e1:03:a2:21:b0:42:
         58:5d:34:a7:a0:b7:5b:44:c9:39:15:e7:c6:ca:37:76:83:0f:
         c0:6e:88:5c:b6:0e:4d:76:da:73:75:6d:61:cd:3a:f2:4b:67:
         26:37:ab:90:bf:23:eb:45:91:0a:ed:51:fa:9f:b9:a9:e2:eb:
         8c:2e:e8:20:43:d8:a9:d2:16:19:10:3c:b3:f5:90:88:73:c2:
         5e:c8:e1:a4:70:99:8e:77:de:f9:ab:80:8c:20:14:0b:1b:5e:
         b5:de:06:21:2f:ba:0d:68:c3:ca:6a:db:dc:b9:05:de:6d:99:
         83:8f:6c:d4:81:d3:fb:3a:f5:9d:28:b6:dc:0e:62:e7:b1:43:
         53:52:f5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:28 2024 by rpki-client on console-fra.rpki-client.org