Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File:                     fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier:          92KGT7qUnFwpzFpTCFH08nBXHb3hSI24g27Uh1rmmEI=
Subject key identifier:   08:CD:06:4C:08:13:0F:58:01:A2:AA:93:E4:FF:75:B3:4C:64:1F:AC
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer:       /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial:       01935689D123697F9B89D23548929FFD15A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:01:32 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:32 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:32 +0000
Files and hashes:         1: XCHFsiw98Ra_dX2RtR0kSz-jB5E.roa (hash: mWSzzq6ojvvQbNnzaTDCJQ9VnDdZBJzFxq38w1wipNE=)
                          2: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: El47osBaYjZcxoNm21nKpT5hK1hgiNjEab9ueplVMSU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:d1:23:69:7f:9b:89:d2:35:48:92:9f:fd:15:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
        Validity
            Not Before: Nov 23 01:01:32 2024 GMT
            Not After : Nov 24 01:01:32 2024 GMT
        Subject: CN=08cd064c08130f5801a2aa93e4ff75b34c641fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:27:b0:8f:ab:8e:13:06:1c:37:07:e7:75:
                    d5:67:50:13:73:9f:e5:b2:e4:ed:a2:d6:ff:f8:54:
                    68:41:5c:f4:b1:7a:e3:e9:91:5d:8e:17:ef:86:49:
                    b5:14:2a:0a:a0:0b:ca:c1:6a:1d:9e:89:4e:b6:0e:
                    22:bc:e5:ca:5e:c1:b8:6c:2f:77:2d:03:41:d1:1e:
                    75:09:10:50:8c:02:a9:49:20:d8:02:ea:5c:c2:b3:
                    d3:4a:e7:19:96:ed:a8:69:f3:e0:2f:c0:a3:10:24:
                    47:1f:70:48:d2:b8:db:57:a2:b7:7e:45:32:7a:26:
                    db:c0:17:27:54:02:2c:15:da:b4:5c:78:27:00:5d:
                    ca:9a:20:04:bb:81:35:b6:eb:61:1e:df:78:7d:d7:
                    df:e5:c9:de:7c:4c:91:24:0b:e1:11:07:41:47:61:
                    37:5f:c8:98:54:e1:10:8d:34:1f:95:49:c0:a6:72:
                    4a:8b:58:ca:b0:2f:30:0c:ce:4e:e4:4d:9c:b6:a9:
                    d3:93:46:52:d4:71:45:4a:4e:af:90:02:72:3d:e4:
                    70:90:e8:04:83:89:5a:77:fa:83:f9:e8:84:ab:d2:
                    f4:ca:e8:60:6e:2b:0c:b8:0b:66:e7:fb:02:e4:91:
                    b0:52:3b:a3:62:f4:73:b8:2d:4e:0c:fd:b6:30:0e:
                    a2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CD:06:4C:08:13:0F:58:01:A2:AA:93:E4:FF:75:B3:4C:64:1F:AC
            X509v3 Authority Key Identifier:
                keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6d:ae:9f:6d:4f:06:b8:5c:b3:77:4d:b5:aa:22:44:87:e1:
         1b:24:4a:77:2f:23:2b:8f:e0:37:d5:38:47:bf:82:0a:04:98:
         20:7c:22:39:17:68:db:a9:b9:10:5f:59:e0:5e:e7:6a:9e:c8:
         3e:06:09:23:f9:e3:80:26:d3:0c:19:1e:bf:f2:c3:9f:ee:6e:
         1b:21:f2:22:07:bd:e2:24:64:ff:d4:73:11:dc:4d:f4:68:bd:
         5c:e7:01:53:b6:ed:11:5a:fb:5f:3d:4e:47:16:30:cc:2d:ce:
         5d:c8:44:ce:9a:95:18:d8:86:a1:99:ce:5b:17:9a:03:41:03:
         46:2a:b9:fa:54:19:82:ae:d4:7b:33:34:77:9a:e2:1c:48:02:
         3a:69:56:cc:33:1a:b5:e0:15:38:56:1b:4e:92:19:fa:00:03:
         41:4c:2f:84:df:c4:cf:ce:4b:7e:e3:9d:7a:e7:3f:9a:d9:8d:
         69:f6:0a:8a:1c:ed:64:1b:6e:2e:12:8a:6a:31:27:0a:29:7e:
         32:4e:31:74:7c:89:66:89:63:6b:4c:ea:13:a0:38:ef:6d:6f:
         b9:c1:52:8e:7a:c4:6e:dd:83:a4:c5:bb:71:b5:3b:09:9e:52:
         68:a6:12:9b:b9:70:d8:4e:cf:ec:55:8a:0f:e7:8a:0b:b4:c6:
         c6:e3:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:23 2024 by rpki-client on console-fra.rpki-client.org