Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File:                     JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier:          dZiZd+RU/CkNW/BBzCAmKzqKz7fHRP1VZE4VtYXhVdY=
Subject key identifier:   74:33:FA:6C:65:4A:0B:83:F6:E6:C6:C8:81:F6:63:E4:11:3D:B3:94
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer:       /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial:       0192F99F2FF70E8B5D5815F6EB415E221A73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number:          69
Signing time:             Tue 05 Nov 2024 00:00:12 +0000
Manifest this update:     Tue 05 Nov 2024 00:00:12 +0000
Manifest next update:     Wed 06 Nov 2024 00:00:12 +0000
Files and hashes:         1: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: oJtDBEyo3/Dej3iAxtfFRt8MvwYmyvjP1d1GV3nLhV4=)
                          2: Re9d_3e2ML2VYlW1Nk22qcnwWqM.roa (hash: G/nM+Q9myEvCqCj4lrQFQEME9TokJtDU2Sma7suqPi8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Nov 2024 23:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:f9:9f:2f:f7:0e:8b:5d:58:15:f6:eb:41:5e:22:1a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
        Validity
            Not Before: Nov  5 00:00:12 2024 GMT
            Not After : Nov  6 00:00:12 2024 GMT
        Subject: CN=7433fa6c654a0b83f6e6c6c881f663e4113db394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:14:f3:7b:a8:36:27:50:7f:d4:f8:44:92:
                    7d:69:65:5d:93:52:7a:0e:8f:19:3c:11:e3:52:47:
                    e4:5e:e4:2a:2d:41:49:20:a1:97:5d:e3:f1:3a:b7:
                    b0:84:4e:e1:fe:d8:8f:82:ba:37:32:ce:7e:3f:4a:
                    de:9d:5d:90:33:51:3a:5b:74:d1:2f:7d:38:89:4a:
                    28:59:02:ca:90:cd:8a:eb:94:71:38:cb:26:f2:28:
                    65:78:bc:22:a1:e3:48:b6:e4:34:d1:70:31:74:70:
                    4a:a4:bd:e7:22:17:cd:a6:4f:f9:03:33:8b:3a:e8:
                    af:87:d5:00:24:0e:04:c5:62:02:5c:e0:3d:78:36:
                    3a:6b:e1:d0:f7:81:a9:2a:70:6c:3f:eb:db:26:17:
                    af:34:9d:b0:67:de:92:4a:59:f2:63:e6:4d:2f:f2:
                    06:d3:88:8a:85:cd:4e:de:ea:15:31:bd:89:96:0a:
                    5a:dc:15:e5:a6:86:47:99:f7:a6:27:5a:b3:ee:3c:
                    70:10:05:6b:4d:e3:3c:0b:d5:1a:20:3a:cb:71:a6:
                    8c:1d:2b:30:b5:20:50:05:ae:14:70:81:ef:06:ac:
                    3c:33:5c:ad:34:06:53:22:e4:ee:76:cc:1d:7b:af:
                    89:a7:5f:2b:9a:7e:a1:9a:9e:3b:a4:d4:60:8d:a7:
                    95:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:33:FA:6C:65:4A:0B:83:F6:E6:C6:C8:81:F6:63:E4:11:3D:B3:94
            X509v3 Authority Key Identifier:
                keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:0c:a8:01:91:37:f7:09:b6:96:bc:d7:e8:9f:78:3b:04:4d:
         0e:d5:cc:07:97:5d:92:4d:d8:d2:08:a7:44:eb:0f:57:0c:5a:
         7d:7d:1a:b8:fc:c1:23:7b:4b:0f:8f:20:29:ea:79:31:d2:48:
         24:56:0b:bc:a2:f5:11:47:1e:39:9e:3c:47:ba:55:9e:00:4b:
         71:5f:7d:7f:c0:db:09:9d:b5:2e:80:75:a3:6b:c1:b2:12:21:
         88:26:f0:06:54:27:e3:1f:99:7c:b3:87:d3:3e:16:df:d1:97:
         79:4e:94:77:92:cd:69:f1:f5:22:85:95:ed:3b:2c:33:55:19:
         78:e9:93:74:5b:46:58:37:f9:f5:e3:b5:d9:6c:c1:db:38:6c:
         da:f0:27:81:2d:21:2d:e0:0d:4c:e0:94:8e:e3:ff:c6:6a:19:
         26:1e:95:96:c7:ac:41:bc:51:51:db:49:ca:f4:20:03:02:4c:
         6d:a3:89:e2:0a:f9:24:6f:8c:fb:bc:2e:25:2a:a2:5c:a4:2c:
         5d:6f:5d:b3:e4:8c:0a:f2:ed:ef:b4:74:72:96:65:37:eb:2c:
         0e:f2:1e:75:0f:98:82:a3:e3:54:13:e4:33:b3:73:db:48:9a:
         9b:92:cf:46:56:1b:65:e5:5e:77:3d:4d:19:da:42:4c:d5:b4:
         52:a4:4e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 07:44:18 2024 by rpki-client on console-ams.rpki-client.org