Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
File:                     ryfUX8GLqRerHomhfvC2NgmEgiQ.mft (raw, json)
Hash identifier:          lp8RLv+hA5ae3G8RroAMQRRDiBAGGvIeOE+AqxEibqk=
Subject key identifier:   64:0E:57:84:3A:0C:B0:97:DF:4D:BB:F8:69:18:B9:0C:0C:FA:AF:E2
Authority key identifier: AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24
Certificate issuer:       /CN=af27d45fc18ba917ab1e89a17ef0b63609848224
Certificate serial:       019355761CFAF82F9626CD08FCABFFDEA97F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
Manifest number:          1016
Signing time:             Fri 22 Nov 2024 20:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:24 +0000
Files and hashes:         1: ryfUX8GLqRerHomhfvC2NgmEgiQ.crl (hash: n0zADUVYR9xj0xvpXmkGbQ6k7AReBULiCE6fm/OBsLQ=)
                          2: slEVNhUUXB4-GhFIS0vj7DriG6Q.roa (hash: H//hd4sL1mLGuG7Tk+EwlPC/CspdPKEr4uZ4w/4voBs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:1c:fa:f8:2f:96:26:cd:08:fc:ab:ff:de:a9:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af27d45fc18ba917ab1e89a17ef0b63609848224
        Validity
            Not Before: Nov 22 20:00:24 2024 GMT
            Not After : Nov 23 20:00:24 2024 GMT
        Subject: CN=640e57843a0cb097df4dbbf86918b90c0cfaafe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:87:49:34:da:9e:d1:f3:b0:ae:25:52:ec:
                    09:22:1f:b1:26:aa:2f:f3:8a:2c:af:36:a1:00:51:
                    a7:be:4e:1e:d7:8d:8a:9b:e8:aa:f2:c2:fd:fa:86:
                    30:5d:e0:40:14:31:70:88:b1:fd:38:c2:4a:94:b8:
                    07:65:3f:1a:2c:4b:d9:ba:52:f5:21:4b:7c:77:90:
                    e1:aa:69:88:b3:4c:ad:c1:6c:57:aa:0b:27:22:9b:
                    00:17:63:fa:b9:23:eb:e5:16:fa:1c:9d:bd:74:88:
                    15:d5:24:ae:56:4b:5c:79:d6:4e:6f:e0:b2:8b:73:
                    18:b3:b1:c3:ab:0c:88:a0:e9:1d:4f:1b:ce:2f:a4:
                    81:67:20:b8:25:41:a1:48:c0:98:7d:b4:a6:b3:ca:
                    71:0a:10:88:ff:db:80:6b:1f:29:b6:7b:e5:d3:dd:
                    5e:a4:56:fa:7e:cb:87:f7:b8:d6:20:3a:36:af:5c:
                    a6:89:37:54:cb:b2:ca:87:90:c5:0a:1e:a2:fb:01:
                    6b:da:46:f9:7b:24:8f:3e:46:8e:73:b4:67:70:4c:
                    b4:9e:01:cc:ff:54:38:a5:e8:28:3b:a7:f4:86:92:
                    60:30:f8:ba:41:9d:16:8a:43:28:7a:30:37:e1:85:
                    01:49:5a:69:0c:4e:62:59:78:cd:0c:0b:49:3a:47:
                    6c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0E:57:84:3A:0C:B0:97:DF:4D:BB:F8:69:18:B9:0C:0C:FA:AF:E2
            X509v3 Authority Key Identifier:
                keyid:AF:27:D4:5F:C1:8B:A9:17:AB:1E:89:A1:7E:F0:B6:36:09:84:82:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryfUX8GLqRerHomhfvC2NgmEgiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/441755-b52f-4fb6-b3ef-7acbc6c9f985/1/ryfUX8GLqRerHomhfvC2NgmEgiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ba:57:87:33:f8:be:c6:db:16:02:62:bc:61:56:8b:ad:f9:
         1f:38:1e:7e:a3:c5:ef:cd:1f:02:b5:e6:58:14:ea:46:de:c0:
         e5:7d:55:de:cd:3a:87:ad:a4:5d:4b:5b:c7:63:b3:ae:69:43:
         47:51:3a:58:cf:27:08:2d:9e:e6:87:26:d5:2b:19:d3:f0:e2:
         31:88:d7:d2:e8:cc:c5:62:bb:4c:1e:06:6c:d1:5c:0d:d4:50:
         0f:96:20:d6:68:4e:ca:3c:52:00:55:f4:96:a1:30:2a:b7:16:
         3d:c4:4b:dc:2e:8d:77:85:64:42:f0:77:27:7a:7a:4a:57:5f:
         84:b8:4b:64:b4:9b:3f:ca:70:c8:d9:9e:a4:c6:11:da:95:0e:
         39:4b:ba:40:a0:06:5a:cc:55:9e:2d:8d:58:e6:98:6c:0a:dd:
         69:7e:88:62:4c:c2:a2:53:35:e7:d6:7e:c3:dc:ef:c3:e2:cb:
         07:a0:27:4a:06:8d:77:4a:c3:b7:7e:5c:c8:38:46:55:a7:a8:
         36:13:fd:e7:a3:0d:bb:13:2b:64:a9:3d:2b:5d:25:b6:9c:25:
         ff:42:40:e6:ee:e8:bf:75:f1:16:71:b5:58:e6:df:26:d9:89:
         f6:10:09:68:5c:3a:2c:df:0e:69:e3:22:ef:df:46:0a:c5:d1:
         c4:0d:4b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:16:07 2024 by rpki-client on console-fra.rpki-client.org