Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File:                     CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier:          R8JCuN+pzbmVjUga1rA3YHWx+G5q6NvPYAz+tKQhov8=
Subject key identifier:   22:26:29:25:81:5E:20:A2:A6:5B:25:2C:52:86:1C:80:15:FE:F3:EC
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer:       /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial:       019356890FBC2B09BC2E58017244E65BC68E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number:          1303
Signing time:             Sat 23 Nov 2024 01:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:43 +0000
Files and hashes:         1: 7AHTkprolq0OJu5cfBTj1ro2vGA.roa (hash: AbDRRQqzibNK6LjOLSITw2qbjPdrdX3hG7XetcyxxGM=)
                          2: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: +ctyCFOILN0euRWy/9qry51AjKwUwUjNUv5wkuH0SPs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:0f:bc:2b:09:bc:2e:58:01:72:44:e6:5b:c6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
        Validity
            Not Before: Nov 23 01:00:43 2024 GMT
            Not After : Nov 24 01:00:43 2024 GMT
        Subject: CN=22262925815e20a2a65b252c52861c8015fef3ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:aa:ab:a6:a3:43:94:9e:a7:88:42:17:17:
                    5a:01:ab:c1:eb:8e:02:42:d2:87:05:14:6f:dc:d7:
                    d4:46:45:3f:ce:e0:5d:52:28:b7:09:a2:ef:71:1d:
                    05:3c:4a:05:56:0e:88:ed:2a:9c:da:71:d7:5b:4e:
                    c0:fb:ce:d8:4d:9e:a4:0a:ea:ab:93:5d:57:f0:93:
                    c9:59:c4:b3:b4:d7:2c:92:e3:5d:11:71:fc:c0:7d:
                    08:2d:2f:a7:2d:33:49:46:02:3c:74:7b:d2:d7:29:
                    02:17:17:0b:bd:25:78:31:eb:df:b6:98:85:90:b8:
                    6e:79:a0:92:f4:c0:83:69:b6:a1:01:4d:3b:59:c7:
                    b0:cc:78:62:20:5c:4a:9c:96:57:8e:df:8f:40:a9:
                    bf:8a:d8:46:dc:a7:a1:00:b4:00:95:55:2b:80:36:
                    9e:c9:ab:b5:20:fc:29:04:de:a9:a2:f4:a3:60:db:
                    22:9a:e9:db:3f:c7:04:db:22:d3:21:6c:66:c1:eb:
                    57:ba:64:9a:dc:ce:ac:32:cc:44:b9:cc:f5:d5:a2:
                    7d:37:a8:9c:c3:a1:ec:f6:89:b6:69:7a:86:b9:29:
                    f8:2d:52:7d:0c:c7:c0:81:c6:fe:be:84:42:9e:5c:
                    cb:eb:2c:f9:d8:70:27:c1:ae:cd:22:cd:d4:17:2b:
                    3c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:26:29:25:81:5E:20:A2:A6:5B:25:2C:52:86:1C:80:15:FE:F3:EC
            X509v3 Authority Key Identifier:
                keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b8:7e:53:fc:2d:e4:64:15:5c:86:e4:bc:ce:0d:1f:79:25:
         97:a5:b3:e1:66:be:06:90:80:13:a2:e8:e3:33:78:21:63:f2:
         3d:c9:b1:43:a5:29:1b:7e:08:93:ed:b9:9e:20:1f:f7:e9:38:
         10:ec:04:3a:87:f0:dc:39:24:6b:27:70:30:f2:1b:21:cb:09:
         09:db:5a:c7:4c:65:94:fe:ee:20:f1:76:81:f6:38:1e:ba:20:
         e0:71:3a:f4:d8:9e:dc:83:5c:1c:f6:ba:ec:93:77:7f:db:70:
         0b:cf:27:5b:f1:a0:c4:e4:0d:72:ff:64:e6:47:cb:5d:07:8f:
         27:96:53:9d:8e:76:fb:5f:ca:80:6a:5c:06:06:24:0b:ad:3a:
         5e:ff:d4:ed:37:3d:2b:1c:5f:68:d1:22:2b:c6:e7:89:25:c0:
         50:a6:1a:9c:4b:c5:93:65:e7:1d:00:70:7d:c5:fb:55:2b:0f:
         52:f8:9d:d8:11:56:34:34:93:ec:9d:b5:79:34:18:34:72:f8:
         64:b9:53:cd:1a:b5:16:0d:6b:af:c6:7e:a3:12:c0:10:50:25:
         75:d0:6d:7c:b1:73:ea:f8:d0:b0:24:05:cb:ab:04:aa:e7:14:
         7b:29:aa:a1:d0:2d:96:d0:ad:3b:40:d6:a8:40:15:ad:f8:1c:
         ac:76:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:17:53 2024 by rpki-client on console-fra.rpki-client.org