Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.mft
File:                     1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.mft (raw, json)
Hash identifier:          x6kY2ECd6ExHa4RlVXIim1jbAwF/ZGEE+WHAt9daNac=
Subject key identifier:   16:9C:1E:82:A1:CB:FA:12:6A:09:74:81:54:C1:8A:2F:EB:50:C1:82
Authority key identifier: FB:75:48:DA:38:BE:B1:CE:72:F8:A6:93:3B:31:DA:5B:5C:65:48:34
Certificate issuer:       /CN=fb7548da38beb1ce72f8a6933b31da5b5c654834
Certificate serial:       019369A19482FD915DC72D47BDE5F12BD63B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.mft
Manifest number:          02A7
Signing time:             Tue 26 Nov 2024 18:00:17 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:17 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:17 +0000
Files and hashes:         1: 1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.crl (hash: tcQX2ys2qpfxnpS8TWa3b6aRQyHt0jsOG0x1TMZXDOY=)
                          2: 5DqRVBQiSxH6fb-7gPGkbB4qHOY.roa (hash: mdTGi5XhuTKs/DuTNhD0vtQHVVVMOcaGHLwkuy87xuM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:94:82:fd:91:5d:c7:2d:47:bd:e5:f1:2b:d6:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb7548da38beb1ce72f8a6933b31da5b5c654834
        Validity
            Not Before: Nov 26 18:00:17 2024 GMT
            Not After : Nov 27 18:00:17 2024 GMT
        Subject: CN=169c1e82a1cbfa126a09748154c18a2feb50c182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:ce:f2:97:7e:44:c1:ae:74:b2:8c:17:62:
                    94:dd:f2:6d:23:9b:be:c4:ea:d9:67:11:d6:b8:f3:
                    25:5a:96:f4:20:66:b0:8f:90:62:22:39:aa:89:ca:
                    ac:96:f7:4e:0b:89:64:67:23:b2:87:f3:38:79:cf:
                    12:a7:30:4a:8c:08:4e:03:ce:65:08:13:f1:90:41:
                    bc:17:02:da:cc:eb:6c:e6:83:cd:b4:ad:6f:ab:67:
                    88:bf:72:ac:c5:bc:a8:76:55:74:15:b7:41:85:71:
                    6a:20:ef:bd:17:66:9e:89:e5:1d:48:2d:13:d3:04:
                    4c:f6:75:3a:e3:aa:92:c4:bf:c6:b3:a3:44:04:90:
                    41:28:49:a9:ce:a5:27:15:82:fc:db:35:79:a6:ef:
                    4a:7c:62:8b:36:30:fa:57:52:ad:af:54:eb:b5:57:
                    0b:44:57:ca:8e:58:04:3b:a2:60:90:6e:c0:f9:1a:
                    46:b0:98:80:31:a9:04:14:3d:31:9f:37:74:87:d1:
                    37:2c:93:f7:49:5f:21:cd:1a:35:11:96:df:46:52:
                    17:c3:ab:be:bf:68:b7:76:5d:b0:13:85:fe:f0:32:
                    d8:00:01:6b:27:2b:28:c7:07:32:f9:91:e5:7a:e2:
                    bb:62:0d:82:a9:15:7a:fd:89:18:d7:1a:b3:f6:f7:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9C:1E:82:A1:CB:FA:12:6A:09:74:81:54:C1:8A:2F:EB:50:C1:82
            X509v3 Authority Key Identifier:
                keyid:FB:75:48:DA:38:BE:B1:CE:72:F8:A6:93:3B:31:DA:5B:5C:65:48:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/32e7dc-bd1a-425b-9ee1-01de2598629f/1/1-3VI2ji-sc5y-KaTOzHaW1xlSDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:6f:49:69:eb:12:33:d8:a3:a9:4e:ff:97:67:83:68:39:ec:
         63:1c:3b:e8:fc:c9:0b:f1:3c:8c:bf:c8:e8:86:73:10:df:c8:
         b4:67:e3:cc:f0:15:a5:49:8c:a7:b6:d1:bf:bd:28:af:e2:2e:
         35:67:5c:c0:1f:58:30:92:03:68:72:b4:d3:8b:7e:9e:25:26:
         f6:81:53:26:d8:c5:a1:44:b2:dc:e5:c1:62:4b:67:73:00:95:
         5f:ee:d6:1b:aa:4f:81:20:64:b8:3c:10:15:78:62:d0:05:f4:
         12:c1:15:ee:6c:e6:94:84:cf:f6:15:51:68:34:91:4c:fa:39:
         bc:75:27:e6:c7:e7:8e:19:7f:ef:48:44:61:7d:ed:d1:e8:30:
         05:a5:91:b6:7f:dd:66:cb:60:34:cd:e0:c8:c2:5c:c1:6f:fd:
         96:3b:06:f8:90:be:5d:ef:13:65:7e:0d:82:e7:51:e2:74:01:
         52:a2:a2:49:c1:b6:8c:cc:dd:d7:a2:12:e5:b9:8a:3f:b0:f3:
         ab:b7:56:e9:fd:85:2a:91:38:ec:b0:a5:3a:5e:10:9b:f3:f1:
         3f:69:1d:03:3a:9a:e3:3d:be:a7:46:8a:c8:f0:2b:76:57:8e:
         70:9d:60:d1:b3:21:2c:65:4c:4e:88:42:7d:53:56:4d:47:d7:
         84:9c:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:02:48 2024 by rpki-client on console-fra.rpki-client.org