Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
File:                     fTLe2jH-jq_NrW4qBv3iNufRHWE.mft (raw, json)
Hash identifier:          B/fCYnktQOd6d4zPyPskaOXn2P1ofZWX4XWuZcGuzLs=
Subject key identifier:   8E:9C:3D:F7:F5:9F:05:57:1B:5A:59:ED:20:C3:14:4A:70:23:5B:FC
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Certificate issuer:       /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial:       019361E844B2B316C99B719043D97E8D4C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
Manifest number:          06D7
Signing time:             Mon 25 Nov 2024 06:00:32 +0000
Manifest this update:     Mon 25 Nov 2024 06:00:32 +0000
Manifest next update:     Tue 26 Nov 2024 06:00:32 +0000
Files and hashes:         1: B3BGrd39iLup3n47Z9l43RfIi-4.roa (hash: KWHp3C5fy2/IL4fYJAKdAQyuTSn59RjUoLDEYLMuRvM=)
                          2: YGMliVOEpNXBpm6Jd6iWj7UOfU8.roa (hash: GN98KIt0HCf20TvoHohf6pGLzDV8aHMtj9CwNcIKFFg=)
                          3: fTLe2jH-jq_NrW4qBv3iNufRHWE.crl (hash: RwNK4KTcPc+Sy4MHRj7+Erh/FqdvVu0BtV2f6Ioxqks=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:61:e8:44:b2:b3:16:c9:9b:71:90:43:d9:7e:8d:4c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
        Validity
            Not Before: Nov 25 06:00:32 2024 GMT
            Not After : Nov 26 06:00:32 2024 GMT
        Subject: CN=8e9c3df7f59f05571b5a59ed20c3144a70235bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:d7:13:3e:5c:6e:fe:96:5a:7a:91:78:96:
                    aa:5d:48:41:e0:78:96:cb:dd:43:b8:d7:92:2d:24:
                    f4:bf:90:0d:04:16:1c:32:12:c4:6f:f2:b5:aa:49:
                    82:d3:12:4d:fc:16:80:1f:97:cf:46:ea:e8:24:d0:
                    4f:0a:85:44:e8:a2:26:e1:44:38:e4:78:ce:60:63:
                    b5:fe:e1:ef:a0:72:2b:41:bb:d3:db:48:dc:c2:a6:
                    33:09:a5:80:f1:85:d3:4e:e9:c2:14:26:e4:d4:ef:
                    d7:26:07:aa:04:10:30:49:e1:73:76:9d:77:12:80:
                    67:d6:99:14:b4:b1:39:09:9f:54:8d:0f:27:99:2d:
                    69:31:f4:39:72:3f:81:16:3b:b7:3b:a0:5d:25:cf:
                    61:df:fa:b8:80:86:1d:4a:ba:dd:05:f9:8d:a8:92:
                    2d:b0:49:8b:ee:62:12:78:34:17:eb:54:32:e0:12:
                    8a:ae:f5:41:63:4f:43:5f:db:9c:46:c8:7b:53:b4:
                    5f:37:f6:61:8d:4f:56:2f:c2:2a:58:8a:15:1e:81:
                    43:78:3a:75:23:1a:34:43:a9:eb:47:a3:16:36:a8:
                    0a:75:9c:80:37:7f:5e:9f:cf:6f:bd:b6:72:a1:57:
                    66:59:c3:5e:58:81:18:df:db:5e:65:31:44:0b:99:
                    a0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:3D:F7:F5:9F:05:57:1B:5A:59:ED:20:C3:14:4A:70:23:5B:FC
            X509v3 Authority Key Identifier:
                keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:73:6c:45:47:1f:bd:56:0d:82:1b:ef:15:ea:9c:d5:2a:66:
         ab:8d:75:c4:59:5f:6a:ad:c3:f1:19:82:c8:20:b2:d4:24:f1:
         a9:ec:32:f3:6a:dc:e7:08:96:de:98:9d:55:a4:47:70:1c:42:
         19:f9:b4:0f:e4:04:8b:31:6c:62:3a:84:f1:96:2f:76:4f:51:
         e7:34:93:f8:33:0a:07:fb:b5:1c:d2:9b:a7:b2:f0:38:6c:fb:
         6c:ca:34:88:cd:7c:0a:9d:74:c8:05:4b:90:a4:3a:eb:5d:63:
         b9:84:9d:cf:e7:2f:7f:57:27:71:68:0d:7d:79:77:2a:39:3b:
         26:65:05:2c:ab:ce:7f:3b:2b:de:d7:3c:4a:60:fa:a6:f7:c1:
         b3:ea:4f:e7:44:59:0b:d7:ff:18:0f:e6:98:89:11:d1:aa:ca:
         9f:b1:65:8c:e3:a9:55:1e:4f:2d:b3:4a:9f:96:03:2b:cf:99:
         48:fe:6b:18:28:19:1d:2d:e7:9f:db:f6:55:9c:d5:17:72:f8:
         e6:f9:9d:a2:27:48:70:09:93:b4:51:ac:cd:f1:04:1e:bd:29:
         59:b6:35:95:7c:b4:4a:b1:3e:76:81:e3:4d:71:ec:0e:eb:b6:
         5b:b0:26:1e:34:83:77:63:30:09:e7:8c:b8:08:98:d3:b2:35:
         27:f3:14:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:13:46 2024 by rpki-client on console-fra.rpki-client.org