Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File:                     1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier:          M2OiPqnNVtSpN1linsBt70SaUT2v1eo5glueN3zgi5k=
Subject key identifier:   C8:EE:37:EB:6B:5D:C4:0D:82:48:E2:A6:E2:BF:6B:94:E8:70:BA:2B
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer:       /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial:       0193527510F0E3845FF24742236B2CAE5969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number:          04B5
Signing time:             Fri 22 Nov 2024 06:00:23 +0000
Manifest this update:     Fri 22 Nov 2024 06:00:23 +0000
Manifest next update:     Sat 23 Nov 2024 06:00:23 +0000
Files and hashes:         1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: tg4atwNuLVPyIABV++74o941QgS7jSdlX8qvjSDAxqk=)
                          2: WMFTf2P7UB1MP8Dx-cIJgZbnEGA.roa (hash: /lg7oZVPX/kboOZDWfta2Bw+WC23P6F+paYpKDz1wZE=)
                          3: g2aDFMc_zeXBsyAvn7oEpAPzAyM.roa (hash: Ecwu6YSn7PBnhiSvevGuKG+9S0HmT1VyH8JQvLqhCvk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:75:10:f0:e3:84:5f:f2:47:42:23:6b:2c:ae:59:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
        Validity
            Not Before: Nov 22 06:00:23 2024 GMT
            Not After : Nov 23 06:00:23 2024 GMT
        Subject: CN=c8ee37eb6b5dc40d8248e2a6e2bf6b94e870ba2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:37:c2:76:3c:7b:5a:52:36:59:ba:05:4e:
                    1e:9b:0e:e4:06:19:59:a8:2b:b1:82:53:a2:86:6e:
                    2b:3e:a6:08:6b:8d:23:6d:06:6f:6c:be:58:6a:5e:
                    a2:3f:e7:0c:07:d6:44:f1:04:49:ca:d6:f7:e4:ce:
                    c7:dd:1b:7e:12:47:9a:3c:1f:8b:b7:53:78:d6:ff:
                    96:36:5e:80:8b:03:1c:bd:38:15:ed:35:a7:87:6f:
                    9b:36:e3:13:b8:11:44:0e:dc:80:84:3d:63:12:b1:
                    1a:8a:a0:93:7f:a0:93:fd:0d:15:f4:e5:24:9e:aa:
                    8b:02:e1:79:b7:fe:ea:ad:c7:6a:b9:6b:69:8d:7a:
                    ea:db:08:85:54:7f:96:6d:b7:18:2c:a2:ea:ef:28:
                    ce:a1:3f:11:64:46:44:7a:48:22:90:9a:ce:99:a5:
                    62:ab:65:0d:b7:54:e0:36:55:04:82:9c:7a:81:3b:
                    e4:d6:31:3d:78:06:8c:0b:5b:fe:bb:6f:0d:94:0f:
                    1d:b4:8a:b6:3c:47:71:2b:1d:94:a8:83:b0:5f:b0:
                    ec:2b:74:33:e3:e5:43:80:d1:3b:3b:94:85:9d:ab:
                    67:67:1e:0a:12:e6:a4:f2:c3:51:37:4a:2e:fe:c4:
                    6e:5a:bb:a6:c4:23:71:56:a2:cc:31:70:7d:fa:ae:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EE:37:EB:6B:5D:C4:0D:82:48:E2:A6:E2:BF:6B:94:E8:70:BA:2B
            X509v3 Authority Key Identifier:
                keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f7:7e:40:3f:49:41:9d:3e:b0:e1:5d:33:86:aa:bc:19:ba:
         25:90:6e:c6:85:5c:ab:40:96:98:63:25:4c:81:9d:2f:c2:5e:
         a7:55:ad:a7:70:ad:b2:d1:7f:a9:11:b0:4b:ba:7a:4f:23:95:
         78:d8:68:e1:f6:cd:3f:12:92:4e:29:81:42:9f:14:8b:57:cd:
         4b:7f:19:b2:b2:b4:21:bd:13:11:86:fd:e3:aa:6a:3e:e9:6e:
         8b:77:6f:1d:df:03:09:b5:f1:a9:84:ef:0c:5d:31:50:1f:23:
         ae:d1:60:18:f1:bd:52:1e:28:33:f7:33:d1:7b:ce:cb:6f:ba:
         c3:13:4c:c1:17:b3:0c:24:a6:5e:0b:70:23:0b:17:89:3a:59:
         f9:7a:96:43:bc:82:fe:6a:b9:a8:eb:a9:6b:1c:99:7f:de:19:
         7c:a2:1d:5b:22:37:49:0f:f1:b6:7f:bc:21:24:5e:61:4c:bc:
         bf:43:67:e5:b5:eb:4b:3a:3a:33:32:29:3a:1b:34:df:b6:16:
         1f:a0:59:84:9e:d6:49:2c:60:bf:c6:95:58:06:88:f7:65:4f:
         9a:67:9f:38:be:c9:b5:36:ed:ac:d3:31:b3:d0:bc:86:54:72:
         42:d5:20:9e:3e:02:8e:42:4e:b6:fc:a9:f1:ea:72:f2:f6:19:
         84:51:de:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:10:55 2024 by rpki-client on console-ams.rpki-client.org