Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
File:                     eMceZc96PS4vwrjMPUPUXSs1DfM.mft (raw, json)
Hash identifier:          Theqg8TfPXS7CoBffNxqwwGgV0Zr58iUwvRdH9NS8UI=
Subject key identifier:   FB:1D:D9:00:80:EB:AB:11:BF:BE:26:F6:B6:7A:C1:4E:05:35:EC:E4
Authority key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
Certificate issuer:       /CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Certificate serial:       019359C13A9CE708518600EF6DD12617AE69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 16:00:55 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:55 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:55 +0000
Files and hashes:         1: Ri3XJ9Uwx2BNfLsWv2p7-g3_dUc.roa (hash: xRCTpx2pLdSJjpT5QtCYjBP8jpRuMjJ7W+PtlPlwAeI=)
                          2: eMceZc96PS4vwrjMPUPUXSs1DfM.crl (hash: aVu3g0bNO228fulUOT+hzR2dpuxBf06KfCMzVX+x2Pk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c1:3a:9c:e7:08:51:86:00:ef:6d:d1:26:17:ae:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
        Validity
            Not Before: Nov 23 16:00:55 2024 GMT
            Not After : Nov 24 16:00:55 2024 GMT
        Subject: CN=fb1dd90080ebab11bfbe26f6b67ac14e0535ece4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5e:8f:7b:58:63:2c:04:26:b1:f1:f1:9b:7d:
                    ab:cf:68:6d:14:99:c6:58:e3:a9:d0:f0:f0:c3:b9:
                    a7:29:a3:63:ce:10:f2:54:fa:91:10:6e:50:c2:6d:
                    76:b4:0a:67:30:89:7f:02:b5:91:75:d3:f6:78:96:
                    aa:03:1e:ba:71:5b:00:23:ba:11:b9:81:e7:cb:08:
                    57:2b:b1:16:47:d5:5e:d4:be:48:f9:f8:a2:8d:df:
                    51:6c:b2:96:6b:e3:cc:a8:1c:ea:01:53:40:5b:7b:
                    b4:83:8d:af:78:d4:86:7c:65:5c:ec:d3:55:7a:f0:
                    7f:a3:95:1f:dc:2f:58:dd:41:ef:5b:95:c8:45:8b:
                    c5:1c:c5:f2:74:65:56:ff:bb:fd:bc:3c:d2:7d:1f:
                    83:80:90:10:f3:05:fe:b4:5a:fa:44:4b:d5:d2:ad:
                    f9:30:16:17:27:ac:11:28:b7:9d:68:3d:40:98:84:
                    fb:77:05:d0:22:71:10:6a:5f:c3:b1:f6:77:6d:4c:
                    da:c2:df:b2:ee:19:34:c7:c6:07:b9:e4:0f:b3:de:
                    8c:41:3b:96:6b:86:8b:da:b3:78:37:49:a8:1f:25:
                    85:29:0d:a5:73:63:fb:c4:7c:cd:26:74:8f:22:d8:
                    98:9c:91:88:b4:6a:2e:38:9b:e3:ca:28:8a:20:b7:
                    8b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1D:D9:00:80:EB:AB:11:BF:BE:26:F6:B6:7A:C1:4E:05:35:EC:E4
            X509v3 Authority Key Identifier:
                keyid:78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:29:e0:ab:89:51:c1:23:a2:22:79:9f:f3:58:8b:e2:aa:c8:
         05:60:a3:2f:1a:8b:c6:ad:33:81:88:f1:fa:52:d9:1a:43:b4:
         e8:c0:f1:2d:5f:8d:8b:9e:7a:60:f1:26:05:62:38:0d:cc:e4:
         83:63:11:1b:1e:cd:40:06:35:c5:9a:7c:f5:24:f8:08:4b:ac:
         d7:50:a3:35:ed:d8:57:27:0f:4c:c2:cf:62:7b:48:81:a7:ff:
         eb:e6:a6:28:86:ad:2d:e6:bf:ea:15:2d:09:3a:c6:65:10:9b:
         92:83:88:53:cf:4e:fb:5b:8c:cf:38:32:38:3d:b0:3d:df:a5:
         80:37:01:a1:57:4f:ad:a3:ce:fd:0c:b0:e0:fe:ee:1e:e6:88:
         47:4e:12:3a:4a:6b:a1:10:b0:0f:a4:1f:e9:a7:24:a0:05:c9:
         ce:eb:2e:88:f8:74:1c:0c:b9:db:03:2d:3c:a1:b4:4c:96:b6:
         47:39:b1:c8:c1:1f:47:a2:80:28:4a:9e:a3:bb:a5:a6:70:7d:
         c5:dd:e0:1c:88:61:8b:5e:76:23:cb:82:99:a1:8b:c1:ff:27:
         fd:0e:15:4f:28:04:b0:c3:5d:7c:f8:5c:c5:a0:a3:f8:1e:2e:
         e1:2f:ee:78:48:aa:d0:5e:6b:c2:6c:6c:a6:60:df:97:ff:8b:
         11:69:d7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:56:42 2024 by rpki-client on console-ams.rpki-client.org