Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
File:                     SfJiM_W7QibCp6e5ADAI0Z40eFs.mft (raw, json)
Hash identifier:          q6EB2pbeH/LKQQip6uvkEImLATjFU3wetd9cVRxL4k0=
Subject key identifier:   17:FA:D2:F5:E9:5D:32:0F:90:CF:2E:8F:05:72:BF:F6:09:20:E0:72
Authority key identifier: 49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B
Certificate issuer:       /CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
Certificate serial:       019359C0F644C71D93E7B8A0A7799CE70454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
Manifest number:          0F01
Signing time:             Sat 23 Nov 2024 16:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:38 +0000
Files and hashes:         1: SfJiM_W7QibCp6e5ADAI0Z40eFs.crl (hash: 24EQOklqokBoNrBmuvPHYx97FUEaw4VACJwwzzyqFB0=)
                          2: dnfXNbsOS-J6s_ta5NbfVfnMQ44.roa (hash: UmGVSj1YuQheG2Sfjtv0g799PrW3tyKKxHM/xuJl/Is=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c0:f6:44:c7:1d:93:e7:b8:a0:a7:79:9c:e7:04:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f26233f5bb4226c2a7a7b9003008d19e34785b
        Validity
            Not Before: Nov 23 16:00:38 2024 GMT
            Not After : Nov 24 16:00:38 2024 GMT
        Subject: CN=17fad2f5e95d320f90cf2e8f0572bff60920e072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:02:a6:f0:16:1b:d0:6f:ab:6a:9d:5a:cf:70:
                    37:e6:22:66:c7:b4:99:c3:b1:89:4a:17:3f:44:42:
                    83:66:62:72:a2:03:7a:75:dd:a7:9e:ae:40:cb:d0:
                    a1:8b:7c:65:c0:f2:3f:79:cc:e6:65:49:80:48:88:
                    64:2d:b0:8f:df:c7:59:63:a4:fe:0e:3e:10:70:7e:
                    81:d7:4b:72:7f:88:92:7e:e4:0c:a7:ad:0f:e9:a3:
                    80:7c:10:2f:7b:a5:53:96:7c:0c:b3:84:89:6b:84:
                    b8:c8:fa:17:b5:07:a1:90:6b:fe:47:ad:37:1f:66:
                    c0:83:2f:39:56:fd:68:b1:dc:65:71:c8:56:0a:cd:
                    f6:92:0a:0f:aa:16:b3:46:9e:96:2a:bf:ca:c2:5a:
                    58:64:6e:2b:ea:43:43:ac:e4:23:d8:a4:f2:d5:88:
                    1a:1d:f5:49:b4:5d:e7:db:bc:bd:60:66:f7:90:4e:
                    3d:62:5e:9a:cc:83:78:bf:a8:ad:f8:90:36:73:52:
                    72:80:40:52:8b:01:b2:82:e5:d2:ad:25:fb:e4:2b:
                    29:e3:db:c7:86:01:cc:ec:d4:2d:7b:c5:e1:44:82:
                    f2:08:e2:08:25:8c:4d:2c:85:34:34:7f:8c:5a:f8:
                    4c:54:1d:b3:b8:59:1c:e1:08:49:90:ff:15:7d:ae:
                    0b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FA:D2:F5:E9:5D:32:0F:90:CF:2E:8F:05:72:BF:F6:09:20:E0:72
            X509v3 Authority Key Identifier:
                keyid:49:F2:62:33:F5:BB:42:26:C2:A7:A7:B9:00:30:08:D1:9E:34:78:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfJiM_W7QibCp6e5ADAI0Z40eFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fdf6d-cba6-4494-9028-577e9935bd75/1/SfJiM_W7QibCp6e5ADAI0Z40eFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:d2:e6:3d:3d:ae:03:31:51:53:0f:8c:0b:ab:2b:73:30:
         48:fa:ed:fb:32:e6:5b:ec:d6:b2:cd:3b:d8:d0:eb:c1:18:0f:
         4c:c2:5a:6c:bf:69:15:53:34:2f:32:84:cf:f1:29:f6:87:32:
         c7:63:3b:4a:05:56:a1:6e:fc:4c:13:80:3f:9f:09:63:a5:40:
         55:97:ad:2f:fc:bc:83:1f:1e:5d:a8:2b:80:b1:aa:b7:3b:d5:
         93:f9:71:78:ea:19:95:7f:4b:f9:3b:c6:66:6e:7d:93:0f:5e:
         8a:96:13:3e:2b:66:9f:c3:2d:1c:9f:e3:5d:59:b1:fb:2c:55:
         1b:bc:20:64:a7:8f:76:ba:b6:1c:63:1d:f5:75:25:be:a7:03:
         8c:6c:ff:14:d3:f8:87:36:82:c1:38:3f:60:66:c4:1b:19:3f:
         fb:a4:69:63:0e:c4:ec:cc:8f:14:26:e3:39:af:35:6d:8c:06:
         22:64:dd:7c:4b:26:f4:0f:1a:27:6e:47:5c:24:53:5b:03:d7:
         04:6d:08:44:eb:36:53:ae:c2:90:c3:30:10:2c:69:79:af:f7:
         9a:6e:31:78:82:a0:04:99:05:e3:64:31:ed:ca:e9:fe:9a:7a:
         12:be:c8:5f:c3:56:4d:c4:3e:24:51:c4:9a:ef:31:55:83:74:
         98:dd:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:22:42 2024 by rpki-client on console-fra.rpki-client.org