Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
File:                     7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json)
Hash identifier:          5pNddUdFw1ObpKtXeKNfSL9o3nzxJWDDyN/Kv1EIhHI=
Subject key identifier:   B2:E4:15:50:F2:7D:08:BF:1E:48:89:DC:B1:C5:E9:DC:FC:B8:8C:68
Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
Certificate issuer:       /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Certificate serial:       01935840425701FFF6415F2C78AA2409616E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 09:00:26 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:26 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:26 +0000
Files and hashes:         1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: UiiCtGFxdSIkoPeqENEvZAlpQgi/ms7OmayKoBon1yc=)
                          2: TKiREDJTGPj3WpBolc7Oy8AF7q0.roa (hash: k04RJ7uOA9TiG+X5oZxMBH/TR5NHsqtpGCxguuIKEm0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:42:57:01:ff:f6:41:5f:2c:78:aa:24:09:61:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
        Validity
            Not Before: Nov 23 09:00:26 2024 GMT
            Not After : Nov 24 09:00:26 2024 GMT
        Subject: CN=b2e41550f27d08bf1e4889dcb1c5e9dcfcb88c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:07:7a:5e:e4:02:b4:15:30:68:38:b9:40:
                    8a:58:50:c7:58:94:a8:51:61:1d:80:a2:c2:df:8e:
                    bf:1b:b7:77:7d:e8:81:53:ab:34:74:ee:e9:3c:b3:
                    ee:8b:51:7b:a3:1a:44:96:60:79:bb:4d:69:c4:b7:
                    01:a0:2a:81:6c:8d:13:e6:b1:ae:55:a0:d9:4c:e1:
                    b6:11:47:6f:a0:f2:04:2e:82:26:6c:78:b2:22:33:
                    95:a1:b7:e5:c3:93:00:b7:26:a4:55:ef:62:f9:12:
                    5c:81:d1:49:50:e3:6c:6d:f7:c6:1d:ba:21:e4:a1:
                    74:16:c9:69:bc:b9:bd:8b:a9:e3:93:a8:3a:f4:12:
                    1a:79:a0:c4:55:ff:c8:7e:3b:b5:43:55:b8:d1:cb:
                    61:ee:e7:39:2f:38:a0:19:af:f4:9a:47:16:22:24:
                    06:26:f7:81:5e:5a:66:81:dd:54:c9:99:36:d5:64:
                    d0:ff:1e:bd:12:0d:fc:f3:a4:13:b2:2a:89:ce:93:
                    5a:02:61:d2:6e:dd:1a:dc:8d:0f:22:54:9c:0c:f5:
                    cb:62:ec:96:23:ff:e7:9b:04:9f:d2:81:b6:8d:8b:
                    d5:f9:31:8e:8b:86:64:4a:4a:63:a1:2c:45:6d:b8:
                    ee:c7:dd:bc:34:90:6b:d8:6b:08:81:21:6c:1c:98:
                    68:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E4:15:50:F2:7D:08:BF:1E:48:89:DC:B1:C5:E9:DC:FC:B8:8C:68
            X509v3 Authority Key Identifier:
                keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:21:5e:bf:11:01:1d:25:71:f6:1b:4a:5d:3d:c7:6d:60:5a:
         d0:c2:17:b2:71:2a:a2:40:3f:70:a1:31:60:5e:6b:97:d3:d3:
         32:c0:13:38:bd:32:b0:56:e4:20:7d:7e:95:5e:80:22:f7:1e:
         c0:27:e6:47:ce:39:05:71:b8:86:68:1b:69:32:88:a3:07:23:
         25:5c:a2:62:5e:71:10:1e:cf:45:5b:6f:71:4d:87:fd:47:e4:
         77:a7:b8:72:56:c5:10:f5:7b:b0:6c:fd:72:6b:fa:c8:7a:b6:
         67:a0:63:a6:ee:75:a4:42:61:0e:ca:be:00:69:87:9e:ad:2d:
         d1:65:26:f0:f9:c3:27:68:3c:2c:57:25:9e:24:f7:c8:19:a9:
         b7:53:4c:1e:13:7d:8e:37:eb:bf:c7:8a:cc:27:05:e3:17:a5:
         9e:d7:af:21:d0:80:e6:1e:3b:7b:fa:46:68:34:be:af:f7:28:
         5e:1d:b7:72:9e:fc:06:cc:3c:9e:da:bb:c5:80:00:47:0d:57:
         ba:44:89:c4:0c:a2:b4:6f:63:e6:1b:8e:b4:58:fd:d6:37:fc:
         ab:35:59:c4:76:65:5c:37:06:67:a2:8c:a0:88:f0:43:5c:ee:
         77:35:c5:fd:99:b4:7e:5f:57:f6:22:68:43:63:ec:17:74:8c:
         ca:81:1c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:00:57 2024 by rpki-client on console-ams.rpki-client.org