Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File:                     f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier:          YrJwf3L2IVbr5oDZ0U//A6nKNrN0HTTjBM/xpjrAFKY=
Subject key identifier:   A5:97:95:82:A2:88:7D:D8:E4:A0:DE:75:F7:74:6F:05:DE:69:E2:3D
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer:       /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial:       0193568AE88C603A902EBA7539DA7DDD661A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number:          B1
Signing time:             Sat 23 Nov 2024 01:02:44 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:44 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:44 +0000
Files and hashes:         1: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: Euu2Pkh0ytDLWm09n69K3frdTk37kAxMbDFyw3K7bfI=)
                          2: wxXcaIeuBI80gIXozC86XSG_VkE.roa (hash: bhItxIByHjSH5jK3R+x4Lp//XLES5PBfMMwV7r+YoYo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:e8:8c:60:3a:90:2e:ba:75:39:da:7d:dd:66:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
        Validity
            Not Before: Nov 23 01:02:44 2024 GMT
            Not After : Nov 24 01:02:44 2024 GMT
        Subject: CN=a5979582a2887dd8e4a0de75f7746f05de69e23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:65:4b:43:c4:64:70:d6:87:15:de:12:53:
                    ba:6b:11:90:e5:3c:a0:ce:67:2e:a7:a5:1d:f7:f8:
                    63:81:36:52:98:eb:75:c5:f5:21:7b:7b:63:01:b6:
                    1d:f2:18:2c:e9:7b:82:e4:b8:32:45:e2:c4:59:38:
                    c3:b1:63:e3:c1:f0:94:36:74:69:75:b2:f9:24:12:
                    f6:64:59:9b:ca:47:b3:f9:43:13:26:63:bc:4c:b2:
                    83:e6:cb:21:59:ab:af:db:d6:cb:aa:d6:43:3f:e1:
                    d6:fd:e7:d4:78:25:58:60:98:4f:93:18:05:2d:45:
                    55:61:44:93:12:4d:68:58:d1:23:18:8c:72:b1:08:
                    37:fc:23:42:ac:b2:8b:86:43:04:08:54:70:c8:29:
                    bb:86:6d:08:15:1b:fa:58:27:d5:ed:c2:1a:4f:4f:
                    25:9c:cd:12:51:30:56:27:1f:fb:44:68:9b:89:98:
                    08:30:e4:b6:5c:1b:9e:b7:a5:d0:0d:3a:34:e3:92:
                    51:a2:7d:f0:a7:78:63:13:6d:2b:9f:64:74:24:4f:
                    48:b8:d5:9a:04:f0:ec:67:e9:e9:49:ed:fa:e9:c4:
                    d8:dd:a6:aa:4d:a1:3a:c7:26:c8:b6:63:2a:a0:0d:
                    dc:c8:d0:54:72:01:97:48:ad:8a:45:11:c1:8c:e4:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:97:95:82:A2:88:7D:D8:E4:A0:DE:75:F7:74:6F:05:DE:69:E2:3D
            X509v3 Authority Key Identifier:
                keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a8:6f:8b:0a:74:b1:63:39:53:4d:a7:83:21:d0:b4:f4:4d:
         a3:b4:ee:1b:89:6a:0f:4b:9e:6f:e6:1e:c6:15:0b:2e:d4:f5:
         18:d4:23:dc:1e:50:6c:35:ee:55:3f:78:4c:02:99:38:31:0b:
         16:07:08:38:0a:e9:51:23:b4:c7:66:ab:10:14:c2:71:4a:09:
         ce:c9:9d:fd:e6:c5:e6:b1:0e:29:40:cf:5a:55:c8:ca:af:39:
         0c:25:58:fc:92:bf:ae:3f:3e:f2:4a:cb:96:3f:20:7b:1b:fe:
         72:9f:18:cc:e4:c3:d6:63:c3:d5:2d:88:c7:43:76:69:00:42:
         e9:33:cc:43:fe:ff:6a:6a:6e:a1:86:46:96:f3:0b:10:37:a9:
         24:77:b3:67:db:6b:a8:67:8f:2e:cb:f5:f4:cb:40:7f:63:b5:
         06:e5:f0:9e:da:42:22:bc:91:a0:e8:a4:1a:2c:25:74:b2:47:
         36:82:3f:9a:35:0c:bf:19:33:61:6f:5f:5c:6b:7f:d8:ef:e1:
         e0:f7:8c:51:ec:0d:6c:4f:18:bb:d2:64:03:23:49:3b:35:1e:
         d1:ca:07:d5:53:96:c3:3b:e5:88:ac:18:bf:d2:01:ec:04:60:
         e7:c9:56:16:b5:96:44:2a:3d:0f:1b:17:e1:d6:50:5f:ca:e5:
         2d:06:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:30 2024 by rpki-client on console-fra.rpki-client.org