Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File:                     D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier:          +jDK//Q0CUtR3tfVdkb40PLqe/hAkotKU02IlqUobCU=
Subject key identifier:   B6:6F:F6:B8:27:F6:A5:03:56:57:86:40:F4:E1:6B:8B:E6:54:CD:7F
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer:       /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial:       01935989D079302FBF0C9CD5517D2ED8667C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number:          1250
Signing time:             Sat 23 Nov 2024 15:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 15:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 15:00:24 +0000
Files and hashes:         1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: Tn655AwXgv2+0CunH0zXChERHgMyk5E1N6P7bvjZ02I=)
                          2: bOntjlufwx7fXskK-v7-QRhNAdw.roa (hash: 2HHoADx4q9Bnzi3PpawLbKRg0kYzfgofRmousErULRw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:89:d0:79:30:2f:bf:0c:9c:d5:51:7d:2e:d8:66:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
        Validity
            Not Before: Nov 23 15:00:24 2024 GMT
            Not After : Nov 24 15:00:24 2024 GMT
        Subject: CN=b66ff6b827f6a50356578640f4e16b8be654cd7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:7d:69:30:9d:7d:69:3d:bd:48:29:3d:15:
                    6c:d5:7b:f2:4f:1f:7c:2b:21:2f:a1:16:25:fe:1c:
                    ef:4f:b0:96:55:59:41:72:21:ab:6b:ed:4e:ff:83:
                    5a:a1:4a:b1:fc:ea:4c:d4:15:2e:74:4d:2e:9f:f8:
                    e5:d7:0d:77:7a:87:d2:d7:91:aa:b0:63:9c:60:e0:
                    7d:1a:5f:b3:d5:55:63:7b:13:97:a2:ae:27:c2:57:
                    87:02:11:67:54:7a:c3:16:24:a8:12:17:cd:04:be:
                    54:e4:f9:15:18:7b:e1:28:93:a4:6d:84:42:65:22:
                    15:da:9e:45:8c:e4:89:3f:9a:34:46:6e:25:f7:da:
                    fd:96:ae:76:db:c8:33:43:06:36:ff:12:0c:58:82:
                    e7:7b:10:95:3d:20:56:67:86:34:45:81:f8:d1:a0:
                    e4:2e:06:67:25:13:2d:6f:f0:63:59:79:a5:3b:01:
                    99:9f:07:b3:49:96:7a:05:c6:c2:5c:04:9d:c3:ed:
                    e9:56:97:0c:07:1e:84:c9:a0:58:9d:cb:94:e7:1e:
                    34:2d:a7:58:be:68:ac:85:bb:9c:0d:2a:e4:f0:57:
                    73:6a:53:80:e6:d5:83:d2:80:8e:56:cb:ca:48:de:
                    e9:25:46:ac:32:93:70:64:5a:6f:42:96:c9:43:5c:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6F:F6:B8:27:F6:A5:03:56:57:86:40:F4:E1:6B:8B:E6:54:CD:7F
            X509v3 Authority Key Identifier:
                keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:e9:a4:df:ee:b4:73:f2:8e:27:20:19:50:69:70:7f:8e:d0:
         2e:c8:eb:59:25:48:a0:82:62:0c:12:4d:4a:69:48:43:3a:bb:
         cc:2f:75:97:29:52:5c:b2:fd:e8:86:2d:6e:2c:4f:0d:24:5e:
         4d:32:1b:ef:6f:02:91:a8:f1:82:bf:b4:55:ed:b5:e7:9b:db:
         30:12:ec:c0:77:2c:1f:ee:5c:5d:a1:49:f1:89:43:a8:38:e8:
         98:67:37:46:49:07:df:f7:a0:2b:d2:aa:55:51:75:a1:99:39:
         0f:4d:d3:7b:cf:7a:a2:1b:2d:41:d1:b3:54:9d:c2:f3:35:2e:
         11:92:57:9d:fd:f8:a6:01:9f:f5:87:08:c2:35:bf:58:68:21:
         20:80:39:06:a3:e2:f4:63:cd:5f:75:64:34:8d:09:e0:b9:78:
         ee:94:7f:c2:3b:a3:ff:47:be:de:6c:9c:2d:59:67:d9:a3:fb:
         e2:05:cb:18:48:6b:59:d5:d6:02:89:89:26:ff:df:fd:de:b4:
         6f:22:52:3e:82:95:2f:38:2e:3d:4e:b4:ce:e8:cc:c9:09:38:
         1b:91:5d:fa:11:5e:f6:44:c8:80:c2:11:79:2a:a6:47:85:1d:
         b2:7b:16:d1:9b:f6:43:2c:e1:05:d0:77:d7:35:04:7c:5e:ea:
         ac:2c:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:23:02 2024 by rpki-client on console-fra.rpki-client.org