Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
File:                     AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft (raw, json)
Hash identifier:          etMxzZiS4pBrk01h+UUNuYa0p0sM0ZQPSiOp3H/zv2I=
Subject key identifier:   F3:25:FD:D1:10:65:FA:5F:9B:86:96:96:6C:34:F5:89:50:7D:36:1E
Authority key identifier: 02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F
Certificate issuer:       /CN=02558509e1c0ec160de2e074177213de30615d6f
Certificate serial:       0193579BB5A39B6F1D06F8FE1B13D34C3B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
Manifest number:          1277
Signing time:             Sat 23 Nov 2024 06:00:42 +0000
Manifest this update:     Sat 23 Nov 2024 06:00:42 +0000
Manifest next update:     Sun 24 Nov 2024 06:00:42 +0000
Files and hashes:         1: AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl (hash: ZMnurYGKYVPvENNP1QZVgJBMSTfZIO5UjBMJr6vem8Q=)
                          2: pXTgqGNGWmmle8rA4Iv8FxKpWlc.roa (hash: se76uUTmFhrWw+ikcMh7IcIPvG/iwjNgVWexCnStRjY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:9b:b5:a3:9b:6f:1d:06:f8:fe:1b:13:d3:4c:3b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02558509e1c0ec160de2e074177213de30615d6f
        Validity
            Not Before: Nov 23 06:00:42 2024 GMT
            Not After : Nov 24 06:00:42 2024 GMT
        Subject: CN=f325fdd11065fa5f9b8696966c34f589507d361e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9c:cd:48:33:88:97:da:23:35:1b:59:84:7a:
                    4c:90:fc:a7:a4:a0:79:03:08:a2:77:a2:6b:21:d3:
                    e0:1f:cc:40:93:32:70:a2:38:44:aa:8a:9e:67:1e:
                    06:1c:89:ad:29:d6:89:60:5d:a7:4c:46:c7:82:0c:
                    dc:42:35:05:16:e1:2e:16:1a:78:ee:56:c9:ee:8d:
                    8b:03:9e:2c:9b:93:2f:52:93:60:e0:7b:0b:34:11:
                    46:73:9e:9c:99:57:84:76:37:08:5b:5f:05:b0:2d:
                    39:07:96:12:1b:64:0f:6c:8e:f7:6d:86:bf:a5:82:
                    75:9b:f0:f3:0d:3b:46:96:64:14:b4:eb:1b:73:d8:
                    35:59:d7:db:9e:4a:ab:6b:ba:37:05:eb:f5:c6:6b:
                    fd:ab:e1:f7:ef:ee:e5:78:d6:94:5a:10:0b:23:6c:
                    16:ee:49:90:0e:7d:8c:28:d6:9b:28:12:eb:ea:ec:
                    46:7e:e8:61:31:87:7c:2c:9b:ad:cf:b3:a4:d7:30:
                    b9:7a:d1:61:c3:a7:1f:a8:54:eb:30:5f:2e:d4:5e:
                    19:c7:0d:a5:18:5c:9c:d9:79:b6:32:8e:f1:f5:aa:
                    2e:23:25:6f:59:d7:06:3d:66:95:70:dc:b0:ce:a0:
                    c5:1d:15:82:7c:6a:20:01:e4:37:07:11:03:0e:81:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:25:FD:D1:10:65:FA:5F:9B:86:96:96:6C:34:F5:89:50:7D:36:1E
            X509v3 Authority Key Identifier:
                keyid:02:55:85:09:E1:C0:EC:16:0D:E2:E0:74:17:72:13:DE:30:61:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlWFCeHA7BYN4uB0F3IT3jBhXW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a860bf-1a27-4f0f-bd91-7ae6911ca126/1/AlWFCeHA7BYN4uB0F3IT3jBhXW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:33:f1:df:cf:f4:0a:21:a1:05:2c:37:47:2d:1f:02:bd:b5:
         a3:0d:2e:2a:08:aa:bf:a7:a2:3e:03:df:cf:35:85:d5:79:de:
         af:d1:82:ea:3c:7b:ad:c5:cb:a7:b0:ce:ae:28:82:c0:5c:27:
         26:c7:82:9b:79:74:b8:45:d5:e2:d5:09:0f:8f:fe:96:22:d9:
         b8:81:65:2d:70:d8:30:98:8a:54:43:b1:ef:c7:36:55:0d:dc:
         07:8b:d5:3b:77:bf:da:8e:a9:74:e6:49:1e:f6:70:de:f5:a5:
         91:06:1a:4b:19:aa:d4:7f:74:4e:2e:c1:62:75:e0:e0:ae:5f:
         41:27:ff:d8:fd:38:6f:63:5a:3e:5b:fe:89:6b:89:b5:a5:af:
         92:62:27:7d:71:c9:54:72:b3:15:d2:b2:29:94:54:6f:24:91:
         4c:83:8d:b4:33:e4:8a:44:3d:1a:cc:68:03:19:2a:43:69:bd:
         41:9f:e6:f4:bf:3c:9b:2b:5d:d7:de:9f:91:88:ae:12:ab:1a:
         a2:8e:65:03:59:f7:2c:2b:78:f1:97:a0:7e:ed:b3:25:f2:24:
         f2:88:e5:1b:a3:1a:b8:d8:84:ed:ef:50:5d:eb:91:9f:65:36:
         fb:c6:69:ce:c6:5a:d9:41:5c:77:39:31:60:72:f0:65:1a:12:
         23:28:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:38 2024 by rpki-client on console-ams.rpki-client.org