Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
File:                     uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json)
Hash identifier:          Xi1zQ/FarTOMDAaO8LLh7UszjXdxyilVWbAQ1VpoWYY=
Subject key identifier:   C1:C5:85:1A:1F:B0:83:77:F8:F1:AC:55:0F:B8:D8:DE:E9:0C:12:7A
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Certificate issuer:       /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial:       01936A46F12105C8D1F8FA871E0A3F7C96B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
Manifest number:          1349
Signing time:             Tue 26 Nov 2024 21:00:54 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:54 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:54 +0000
Files and hashes:         1: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: 2Kxyv1giGvljX54RWCr4F8HZ0spfth7TAcpeyYMGCJU=)
                          2: ysz3YgjIEZM8fKVdry7QzMwNpzI.roa (hash: se2lJ2SKiakOXOJEGAvWw9rRP13DyweFM9UGug5+jGM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:f1:21:05:c8:d1:f8:fa:87:1e:0a:3f:7c:96:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
        Validity
            Not Before: Nov 26 21:00:54 2024 GMT
            Not After : Nov 27 21:00:54 2024 GMT
        Subject: CN=c1c5851a1fb08377f8f1ac550fb8d8dee90c127a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9c:7d:cb:36:55:ac:23:26:1a:4b:08:71:f6:
                    0f:9e:4c:d0:61:ac:85:bb:c9:e0:cf:f4:c7:2c:ff:
                    e8:64:c0:8b:88:24:b2:6d:1d:80:45:06:74:2f:e7:
                    a1:69:a3:4d:4e:6a:cd:09:1b:d2:e6:00:c3:1d:a7:
                    2e:26:fa:b0:24:3a:ac:61:b2:d7:e6:25:89:e4:bd:
                    09:7c:c5:77:8a:a7:ab:08:17:ce:cb:63:db:51:38:
                    16:14:e7:6f:d8:d6:09:84:1b:8a:10:70:e1:42:ca:
                    8c:69:33:88:68:f6:66:9d:34:5a:d8:6a:7f:e1:7a:
                    b1:6e:91:59:47:0e:d3:f7:35:e2:fe:16:07:ef:74:
                    3d:56:6b:cc:fc:90:59:98:59:56:bf:2b:1e:40:29:
                    a1:39:a0:60:0b:b6:5b:cc:e0:50:97:70:cc:d7:49:
                    81:13:48:d7:51:13:29:cb:4f:d0:b9:4d:30:c3:33:
                    ae:4a:fe:41:7c:b1:13:14:70:18:be:3c:d4:4e:e8:
                    6a:56:50:91:c8:49:a8:48:09:96:1c:d4:f2:a1:82:
                    b8:d4:f5:3b:a9:cf:2c:d0:a8:c8:26:bf:6b:b8:cb:
                    cd:ad:c0:61:fd:66:43:88:7a:85:53:33:5f:12:d6:
                    0d:5e:fb:fe:79:97:03:d2:4e:01:9c:db:9e:ba:48:
                    79:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C5:85:1A:1F:B0:83:77:F8:F1:AC:55:0F:B8:D8:DE:E9:0C:12:7A
            X509v3 Authority Key Identifier:
                keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:15:3e:54:92:ec:35:5b:f1:b5:f3:ff:fd:01:8a:8d:44:41:
         ac:c4:03:01:80:c1:5e:75:9f:f9:2d:52:ae:55:34:f2:f5:5b:
         b4:8f:ee:69:a9:fe:60:a4:38:34:7b:d5:2d:e6:9f:5b:48:c3:
         22:79:5a:5b:59:e4:f8:c3:95:79:84:03:26:56:ca:75:8b:97:
         3e:e3:c0:40:16:00:b8:15:61:5d:e0:2a:a8:41:db:9f:63:93:
         30:10:dc:d3:dd:02:3a:62:b2:61:df:d8:f2:43:f5:55:03:67:
         25:72:f2:91:75:50:1a:af:f1:a0:62:86:e1:cc:27:8c:ee:62:
         3b:8f:29:82:f7:87:e1:84:df:89:0b:cf:10:60:bb:22:49:ef:
         f5:2c:ff:c3:ef:19:5b:6d:2c:61:0e:f2:6d:d6:3d:3a:6e:e8:
         80:07:e6:dd:55:b9:1a:e1:2d:27:40:0e:ff:35:ae:c8:2d:aa:
         50:2d:10:f8:c0:7f:f6:9a:22:b1:05:0b:86:12:66:31:3b:ea:
         c6:db:60:cc:eb:48:f1:98:16:9d:c5:1e:70:a8:58:aa:1e:18:
         d4:b8:59:22:40:c3:47:cc:da:75:ba:b0:af:15:6d:80:7c:e7:
         24:a0:ae:00:2f:a8:ca:84:f2:ae:37:5c:88:a8:82:2b:45:0a:
         74:f6:b5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:03:52 2024 by rpki-client on console-fra.rpki-client.org