Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
File:                     p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft (raw, json)
Hash identifier:          ov82pY+boH65oK8y9AiZsPtLFIkK+U2knwDWjY+y8r8=
Subject key identifier:   72:4B:28:69:9A:DC:71:09:CB:27:DD:85:54:6F:70:A7:10:E2:27:6D
Authority key identifier: A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1
Certificate issuer:       /CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
Certificate serial:       01936B22B8C6E1307EFE622C0E8BD72FAFB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
Manifest number:          1049
Signing time:             Wed 27 Nov 2024 01:00:57 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:57 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:57 +0000
Files and hashes:         1: clItUqdoXFKPCQyY9fx0oAUKGpI.roa (hash: louGrZEHNq3k3En8k8npSVHkPDa1hojbHf/52qkHo/0=)
                          2: p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl (hash: trl++WYIYX71JccgaQGGpplBV9iaT1kvwwhh9doqFWo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:b8:c6:e1:30:7e:fe:62:2c:0e:8b:d7:2f:af:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ca9ada44524fc536fa3ecabf758df26407c8b1
        Validity
            Not Before: Nov 27 01:00:57 2024 GMT
            Not After : Nov 28 01:00:57 2024 GMT
        Subject: CN=724b28699adc7109cb27dd85546f70a710e2276d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:a0:92:5d:4e:74:6b:fa:ac:51:40:ad:c1:
                    c8:73:f8:c8:a4:4b:dd:f0:26:a3:bc:44:2e:96:05:
                    12:ec:b8:f3:50:f7:ca:14:fa:74:a9:2e:ac:2d:c3:
                    04:ba:20:b6:88:e6:2f:e3:56:c3:29:1a:40:66:40:
                    b2:c0:b8:76:b7:c8:5a:ff:31:ae:bf:d5:1d:20:74:
                    c4:ee:11:f1:c3:31:28:09:0f:40:8a:89:e2:82:64:
                    85:d9:b3:73:e2:c7:d7:a7:2e:de:59:6f:a2:cb:0b:
                    53:32:d0:2c:a3:8a:8d:f3:6b:95:24:95:dc:ef:68:
                    75:f5:63:9c:c8:32:30:18:38:ed:d3:dd:c1:01:78:
                    44:c6:fd:f3:33:3e:5c:3b:e6:16:95:78:a4:74:c5:
                    50:ea:13:9a:cf:07:10:0c:0a:d3:ae:25:72:66:dc:
                    99:1d:c5:63:a6:73:24:bb:d7:f3:79:34:ae:ed:12:
                    2e:40:92:26:4c:1b:04:04:90:00:76:0e:3b:70:86:
                    db:d5:08:aa:36:ee:26:c3:f3:1f:5f:2d:1d:55:ba:
                    8e:3e:d2:15:97:0e:d4:46:55:59:d1:bf:3a:73:13:
                    c3:c7:27:d2:3c:d0:91:61:ed:49:89:2f:a7:b7:79:
                    8c:da:85:e1:4b:ef:e3:2b:81:9f:1a:cf:b7:e2:1b:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4B:28:69:9A:DC:71:09:CB:27:DD:85:54:6F:70:A7:10:E2:27:6D
            X509v3 Authority Key Identifier:
                keyid:A7:CA:9A:DA:44:52:4F:C5:36:FA:3E:CA:BF:75:8D:F2:64:07:C8:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8qa2kRST8U2-j7Kv3WN8mQHyLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f7ec70-0ded-42ca-9d00-9d9e1b6beee9/1/p8qa2kRST8U2-j7Kv3WN8mQHyLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:3c:5c:58:38:bd:bd:69:c0:ff:97:52:5b:34:89:21:3f:f6:
         f5:3d:68:0b:27:3a:92:5e:f7:78:06:c4:e2:23:30:3e:92:28:
         bd:35:81:74:dc:f9:3d:19:bb:33:c7:c5:ca:79:d6:a6:8c:91:
         e5:a7:6a:0e:84:5d:e4:6c:eb:e7:94:2c:c6:e6:e3:9f:6e:ca:
         a6:23:c2:05:f4:88:ec:d1:c5:ba:5f:e2:37:3a:c7:c6:2b:62:
         d5:c0:57:69:ec:66:6b:9c:9e:f6:3c:4b:2f:3e:b2:31:31:0f:
         f1:fa:92:2f:5b:e7:0d:76:b9:14:e6:ea:ea:75:05:1d:07:6d:
         32:41:f6:24:08:f4:75:d4:fa:76:90:36:c3:66:8d:15:5e:c3:
         62:b9:f6:24:34:bc:8f:75:ad:8a:16:2b:55:f3:81:0a:f9:8b:
         f2:68:fd:0c:2a:c9:b7:3f:07:ed:01:13:ac:21:92:c0:6c:ac:
         4d:48:e5:0a:73:da:aa:a5:16:49:ec:f2:d3:61:5c:a4:f4:8a:
         78:a5:1c:07:16:4d:a5:2a:40:89:fa:1e:13:b8:d7:9f:c9:13:
         fc:de:bd:a9:b0:50:1c:30:bb:04:f2:88:1b:2e:18:1a:60:9f:
         12:77:53:e0:bf:fb:e0:e1:1c:96:a5:33:ca:71:4c:b4:d4:79:
         f6:a5:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:36 2024 by rpki-client on console-fra.rpki-client.org