Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
File:                     GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft (raw, json)
Hash identifier:          lBAjFEtcFihcdzvAyOgRQWfN+/lbbKq1nXlVjYdGMxQ=
Subject key identifier:   F0:F8:25:96:D9:D0:50:87:12:B0:46:72:CB:FE:93:2E:17:B8:87:E8
Authority key identifier: 1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59
Certificate issuer:       /CN=1ab7a257e2617897749952fe56df1940c9a38659
Certificate serial:       01936A46457C271A15E01B6106385303C20D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
Manifest number:          0F38
Signing time:             Tue 26 Nov 2024 21:00:10 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:10 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:10 +0000
Files and hashes:         1: GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl (hash: aVYk0xwKVNfGJzGdKTmP+S68VsBWY1ckSRH+Tf0bivw=)
                          2: Mgw6gK8-42HtnrGuT3p4PyzAOPk.roa (hash: nK9i2SVP/XWtA/ad2Zs22nHocDT9MvgWZBi0V7HQcic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:45:7c:27:1a:15:e0:1b:61:06:38:53:03:c2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab7a257e2617897749952fe56df1940c9a38659
        Validity
            Not Before: Nov 26 21:00:10 2024 GMT
            Not After : Nov 27 21:00:10 2024 GMT
        Subject: CN=f0f82596d9d0508712b04672cbfe932e17b887e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:d1:19:fc:68:d2:78:32:1d:a7:67:da:f9:
                    44:92:ab:42:ee:1f:ec:08:a2:f3:e1:67:21:a0:af:
                    e6:4f:53:76:33:86:96:cb:80:3c:10:69:95:e8:94:
                    02:78:dd:f3:c9:ba:e0:96:3c:d6:e7:e7:81:bc:b1:
                    f8:b1:05:9e:9a:cc:b8:4c:9d:e9:75:b9:a1:12:c9:
                    37:fc:57:a6:e8:13:5c:fe:54:48:8e:fb:a1:01:41:
                    5e:bd:f1:c2:44:76:38:51:2a:d5:66:45:16:0a:cb:
                    d2:3c:a5:73:75:3f:56:f8:a6:f0:74:31:16:8d:64:
                    e2:2a:8e:27:c4:50:14:fd:70:9f:78:e1:b5:c6:2a:
                    68:76:e1:f9:18:36:24:f4:3f:7e:5c:5a:e4:dd:f4:
                    13:ed:d1:95:b0:95:8c:26:e1:f0:4f:1a:88:21:77:
                    75:36:5e:f8:66:5a:60:38:9f:ff:b6:15:07:3e:20:
                    ae:d6:56:f1:9f:76:c2:64:54:fe:62:ef:46:1e:e2:
                    6e:c5:7d:78:e7:5d:6a:fb:94:a0:e4:0e:90:8d:02:
                    47:11:41:fd:65:0a:10:ee:eb:63:27:05:ea:a7:a6:
                    d7:5f:ef:38:43:4b:6d:d9:e1:8b:44:5b:3a:a9:88:
                    cb:ad:e3:76:23:89:f2:be:48:96:a7:2d:be:70:f9:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F8:25:96:D9:D0:50:87:12:B0:46:72:CB:FE:93:2E:17:B8:87:E8
            X509v3 Authority Key Identifier:
                keyid:1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cd:4c:ca:3b:c9:8f:7d:11:86:37:52:d6:17:f6:22:93:05:
         6f:7c:1d:a7:e0:cc:01:ed:51:6b:7a:ab:7f:34:fc:ab:d8:1a:
         ee:28:a5:c2:89:09:ba:b6:f8:4b:65:0c:39:3f:37:c8:15:87:
         ee:a9:5c:73:7e:d2:eb:29:85:a4:da:28:39:6c:84:db:d1:81:
         92:3f:c9:50:2b:66:75:b2:d6:48:ba:08:fe:ee:91:bc:22:8d:
         d7:06:d7:b7:02:f1:0b:22:d0:0b:52:5f:b4:f1:5d:d5:03:23:
         5f:0a:1d:d4:09:fe:03:e8:a0:ce:00:2d:d0:fc:86:13:c7:bb:
         6a:87:b6:4b:70:0a:69:02:cc:51:76:3e:c3:4b:8f:4f:a6:10:
         2e:c2:e5:d1:20:bc:48:6d:00:93:2d:18:02:15:aa:1b:32:10:
         ef:2a:7e:ed:21:a5:80:1e:23:58:1a:e1:ea:37:f4:67:83:01:
         7c:7a:38:64:04:b4:52:11:70:27:2d:65:ba:ca:70:19:a1:4b:
         80:4f:13:e2:9c:89:30:12:c4:e6:31:8f:16:84:e3:5a:9e:a9:
         83:a7:dd:66:f8:a8:5a:49:72:e4:47:03:77:03:c6:13:60:b5:
         6b:0b:4d:39:30:e4:53:0f:e6:54:10:e1:36:32:01:b3:cb:29:
         22:b7:eb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 01:04:07 2024 by rpki-client on console-fra.rpki-client.org