Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
File:                     SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft (raw, json)
Hash identifier:          BQnRhqBHTFI1dOWZRwijpvZd8Gebir0U1qDd+N+FC38=
Subject key identifier:   41:EF:8E:C6:A7:A2:A2:86:07:C0:26:D2:D5:2C:35:5D:72:42:52:1A
Authority key identifier: 48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4
Certificate issuer:       /CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
Certificate serial:       0193587713B4E8F337892C4207C62336C27F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 10:00:19 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:19 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:19 +0000
Files and hashes:         1: N8Zb-biw1wfAFupdAUtBfponPn8.roa (hash: aaRGvbS7ju/5DtoBePVQOBOjZ3nLCHaJt11/70+oSfw=)
                          2: SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl (hash: 4Zq0ZhbiQeOtLTYvd3oQrx7x4guy8K+uknSjhnJbCaQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:13:b4:e8:f3:37:89:2c:42:07:c6:23:36:c2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48afa1174b0eeea28e7031f017a93ebe5de428e4
        Validity
            Not Before: Nov 23 10:00:19 2024 GMT
            Not After : Nov 24 10:00:19 2024 GMT
        Subject: CN=41ef8ec6a7a2a28607c026d2d52c355d7242521a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9a:7a:73:64:3e:bd:98:fe:32:04:f9:39:83:
                    44:58:80:e8:b1:1b:78:47:1b:ce:c4:5c:28:88:1b:
                    09:86:21:92:60:f1:45:1d:c2:c4:1a:08:d4:00:ae:
                    ff:1d:5a:73:e5:0c:33:74:cd:24:e6:95:43:10:7d:
                    e1:ea:eb:39:61:97:34:4c:36:59:a0:e4:11:b1:b6:
                    15:1c:78:9e:fb:49:52:f9:a8:75:02:d8:b2:22:0f:
                    54:be:11:eb:72:ce:e2:c8:36:5d:da:22:0b:71:3f:
                    50:6f:c8:e2:a1:96:e0:70:c7:a0:cb:bd:9b:dc:30:
                    70:59:a2:bf:32:cf:30:bb:f8:35:76:c3:55:06:7f:
                    6b:bf:6e:54:b9:54:e5:52:5b:61:74:f9:84:93:53:
                    2b:9e:3d:ab:ce:53:10:0c:87:91:98:09:32:93:ba:
                    38:b4:50:d6:75:1b:08:0f:58:c5:6f:57:4c:e7:0d:
                    ae:37:40:38:b9:24:a7:3f:a9:dc:05:e5:0a:7f:6c:
                    8e:36:58:7d:5e:ad:d3:08:0b:c2:09:94:df:57:fe:
                    5a:12:f8:98:a0:a2:56:19:33:76:eb:93:b6:71:25:
                    44:7b:f5:8a:36:e0:b5:4f:2f:65:bc:b9:b0:fc:30:
                    75:c1:01:c2:5b:4d:ec:c3:5c:60:27:67:3b:57:a4:
                    7a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EF:8E:C6:A7:A2:A2:86:07:C0:26:D2:D5:2C:35:5D:72:42:52:1A
            X509v3 Authority Key Identifier:
                keyid:48:AF:A1:17:4B:0E:EE:A2:8E:70:31:F0:17:A9:3E:BE:5D:E4:28:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/41c79d-592b-44ad-8693-f2e058957bc9/1/SK-hF0sO7qKOcDHwF6k-vl3kKOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:c1:50:ec:80:24:4b:d0:b5:9c:e0:0d:a6:7d:2e:10:c5:
         35:84:ea:51:56:9a:cd:00:b2:41:d2:88:1e:da:0a:d9:b5:30:
         0c:f5:7c:b5:9d:8d:04:69:cf:29:46:10:11:06:b6:cd:1e:7e:
         3b:64:60:0a:3b:28:d0:ed:8f:44:ad:ca:8f:c9:a7:5b:12:4d:
         37:f6:3f:4e:af:b1:22:88:aa:53:a9:14:df:cc:95:34:8f:08:
         a7:e2:07:bf:10:5b:72:0b:20:79:77:55:05:f7:00:63:e0:27:
         be:74:57:e5:4f:79:92:a1:23:00:4b:85:3d:37:d6:4d:e9:5e:
         04:20:f7:5d:94:68:7a:7f:4f:8b:6c:01:9b:dd:6d:67:c8:08:
         c7:2b:cb:ab:c3:f7:cf:9c:b9:b5:0c:98:eb:a4:5b:96:60:96:
         b6:82:92:c4:59:18:8e:3a:a8:95:fc:ff:f7:2b:59:48:47:db:
         d8:0b:fb:12:f9:6c:ee:ac:3a:9b:3c:4c:be:b6:48:e8:7b:47:
         74:34:35:6f:4c:fd:f9:54:ef:1c:cf:51:68:74:78:99:e9:e1:
         bd:90:e3:b9:7a:b5:bb:37:42:3d:3e:88:40:e8:38:c7:46:da:
         3b:94:08:3c:91:69:c3:96:69:b2:8c:97:15:03:59:69:6e:5a:
         1d:b3:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:57:40 2024 by rpki-client on console-fra.rpki-client.org