Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File:                     2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier:          xecQSTlPJMJQSa9DcQorL2UKvzZ7l5oRbAcitMg8RVQ=
Subject key identifier:   60:11:4D:2A:FE:7E:06:15:1C:A1:C8:21:78:AD:6D:F0:D1:86:97:56
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer:       /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial:       0193568A8329389FB51FBA40970F89676D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:02:18 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:18 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:18 +0000
Files and hashes:         1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: tQIgPrK9ELD1EJTeJ23bEUkEsuWsh9TfjEDq7LhswbE=)
                          2: 5-fUGuV97v_BrLCniG12MkNxdWw.roa (hash: D0niv+1wVrQ2M0K7gKnnD/Z1lSmZrG2tkhYhYeIqsK8=)
                          3: m2M_R-5tVIr02kqWPDhKfK6xqfA.roa (hash: eNnyPHgwDth64KRhNPc1Jmhu1WZvC/qGXes+N4OD0uo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:83:29:38:9f:b5:1f:ba:40:97:0f:89:67:6d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
        Validity
            Not Before: Nov 23 01:02:18 2024 GMT
            Not After : Nov 24 01:02:18 2024 GMT
        Subject: CN=60114d2afe7e06151ca1c82178ad6df0d1869756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:65:9d:38:52:c5:06:ca:a1:a5:39:ee:55:8c:
                    67:74:11:a4:17:dc:e8:f9:3c:dd:6d:f1:04:56:70:
                    98:58:64:7a:ce:39:21:6e:fe:ff:d9:5c:f4:b0:ac:
                    d2:ac:64:7f:de:c0:96:e8:8f:9a:7e:60:b2:b7:36:
                    51:0d:69:b0:10:b5:5b:51:4a:a1:59:0b:ef:e0:20:
                    4b:3f:e9:8d:38:f0:3c:67:3c:d8:ae:de:cf:07:db:
                    6f:6b:ad:be:3b:7f:09:0c:f1:17:55:44:7c:6a:92:
                    3f:20:20:a4:ec:22:07:df:94:2b:62:5c:29:37:c4:
                    4d:bc:59:6c:e7:c8:e8:84:6a:28:38:a9:ff:2f:a4:
                    c1:5c:0c:d4:a6:77:5d:e8:4f:ec:11:8e:7a:27:f1:
                    c5:65:be:d7:be:07:03:3d:2c:02:ed:dd:57:ae:6b:
                    02:84:8d:ca:07:bf:86:ba:72:5a:45:62:47:09:dc:
                    f3:85:b7:6c:e2:13:13:08:d9:0d:d9:a3:a6:98:e4:
                    e7:d9:8e:d1:da:a5:d4:c5:4f:4f:b2:f1:cb:95:fc:
                    ec:05:85:63:50:ae:fa:f7:12:f4:6a:4a:dd:b5:30:
                    e9:9e:71:84:6f:4f:99:b8:19:cd:94:c6:08:f7:13:
                    dd:8b:2c:91:84:90:11:b3:66:9d:df:ef:42:85:e8:
                    02:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:11:4D:2A:FE:7E:06:15:1C:A1:C8:21:78:AD:6D:F0:D1:86:97:56
            X509v3 Authority Key Identifier:
                keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:77:cc:f6:0d:1f:eb:37:a8:ae:db:fc:fb:6c:68:89:e8:f6:
         ef:46:01:60:5c:40:67:5e:19:b3:d2:9a:75:dd:58:29:d4:63:
         41:fc:9d:f0:0a:94:97:44:56:39:70:3a:33:5e:ed:3d:23:87:
         86:64:e6:60:51:85:e6:bf:4e:a1:f9:d1:a4:7c:cc:ef:02:ad:
         0a:a3:e3:a1:ae:62:54:e3:b1:7c:7d:8e:43:a8:27:ef:ed:bc:
         8e:f0:02:54:4b:8c:38:2b:e9:a3:1c:a0:55:81:69:94:57:17:
         8a:8e:83:92:de:f3:7a:8b:74:34:8b:8b:57:9e:3d:cc:91:8e:
         72:c8:52:a7:92:e7:64:8d:5c:05:ab:d8:88:91:82:21:db:d1:
         f9:36:22:a8:c2:f2:7d:e7:71:e3:cc:a8:40:8d:60:7d:c6:68:
         70:5f:a2:3b:6c:e6:8b:81:bd:fc:11:15:fd:33:48:1f:7c:ba:
         d5:8c:b1:01:8f:82:75:d1:11:ec:19:d8:56:7b:32:6b:08:5e:
         f5:fb:a6:ef:11:d0:21:8c:e7:a1:f6:2d:ac:f2:43:d0:4e:7a:
         f9:69:5d:29:04:fa:67:8a:b9:34:a6:ca:62:ac:a6:6b:30:06:
         00:03:ec:bd:c7:eb:a4:ce:b9:12:19:9d:bc:af:11:eb:e1:d0:
         82:87:61:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:48 2024 by rpki-client on console-fra.rpki-client.org