Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File:                     SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier:          Bpy1VJlT9oj3X/l+DBx3FQvKMjOmiB9u3rXffEogJzc=
Subject key identifier:   CB:C8:7B:B1:38:8D:6B:AF:69:A3:50:0D:77:44:DE:5C:45:AA:E6:EB
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer:       /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial:       019358402ECA4A7D5E36EAA47330BD23F3B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number:          0660
Signing time:             Sat 23 Nov 2024 09:00:21 +0000
Manifest this update:     Sat 23 Nov 2024 09:00:21 +0000
Manifest next update:     Sun 24 Nov 2024 09:00:21 +0000
Files and hashes:         1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: Q/NtZgQ9JXOwazXPB7m7QPvOG1d3zJHFcjBLvw6GB3k=)
                          2: fw8uykgIY4tOQb8c3QB_p7mk1XY.roa (hash: p0WQlNSnMYI38W6R7gb/bDCXF2jWsSh5tLiV9m+XBbc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:40:2e:ca:4a:7d:5e:36:ea:a4:73:30:bd:23:f3:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
        Validity
            Not Before: Nov 23 09:00:21 2024 GMT
            Not After : Nov 24 09:00:21 2024 GMT
        Subject: CN=cbc87bb1388d6baf69a3500d7744de5c45aae6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:0a:29:77:41:5e:97:49:05:ac:fe:c7:18:
                    35:04:02:9d:67:fb:58:4b:ab:4d:74:97:39:40:52:
                    52:bd:eb:53:b0:61:d2:fc:0d:cd:e5:df:16:0e:b1:
                    ef:5a:f9:29:95:c5:76:15:99:57:fe:ee:0d:35:cc:
                    de:d2:01:32:88:7b:b0:b3:48:d4:25:ed:75:37:58:
                    03:8f:59:68:a6:c4:b2:09:6e:4b:dc:3c:ef:4b:dc:
                    7b:46:dd:31:a7:bc:1f:72:17:b1:0e:c6:4d:3d:fc:
                    84:59:08:c0:d6:d5:9e:2e:bc:fb:56:a7:9f:af:8e:
                    09:2a:56:4e:23:14:0c:bf:b7:01:a9:49:7e:ec:db:
                    da:db:09:08:90:84:16:b2:56:78:76:4a:d7:cf:71:
                    72:d0:e8:8d:89:a9:c8:3f:fb:47:c4:7d:b0:ec:20:
                    9d:e3:67:7e:28:f8:ae:84:f5:48:26:d3:94:03:b0:
                    d7:98:3f:a8:c1:32:49:d2:a7:dd:63:d1:8a:b4:75:
                    ca:65:2c:f9:63:10:bd:9c:08:5c:61:77:e9:a4:c4:
                    5e:95:be:92:2d:f0:0c:45:96:e3:12:24:bb:36:41:
                    9b:db:d3:cc:64:51:f3:3b:2e:d9:8c:8e:54:db:c3:
                    82:0a:61:dc:a1:48:33:60:f5:a6:f2:d0:e7:7d:00:
                    98:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C8:7B:B1:38:8D:6B:AF:69:A3:50:0D:77:44:DE:5C:45:AA:E6:EB
            X509v3 Authority Key Identifier:
                keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c3:12:3a:bb:16:bd:99:6d:96:75:34:7f:2d:d3:19:59:7e:
         9d:5a:0b:8e:ff:48:a1:4a:c5:de:e6:93:70:5f:86:af:0e:22:
         9e:95:dd:58:9e:fc:4f:ca:dd:e6:cb:88:dd:4f:70:11:f5:a7:
         9e:79:66:d9:b2:b0:60:27:51:cc:22:9c:e1:c7:b3:6b:d4:b6:
         64:49:61:3e:2d:9b:5e:60:9c:28:09:7b:6e:f1:26:e7:7c:b0:
         b7:ac:16:7b:e7:a6:99:f0:81:9a:cf:a2:61:2b:f1:ee:c3:c1:
         43:ab:68:56:7a:6f:76:77:c7:85:d2:95:8b:f2:87:1e:47:e1:
         5d:46:9e:73:c6:08:95:39:a2:64:6a:e3:dc:f7:0a:9e:6c:a6:
         72:b9:aa:43:fd:a3:32:3e:6b:72:11:8b:8f:03:42:3c:b3:de:
         b0:e5:8a:19:7b:01:1b:26:28:dc:a2:c5:4e:0c:89:e2:7e:4f:
         5e:7a:7b:54:87:df:01:86:ce:f1:f5:42:b8:08:de:39:dd:46:
         82:94:84:e6:8d:85:0c:07:8b:be:bb:2d:93:6d:ea:04:32:18:
         0d:14:76:35:d7:51:a3:85:61:7c:71:26:13:81:76:86:8d:0c:
         a9:9e:61:3a:09:75:68:ea:55:6d:3d:6a:5b:b4:64:59:c9:31:
         d7:52:8d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:52 2024 by rpki-client on console-fra.rpki-client.org