Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File:                     bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier:          Fwf1mfBeIM25Sz/SgrSsziGW38hE3nMqYuqp86z0h8Q=
Subject key identifier:   E3:6A:2A:D2:2B:90:08:13:2C:38:7A:9D:FA:38:E8:E4:E0:A2:7D:DE
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer:       /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial:       019369DA82950C40C1A78BB30B0D1E06C2FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number:          1253
Signing time:             Tue 26 Nov 2024 19:02:28 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:28 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:28 +0000
Files and hashes:         1: 7GXQ7OQUO38CyxwXwhgK00odtfM.roa (hash: YIDNpfMt/E5WDv6ML5/OQGh5zvuc+N3vmA2bJw7IAt4=)
                          2: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: wXOPEJuQ7giHXAeYzNWt1tI7niGjWoKPlJf3nzt5maM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:82:95:0c:40:c1:a7:8b:b3:0b:0d:1e:06:c2:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
        Validity
            Not Before: Nov 26 19:02:28 2024 GMT
            Not After : Nov 27 19:02:28 2024 GMT
        Subject: CN=e36a2ad22b9008132c387a9dfa38e8e4e0a27dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:44:62:13:53:27:05:b0:2b:93:ad:9c:1d:
                    46:cb:48:96:89:7c:32:66:66:5f:24:62:03:f8:aa:
                    ec:36:c9:75:f3:24:0e:d5:74:10:93:6a:1d:ea:3f:
                    9f:7e:11:4f:cc:ff:f0:7a:c2:98:3b:47:cc:de:f0:
                    e3:43:c6:9e:e1:39:9d:07:e8:b1:72:33:57:47:cb:
                    eb:6f:73:b5:35:1f:1b:85:2c:d1:78:43:04:66:04:
                    36:dd:bb:29:93:9a:12:62:df:93:eb:44:49:21:c1:
                    2c:ff:4b:c6:ba:1d:96:f7:87:f3:9b:e6:17:bb:de:
                    f4:f6:16:21:99:6c:5c:01:f1:7a:a4:12:60:de:d3:
                    c1:d6:e2:7c:79:a9:3c:40:d7:32:65:f9:68:72:70:
                    af:01:fb:d5:25:26:6c:c4:2f:7c:4f:8d:99:f0:d6:
                    3a:7c:2e:cc:de:62:28:a7:f0:fa:33:85:1c:07:cd:
                    b5:53:45:f2:85:b0:dc:bd:ae:9f:1e:56:02:0a:a5:
                    fc:f4:83:46:62:da:45:f3:e3:66:1c:95:53:dd:4e:
                    74:fe:27:9c:41:26:2d:09:0b:f9:7b:9a:68:7d:23:
                    2a:ee:1a:e4:72:08:66:c5:1a:6a:55:9d:d5:ec:e7:
                    eb:e2:e7:be:0c:94:27:ae:b3:22:97:3a:ae:bf:5e:
                    d1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6A:2A:D2:2B:90:08:13:2C:38:7A:9D:FA:38:E8:E4:E0:A2:7D:DE
            X509v3 Authority Key Identifier:
                keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:88:da:61:21:f7:02:8d:f2:49:41:f0:84:21:3b:07:4b:
         07:5c:4c:1c:54:45:29:55:9e:86:ed:b2:ea:ed:c5:fd:8e:58:
         83:2a:b5:7f:98:1c:8e:9d:06:ba:22:8f:83:5c:03:9a:8c:c7:
         42:2a:c7:09:1e:ce:80:7d:c1:1d:d5:65:bc:1e:49:7b:0f:aa:
         f1:47:1c:63:a9:39:9f:ae:28:64:91:48:02:41:bb:e4:04:be:
         ce:ef:0a:db:ad:64:17:d2:70:be:e0:ea:12:f7:76:a9:b7:16:
         35:a0:9d:7a:ee:1c:69:b9:c8:9a:a1:24:61:29:a2:29:91:f3:
         1c:5b:5b:15:32:e0:53:b4:d0:1c:23:f6:ee:bb:86:4c:33:cc:
         f0:46:42:2d:47:c0:3f:89:05:6a:26:5c:8c:f9:92:02:fc:21:
         bc:07:8f:33:66:fc:fd:04:9e:ed:47:57:58:27:f1:e2:7d:64:
         0f:68:7e:d1:8b:f2:26:b4:54:cf:b4:4c:92:1c:2e:24:43:9f:
         3f:54:1a:7c:b3:ad:40:b3:c9:db:eb:b2:14:c3:87:f7:49:dd:
         08:9d:8c:0a:c9:99:ee:51:34:2b:ac:d4:5c:60:9d:12:03:56:
         cc:93:49:f8:84:a4:2e:88:9c:cf:9b:83:e8:03:d0:0b:78:39:
         1b:1b:0e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:13:10 2024 by rpki-client on console-ams.rpki-client.org