Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
File:                     jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json)
Hash identifier:          AtMRr+MyfaBsS53mmX6AuDR/aRpSWXpz1Atj145QGrY=
Subject key identifier:   AE:9A:AE:23:26:AF:41:DA:1F:40:C7:09:51:9B:FB:07:51:65:34:34
Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Certificate issuer:       /CN=8cda93a702f03d6034b02c4637212a743a472c8a
Certificate serial:       019364B23CB0F98396D171715B7519ACA246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
Manifest number:          1374
Signing time:             Mon 25 Nov 2024 19:00:22 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:22 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:22 +0000
Files and hashes:         1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: YhjXzKEKUY+U0s/sIHdtKlOz+tHHumD6dazqc1Q4BI8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:3c:b0:f9:83:96:d1:71:71:5b:75:19:ac:a2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a
        Validity
            Not Before: Nov 25 19:00:22 2024 GMT
            Not After : Nov 26 19:00:22 2024 GMT
        Subject: CN=ae9aae2326af41da1f40c709519bfb0751653434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:97:4a:d1:0e:0d:64:8d:5a:6d:be:3f:24:
                    6e:77:c7:ca:23:f4:7d:4c:96:4f:44:b5:26:7f:6b:
                    31:d8:ce:7e:93:b9:b8:aa:55:34:52:dd:c5:bc:e3:
                    96:ec:22:2e:ac:7d:ed:3e:96:a1:5f:2e:f0:d5:ad:
                    6c:2c:6a:4b:40:f2:44:a9:3a:41:e3:7f:13:55:3d:
                    ce:dc:09:79:d7:29:ef:46:0f:4c:22:69:ef:0a:fa:
                    d7:5e:f2:7d:16:87:0b:3e:83:99:d0:f0:df:02:37:
                    b3:90:a5:26:c4:d1:6e:ec:0b:72:19:3e:ca:bf:b3:
                    3f:1d:9c:6f:9e:fd:dc:d6:f9:72:88:06:1b:1d:8a:
                    de:e9:bc:47:97:22:7e:5a:6e:c2:5b:bf:86:9c:f9:
                    cc:51:af:13:9e:c7:ff:fd:dd:d8:f0:d4:30:43:f6:
                    e9:d7:b8:ed:2e:b9:cd:88:e7:f2:71:44:cd:f7:d4:
                    6f:42:b0:a4:6f:32:01:45:1e:83:4c:e6:c3:1f:9a:
                    09:4a:73:0e:a2:10:e5:cc:05:9e:2c:86:8e:5c:e2:
                    60:7f:41:d6:3a:71:1e:00:2c:f0:8b:93:8f:73:65:
                    5d:7b:e2:9a:60:d0:e7:6c:2c:2a:44:24:f5:6a:15:
                    b6:f2:41:a5:b1:2e:cf:6a:19:4e:83:d8:13:64:aa:
                    c7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9A:AE:23:26:AF:41:DA:1F:40:C7:09:51:9B:FB:07:51:65:34:34
            X509v3 Authority Key Identifier:
                keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b7:22:0a:c1:26:36:ea:46:e2:61:37:b6:30:db:38:cc:a7:
         20:7a:bd:b7:e1:b3:bf:5b:27:00:ef:fe:6e:b1:2b:5e:31:7d:
         ca:de:44:b5:bd:22:ea:f2:b2:b3:33:2a:20:3d:20:ab:c3:8e:
         50:f0:2f:ff:ce:99:c4:70:47:6a:fd:a0:db:79:bc:7f:a6:ef:
         a7:49:78:5c:fc:99:d3:ab:0b:03:cf:92:c5:8b:86:74:45:26:
         6d:e0:8e:36:67:36:ea:4f:28:74:f5:be:fe:8e:97:b3:af:48:
         5a:da:3c:ee:bc:f6:67:18:e1:6f:9f:e4:e0:4b:16:df:2b:20:
         e2:53:44:e5:d4:f6:98:17:73:94:28:8e:da:13:85:03:75:f1:
         ef:05:fc:dc:39:4c:b6:22:43:c5:89:f0:4f:c3:69:73:a6:d3:
         59:f0:d7:56:5a:f9:25:65:0d:d2:7c:a4:64:d0:98:41:b3:f1:
         41:18:f8:45:da:bc:a9:53:5c:ee:81:4c:ad:75:df:4a:01:13:
         00:a3:c3:6b:33:ea:88:6d:0b:aa:3b:42:31:9f:2f:d5:13:28:
         c3:07:25:ff:d1:14:e6:cd:cb:68:a6:18:4c:11:93:f3:2a:f6:
         8f:98:8f:22:78:8c:90:20:45:49:0c:e8:02:98:73:24:fc:7f:
         7a:9c:93:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:32:05 2024 by rpki-client on console-fra.rpki-client.org