Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File:                     dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier:          QzZsRY83BUbQmQAJKxf2XQWku790SwSbGyofq7o7YsM=
Subject key identifier:   6E:B8:81:DE:B3:D6:94:32:F6:90:24:F7:C4:7B:B4:92:7D:00:15:56
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer:       /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial:       019356F68B84E8230730B7731793D8DA3E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 03:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:18 +0000
Files and hashes:         1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: BiXiGaZgWtSGkj9n0suuzQ+ys/GwhY5BIDT8miHUZEc=)
                          2: jGC61NVCsG7LGDtP5l11IdLfRa8.roa (hash: EebVUUOT1KtDaoDbQbQgRpSOt/3/nHwi1m3EQZ4FFY0=)
                          3: yeFPB-b-DJOL0JlXjhdp2FkmI_M.roa (hash: 7Mrr40vFN9fLScrrk5d1iFSczLeF/1TW4SOWAjjxTFg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:8b:84:e8:23:07:30:b7:73:17:93:d8:da:3e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
        Validity
            Not Before: Nov 23 03:00:18 2024 GMT
            Not After : Nov 24 03:00:18 2024 GMT
        Subject: CN=6eb881deb3d69432f69024f7c47bb4927d001556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6b:49:39:42:53:0b:e3:78:79:d2:e7:18:b9:
                    3f:4d:42:66:a1:f3:3d:e6:55:94:87:9f:97:6e:73:
                    9f:35:45:3f:c3:f7:74:3e:f7:ba:dc:50:73:77:d6:
                    f3:8f:98:4e:d9:05:c8:33:01:68:6d:74:21:61:25:
                    83:d2:81:51:e9:5a:a9:69:49:6d:05:60:db:97:cb:
                    2a:77:89:5c:7b:a0:12:cd:20:12:0d:f7:86:1e:fb:
                    c9:31:6d:c2:85:d6:6b:4f:af:8e:34:ba:37:71:6c:
                    88:e1:69:98:e6:b4:51:52:ec:2a:a3:57:87:9c:b8:
                    aa:d0:41:39:32:87:4e:ec:cc:cd:de:b4:09:90:8a:
                    1b:86:9e:d7:17:d3:d6:8a:4a:c4:bc:f8:39:4a:60:
                    42:50:0f:ed:b1:3f:e7:a4:a5:d6:4b:0f:29:68:b9:
                    ac:09:de:93:3d:24:7a:b2:b9:33:25:45:7c:a8:33:
                    25:ff:35:7c:43:61:a6:ab:16:5f:83:79:28:b3:02:
                    c6:21:e8:6a:1c:1e:4d:d7:d5:78:cc:ea:33:86:95:
                    bf:eb:ea:54:ee:ce:ec:b4:66:0f:fa:10:5f:22:be:
                    d7:5b:26:20:13:76:13:1c:87:95:aa:43:0f:42:44:
                    95:c5:5e:48:f7:b7:77:56:7e:ea:90:0b:af:ac:26:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B8:81:DE:B3:D6:94:32:F6:90:24:F7:C4:7B:B4:92:7D:00:15:56
            X509v3 Authority Key Identifier:
                keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:60:ec:1c:9a:d2:26:0a:af:c6:ae:b8:06:69:39:26:26:e9:
         e8:49:64:67:6e:95:70:0b:78:6b:94:14:de:54:8e:44:c9:93:
         fb:f8:c2:77:01:20:5a:ac:1f:42:c5:19:34:11:2e:1a:b1:29:
         ab:9f:16:62:1b:8b:4c:5d:2a:c9:fe:bf:d5:67:f7:da:f6:a3:
         77:82:ab:17:42:c1:49:9a:d5:5a:62:1d:0c:3d:1e:ad:03:4e:
         63:f8:0a:21:57:01:92:a1:96:01:82:34:04:88:24:f0:8a:12:
         25:8c:0c:28:4b:c9:de:1b:ab:29:2a:fd:aa:29:fd:43:d4:93:
         dc:50:5f:94:08:61:ad:53:a3:0a:ad:c8:de:e6:8c:74:15:7c:
         67:02:17:41:1a:e5:a0:c3:01:9e:ae:25:46:66:e4:ca:57:64:
         fe:34:ad:60:45:b8:2f:1f:f4:02:c9:a4:25:e3:b1:d1:ee:09:
         e3:b9:96:f7:ac:f6:a3:ed:bf:22:26:86:4e:57:dd:5c:c8:1d:
         56:3a:e7:2f:08:de:e8:5b:ca:cf:cc:dd:ed:c6:1d:df:91:78:
         6a:4b:88:a3:73:0b:78:06:39:44:b0:56:3d:ee:bf:ec:8d:5b:
         12:25:82:ff:7c:0b:d1:9c:77:ec:84:b9:7a:55:2b:1b:05:f1:
         ec:b3:b4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:28 2024 by rpki-client on console-fra.rpki-client.org