Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft
File:                     Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft (raw, json)
Hash identifier:          i0dj6ZJm+oyyaXA98tczzv6AWT87eRaQJyEDYd/aWDw=
Subject key identifier:   DE:AC:DB:32:91:9E:96:3A:48:CE:96:9D:2A:B5:65:87:82:5D:8A:5C
Authority key identifier: 41:DE:95:2B:52:42:3B:40:1A:A9:F4:E4:9E:24:09:D0:2D:3A:63:3F
Certificate issuer:       /CN=41de952b52423b401aa9f4e49e2409d02d3a633f
Certificate serial:       01936B22A5554EF9997ACDB268F35B23FA5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft
Manifest number:          08FA
Signing time:             Wed 27 Nov 2024 01:00:52 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:52 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:52 +0000
Files and hashes:         1: Qd6VK1JCO0AaqfTkniQJ0C06Yz8.crl (hash: tHfHcfENz/rtCLbJoXZEapRA4iJLxcBU4AbL1mBWs9U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:a5:55:4e:f9:99:7a:cd:b2:68:f3:5b:23:fa:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41de952b52423b401aa9f4e49e2409d02d3a633f
        Validity
            Not Before: Nov 27 01:00:52 2024 GMT
            Not After : Nov 28 01:00:52 2024 GMT
        Subject: CN=deacdb32919e963a48ce969d2ab56587825d8a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:c6:d2:ce:a3:cd:b3:63:88:87:54:ac:06:
                    7a:9a:fb:40:14:98:33:49:7c:95:5b:8a:29:2a:eb:
                    50:4f:32:72:9f:8e:99:2f:02:47:bb:62:90:8c:15:
                    9e:83:3f:e7:83:1c:ef:22:76:55:7c:76:2e:f9:cf:
                    d7:a7:31:f1:f3:1e:60:74:08:4f:40:59:b5:16:7e:
                    dd:23:d9:00:28:7a:d9:ee:f1:a1:f8:ad:d6:9c:5f:
                    82:1a:8f:b8:cf:32:25:3f:e0:50:07:5e:88:b0:30:
                    3a:49:9b:11:44:44:77:78:2a:38:ba:47:ca:19:8c:
                    3d:7e:9a:72:f3:18:a1:44:64:62:b6:82:12:cb:be:
                    d2:7a:0c:5b:9f:5d:42:a6:eb:ee:48:b9:56:16:9b:
                    5c:65:f6:aa:3f:a2:d1:ae:d4:fe:0e:b2:4b:4c:3f:
                    8a:a8:e2:69:f0:34:67:b3:2f:58:e5:0a:6c:52:16:
                    7a:88:88:da:87:2f:3f:e9:21:27:fc:8f:74:5b:97:
                    15:d3:91:52:c2:ff:9e:17:34:ad:0a:b2:d4:6a:15:
                    14:c0:58:ef:39:84:8a:1c:a6:30:5e:de:6c:bd:30:
                    5e:39:b3:73:83:19:f8:f9:b1:05:f1:da:10:e7:6e:
                    4d:25:7e:e2:a0:16:d5:74:c4:81:09:dc:2f:71:45:
                    84:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AC:DB:32:91:9E:96:3A:48:CE:96:9D:2A:B5:65:87:82:5D:8A:5C
            X509v3 Authority Key Identifier:
                keyid:41:DE:95:2B:52:42:3B:40:1A:A9:F4:E4:9E:24:09:D0:2D:3A:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:f0:5e:f3:ae:47:7b:09:3c:bd:33:f1:08:c6:01:af:b7:a3:
         b8:71:d2:43:9a:d4:f0:32:a5:58:5f:01:12:09:93:b8:a8:34:
         12:97:99:91:9d:22:d8:b5:02:24:61:48:16:21:53:fe:d0:c7:
         d9:31:26:c9:80:7c:da:30:bb:21:0c:a7:15:71:b9:3a:74:45:
         87:09:fa:5f:b1:07:fb:9d:3c:f5:27:a8:39:bd:d4:9d:ab:d8:
         2d:b9:fb:a0:c2:db:83:00:23:1f:70:a1:c2:60:94:b5:41:c1:
         e3:51:51:b0:59:db:20:a4:63:df:ac:4d:80:4a:ee:aa:de:f8:
         6c:0d:fe:eb:5d:fd:9a:50:bc:e5:92:b1:01:d4:eb:f2:85:7a:
         60:aa:6b:7a:ba:5a:72:b3:d4:76:82:53:88:26:52:f8:9d:ab:
         74:bb:93:81:3a:72:72:ba:5f:a2:4d:b6:31:64:16:ff:0e:30:
         2f:0c:2a:95:b6:9c:ab:a3:5e:43:e2:2f:fc:ab:97:e0:8a:59:
         e7:e2:11:0d:5d:b4:fd:ec:7a:23:d4:8c:14:c4:5c:c8:2d:dd:
         f4:03:d5:87:0c:0f:3f:60:95:34:2a:1d:d0:c3:b8:08:64:75:
         fe:d3:be:cb:ab:b8:7e:5f:47:87:bd:05:c9:6f:60:a4:4f:12:
         ba:50:b5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:47:44 2024 by rpki-client on console-fra.rpki-client.org