Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File:                     FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier:          yi8otP/xlnWf2atPY5pDghISFXrZCe1XerAOpCebMGc=
Subject key identifier:   1F:26:F3:A8:91:0F:25:0B:31:85:8F:B9:C5:88:92:05:D6:E8:BF:87
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer:       /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial:       019367B324BB4562F0F07827B8FCFA5C305C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number:          0248
Signing time:             Tue 26 Nov 2024 09:00:13 +0000
Manifest this update:     Tue 26 Nov 2024 09:00:13 +0000
Manifest next update:     Wed 27 Nov 2024 09:00:13 +0000
Files and hashes:         1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: o+Jt67wiSPr4Semq1rPkx6konvzlg89weh8637ksYwg=)
                          2: WydGF6Iu5i3-xdoGOZg3Qq9BCHE.roa (hash: fbvDNnlwXPEmjVPUvgSGtqij+fFWlWusjUbuUmQXv3Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 09:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:b3:24:bb:45:62:f0:f0:78:27:b8:fc:fa:5c:30:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
        Validity
            Not Before: Nov 26 09:00:13 2024 GMT
            Not After : Nov 27 09:00:13 2024 GMT
        Subject: CN=1f26f3a8910f250b31858fb9c5889205d6e8bf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:cf:92:b3:4f:3e:bb:7e:cb:13:b0:65:8e:
                    51:95:a1:a1:47:c8:77:39:6f:de:16:7a:4b:89:05:
                    af:a3:61:1d:0f:f1:18:b3:eb:f6:a7:66:95:71:09:
                    24:2d:6c:7b:bf:4b:be:15:9b:34:41:e6:57:e5:14:
                    c3:94:99:63:2f:19:87:f7:4d:f3:a7:5a:a1:2c:b4:
                    26:b6:86:48:32:ed:73:ff:ff:0e:36:3d:28:0c:4a:
                    71:54:d9:ee:e5:61:f6:f0:d0:fc:aa:95:c2:61:2f:
                    fa:e8:ca:a8:1b:ab:5b:a2:a1:f2:6f:94:0e:bf:12:
                    9e:23:76:fc:07:58:98:09:36:6b:d9:7c:da:7a:da:
                    66:29:f8:20:e2:db:7c:f4:90:b4:50:89:94:6b:ed:
                    17:4d:36:23:2e:9e:fb:21:a0:dc:77:cd:62:ea:49:
                    fd:4d:75:b1:ef:22:b5:f9:20:e4:7f:18:21:0c:42:
                    35:e2:e0:55:f0:9d:69:0d:fd:32:85:4e:81:41:a8:
                    d7:24:54:90:92:cf:52:2b:9c:f5:d9:aa:18:be:fc:
                    b9:b6:4c:27:e5:e2:69:43:4c:43:41:cc:cc:27:30:
                    cb:50:97:13:8e:ff:6a:f1:b4:51:55:08:05:fe:84:
                    d8:a1:6e:73:2b:34:f9:32:1c:24:da:9c:8d:3f:80:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:26:F3:A8:91:0F:25:0B:31:85:8F:B9:C5:88:92:05:D6:E8:BF:87
            X509v3 Authority Key Identifier:
                keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ed:8c:0b:47:4c:21:66:61:4b:bb:a9:88:4f:de:39:f4:1f:
         cc:bf:94:0d:24:e5:94:3d:82:9e:6f:ef:6a:ac:7a:3b:19:33:
         5b:ba:91:8f:bd:04:e0:3a:2d:0d:99:c3:ec:cf:34:a7:ad:5c:
         61:6e:39:fa:dc:e1:8b:52:fe:71:1a:0f:03:36:2f:ae:4f:6c:
         75:af:09:74:62:29:98:76:f5:96:bd:a9:7c:8c:61:eb:a3:de:
         74:8f:f4:8d:7c:c2:ed:40:7c:4d:74:07:b8:e7:1f:ed:74:2a:
         ba:3a:3f:b6:c8:f5:fa:e3:20:2e:c0:13:36:b5:c0:42:ab:13:
         c1:e3:c6:bf:1f:56:55:26:c2:7f:5b:8b:be:83:79:f1:03:54:
         f8:14:be:f2:7a:0a:5e:a3:7b:c6:89:dc:1c:ca:95:70:f5:61:
         0c:07:82:71:22:6b:89:1f:82:dc:03:f9:a9:95:89:5b:0d:8e:
         36:35:99:44:67:20:0e:a3:c3:f5:73:08:e2:f2:31:bc:09:28:
         86:ef:39:73:ef:13:3d:99:52:9d:11:94:52:4c:54:d3:d7:e1:
         a8:4b:b6:d8:ef:c2:81:80:99:7d:b9:fd:59:4a:85:c7:ba:b9:
         98:6a:e5:3e:d0:82:a8:aa:ac:0f:33:fb:cd:1d:39:b8:48:60:
         a0:f4:b7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:30:49 2024 by rpki-client on console-ams.rpki-client.org