Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
File:                     lqKMzDCRW1xzEoCowcpn_mAJVO4.mft (raw, json)
Hash identifier:          Zd8VtgdvzIvNLRxjF/B13+o8jus2i0eMx6ZNMZ1sSSE=
Subject key identifier:   CA:86:AA:00:2F:71:CF:10:2B:68:C8:0A:57:EB:6B:E8:BC:21:88:73
Authority key identifier: 96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE
Certificate issuer:       /CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
Certificate serial:       01935688D7B7E6D2925A1ABA848878DF75B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
Manifest number:          03EC
Signing time:             Sat 23 Nov 2024 01:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:28 +0000
Files and hashes:         1: lqKMzDCRW1xzEoCowcpn_mAJVO4.crl (hash: I6WMszNEG+epiJIusFfKqPURfcRYywHpiW2E7swNKOs=)
                          2: t75SWtp_QWHBabvDRb8ItDWsKcw.roa (hash: hoJXfQpLwtCOfQvQDWRZmv4RfC1kXW0rCspGdGp5q5U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:d7:b7:e6:d2:92:5a:1a:ba:84:88:78:df:75:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96a28ccc30915b5c731280a8c1ca67fe600954ee
        Validity
            Not Before: Nov 23 01:00:28 2024 GMT
            Not After : Nov 24 01:00:28 2024 GMT
        Subject: CN=ca86aa002f71cf102b68c80a57eb6be8bc218873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:83:c4:ba:17:86:ea:7f:be:ad:1d:f5:c3:1b:
                    72:50:d9:27:c3:4e:eb:06:6a:dd:26:01:ab:79:dd:
                    f3:c4:83:8e:ba:a2:82:6f:e1:90:67:2b:fc:92:15:
                    52:4e:0b:c6:da:2c:cf:08:a0:b4:2d:05:48:37:82:
                    60:db:78:3c:9d:f9:a2:7b:a9:11:fd:72:e2:a0:bf:
                    ec:62:2f:f9:cf:23:be:58:f3:3d:a6:79:cc:d6:bb:
                    bd:32:55:52:4a:76:67:f8:17:c6:e7:dc:ea:47:52:
                    ca:f1:6c:86:ca:ab:78:00:b4:8f:f3:ad:27:f5:94:
                    9b:c8:c7:ee:9c:12:11:fc:c9:6a:37:dd:d2:85:1a:
                    23:a8:90:ed:75:b9:43:bc:e5:1e:05:4d:6e:d2:e7:
                    9e:bc:f2:5c:46:ac:07:de:31:0c:91:13:66:1f:b8:
                    49:7e:36:fe:e6:aa:48:b6:0a:70:b5:65:86:27:d6:
                    33:33:04:6c:16:24:09:d0:82:6f:f4:8d:f2:e9:ab:
                    b5:52:29:0a:0a:17:7a:32:df:dc:8b:83:99:37:69:
                    af:a7:33:01:a1:02:bb:9a:41:e8:97:09:9d:1e:56:
                    e5:ad:73:a3:3e:f7:39:58:29:5a:a9:f6:3b:35:f0:
                    0e:c0:35:39:e5:59:15:9f:44:89:66:f3:4c:fd:b4:
                    84:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:86:AA:00:2F:71:CF:10:2B:68:C8:0A:57:EB:6B:E8:BC:21:88:73
            X509v3 Authority Key Identifier:
                keyid:96:A2:8C:CC:30:91:5B:5C:73:12:80:A8:C1:CA:67:FE:60:09:54:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqKMzDCRW1xzEoCowcpn_mAJVO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6a2aa9-0ea1-40d6-b8a7-651b717f8a9a/1/lqKMzDCRW1xzEoCowcpn_mAJVO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a9:7e:0f:d7:ff:48:6b:81:6e:c4:b1:88:33:26:5c:33:20:
         92:24:7b:9c:a4:73:31:1e:be:a3:dd:27:9f:61:93:4e:a6:eb:
         cf:42:22:ad:90:c5:3d:fa:70:f4:bc:64:e9:18:f4:f4:01:cc:
         0f:f1:f3:2a:7d:c9:16:59:7d:51:66:c6:ab:24:31:21:2d:9d:
         69:8d:b3:99:8e:55:11:a3:f0:ab:d5:f3:a2:63:c7:81:be:90:
         c7:24:f1:74:fa:d8:a2:1b:a1:df:fd:9b:3c:50:34:17:9a:38:
         00:ea:70:30:8e:c5:b7:82:14:59:05:e8:8b:26:cc:c9:5a:6b:
         8e:13:05:4e:8a:0d:a5:8a:e6:1f:0d:bb:65:b3:38:05:d4:fd:
         40:7d:18:a3:d4:b8:7e:51:c2:75:da:4e:d4:b5:44:d8:ab:80:
         0e:b4:13:39:f0:e8:ae:71:44:c4:42:d3:09:88:ec:eb:96:59:
         d2:01:b2:69:79:b0:8c:f7:10:57:ae:f0:5f:c9:98:d0:ff:c2:
         91:72:5a:d9:30:18:95:49:59:67:46:fb:de:ab:cd:03:9a:ec:
         67:14:01:ba:31:d9:ea:ed:c4:7e:d8:0d:60:aa:1a:c1:55:dd:
         01:77:d1:06:10:c3:a5:4b:9d:87:52:6a:ca:d4:65:a4:e2:70:
         b9:e3:48:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:12 2024 by rpki-client on console-fra.rpki-client.org