Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File:                     cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier:          uksNyoTDyDifCF+VXH/7PfApV8tCFbcOtyKaF5mZw0E=
Subject key identifier:   AF:16:F1:8E:21:01:0B:CF:A6:A6:32:D2:5F:40:A4:1A:2C:A9:B5:7E
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer:       /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial:       019359C0EFE78822EAE81D0C4266082BBC25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number:          02E0
Signing time:             Sat 23 Nov 2024 16:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 16:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 16:00:36 +0000
Files and hashes:         1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: eKSEdosWbk8MZRXgc+07B2A82s87XaQ/yRln8IXAjg0=)
                          2: msox52S5LrWnHyfC4NjY2RdGwY4.roa (hash: ryNOPsbsnbMHUcoKS/ZZa4hHT2u7LUWWac2VWX4ioYI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:c0:ef:e7:88:22:ea:e8:1d:0c:42:66:08:2b:bc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
        Validity
            Not Before: Nov 23 16:00:36 2024 GMT
            Not After : Nov 24 16:00:36 2024 GMT
        Subject: CN=af16f18e21010bcfa6a632d25f40a41a2ca9b57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bb:ec:2e:a8:86:46:9d:b6:4c:24:ea:42:72:
                    15:d7:22:1e:ca:a9:e5:17:cc:6b:ac:5b:56:c7:f8:
                    9d:f9:6e:48:56:dd:db:74:31:59:d4:40:2f:08:cc:
                    54:f7:4b:5d:ad:c5:45:29:ae:b6:76:0c:cb:ba:d0:
                    6d:9e:86:29:de:d1:70:ad:87:ee:18:f5:f8:5e:73:
                    fe:c0:78:45:aa:de:db:77:8e:a5:b3:d1:73:7f:3e:
                    70:ce:64:18:bd:8a:51:36:26:98:e3:4c:4a:b7:3b:
                    9f:a1:a6:26:e5:2a:91:24:7e:dc:d9:d4:13:34:69:
                    1c:b2:dd:90:db:9a:f4:2d:86:be:ca:b7:05:4b:82:
                    6e:b4:4b:5c:0b:1e:8a:9e:ac:59:3b:51:0d:50:a2:
                    41:c8:53:b0:df:0b:12:c4:6b:46:c5:bd:85:14:2b:
                    18:c8:56:d7:38:f2:f2:85:5a:87:5f:ab:46:d4:57:
                    87:be:03:25:57:38:87:f3:91:b0:bd:4e:2b:0c:ed:
                    60:ac:83:2f:a6:b3:20:ee:51:64:ce:8e:c0:87:61:
                    3a:f2:30:c0:61:b2:2b:e5:ee:a1:07:71:d6:91:df:
                    4b:bc:b3:87:c4:b7:81:c9:58:01:1c:72:3a:88:7d:
                    ef:03:85:82:a5:8c:8e:42:2e:4b:af:fc:e8:e0:52:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:16:F1:8E:21:01:0B:CF:A6:A6:32:D2:5F:40:A4:1A:2C:A9:B5:7E
            X509v3 Authority Key Identifier:
                keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c7:b2:00:d3:b8:59:0b:72:3f:48:d0:a0:0e:6c:eb:77:4e:
         c3:68:c7:c4:69:3c:a7:81:2c:93:ee:5f:20:22:1f:ba:81:75:
         2e:f2:5f:d7:89:1e:3a:dc:e3:aa:d0:94:72:04:a6:7c:54:b3:
         58:ed:5f:43:6d:95:ee:c0:92:76:48:ef:56:6a:41:b8:2e:b3:
         a4:16:c2:63:9e:4b:fe:34:77:2f:72:d9:3b:df:50:24:cb:fd:
         85:7e:42:b9:ca:3b:c1:86:a7:32:6f:e4:3f:8d:c7:44:91:b2:
         7b:91:d4:da:60:0c:cd:0a:6a:0c:fc:b4:2b:25:74:fd:81:69:
         08:3d:3a:cd:28:45:6b:4a:56:74:31:e0:e6:93:ec:75:02:37:
         20:a2:9e:51:34:35:3a:12:61:c8:7e:db:77:70:a6:0d:8c:e7:
         15:25:fa:0e:1f:6b:86:56:19:cd:26:7a:80:9c:d1:d5:4a:bf:
         0d:22:51:35:30:d8:99:b4:73:34:2d:9c:46:80:5f:a6:44:d1:
         61:3b:bf:ad:b3:d2:53:9f:7d:5a:6c:fd:95:b5:c2:40:bd:d4:
         9a:ba:bb:6f:a7:cf:6e:32:48:6e:fb:36:13:b7:2f:0f:25:18:
         42:69:d6:96:7f:cf:23:02:e9:9c:42:ba:2a:50:d2:be:25:d3:
         a5:4e:22:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:28:41 2024 by rpki-client on console-ams.rpki-client.org