Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
File:                     IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft (raw, json)
Hash identifier:          r10Z8Ep+aFsqWY4hr6TqbQbadqEgX0pQ3MVp8Bu6Zj0=
Subject key identifier:   6D:D9:D8:CD:49:A6:CE:57:FC:A3:E0:1E:EF:C6:D3:BB:A6:BA:F1:D8
Authority key identifier: 22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24
Certificate issuer:       /CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
Certificate serial:       019368C663D65375356518BBDEC0DBE9F921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
Manifest number:          1160
Signing time:             Tue 26 Nov 2024 14:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 14:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 14:00:52 +0000
Files and hashes:         1: IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl (hash: tGvZKkNvB9P7Hq1cfaY7FQKdhMiPNaCK4ZwtdJXsPVQ=)
                          2: W7X76Bb3DfQmb3ivc7ZoRtPBBbc.roa (hash: dRnGbBVL7esSRzvJW+ygumXMwu/1QfEo0n7f4iYA8T4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:c6:63:d6:53:75:35:65:18:bb:de:c0:db:e9:f9:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a72f3ed23e2294f9bb6ba660246166c13f8324
        Validity
            Not Before: Nov 26 14:00:52 2024 GMT
            Not After : Nov 27 14:00:52 2024 GMT
        Subject: CN=6dd9d8cd49a6ce57fca3e01eefc6d3bba6baf1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:5f:c6:dc:5c:e0:b9:b3:ce:2c:1d:f0:b9:
                    b6:6d:fe:c9:e8:40:3a:e1:d9:54:98:df:eb:35:8c:
                    55:d1:3e:b2:38:a7:32:d1:d0:0f:ab:d7:90:ba:fe:
                    63:85:49:ca:8a:e9:86:96:33:21:b9:f6:54:7b:68:
                    81:09:05:2a:74:da:dd:89:1f:f4:cf:c6:2e:bd:e8:
                    d3:d3:6b:fd:b1:af:8d:1a:14:8d:94:88:64:f9:24:
                    2a:4d:4e:1e:23:d4:da:be:e3:ee:71:3c:2b:ee:bb:
                    6b:17:8d:c0:e8:ad:f8:20:7c:26:ad:d6:53:ab:6c:
                    68:41:11:98:9e:6a:a4:2a:64:9e:21:cf:c8:94:8f:
                    e7:8f:8c:53:38:af:f1:78:5a:d5:3b:7b:7f:96:02:
                    ab:e9:c0:49:c7:13:89:1d:12:d2:d9:94:7e:d1:cd:
                    b1:13:05:cb:2d:df:79:df:35:36:e6:0d:28:03:21:
                    76:8f:2f:52:6d:55:0a:f2:44:b6:bd:77:c4:22:ee:
                    3a:95:fb:ae:ed:31:f6:98:54:82:bc:d2:4d:4b:72:
                    cc:8b:28:9e:c8:bf:c4:76:cd:35:88:83:39:61:25:
                    9d:58:e4:c2:09:92:38:9f:0b:78:cd:e9:2f:49:6d:
                    0a:2f:ca:95:57:b5:3e:40:ad:3b:da:e0:7d:57:a4:
                    9b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D9:D8:CD:49:A6:CE:57:FC:A3:E0:1E:EF:C6:D3:BB:A6:BA:F1:D8
            X509v3 Authority Key Identifier:
                keyid:22:A7:2F:3E:D2:3E:22:94:F9:BB:6B:A6:60:24:61:66:C1:3F:83:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqcvPtI-IpT5u2umYCRhZsE_gyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/479673-9667-4eda-bbbd-b0b2eaaeed61/1/IqcvPtI-IpT5u2umYCRhZsE_gyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2a:a0:13:09:e1:7d:ee:5e:f7:e0:e1:7a:94:18:85:a6:21:
         cb:70:1d:9f:1c:f1:e4:7a:3f:82:7d:49:ef:13:fb:45:4e:3b:
         74:b2:49:3a:b0:c4:18:a6:1a:fc:bd:0c:0d:ea:27:a8:c2:d3:
         7f:8a:8a:a8:95:25:44:15:df:92:61:b2:40:7e:ae:8c:43:84:
         3b:51:91:8c:9a:43:d6:4f:7f:8e:d5:6e:b6:0c:f2:36:2e:b4:
         a4:9e:08:64:69:0b:36:60:5b:a5:69:d4:8d:86:17:ac:d5:79:
         e7:6e:ed:10:dc:fc:33:24:89:39:5f:de:50:88:df:6c:d1:85:
         16:c1:ba:98:14:9f:09:11:bd:39:e6:67:09:e5:40:a1:7b:bb:
         6e:37:e7:6b:32:95:a1:36:6f:f4:35:63:f7:2a:74:59:b8:49:
         de:31:70:17:80:2a:a6:0b:4f:e2:c9:b1:ed:3c:9d:18:7e:e5:
         a7:c1:e7:b5:ff:ca:6d:6c:00:2f:0f:71:64:08:1c:3f:d4:7c:
         b9:4e:c1:f3:2f:bd:fe:d6:e8:88:05:f4:1b:c4:ce:46:1f:3c:
         82:43:2a:a5:10:cc:ef:59:2b:b3:7b:68:a9:c8:f5:ca:7a:de:
         26:e9:1d:92:31:09:ee:1d:4f:9a:eb:5b:52:26:de:81:c4:08:
         83:f2:a1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:53:56 2024 by rpki-client on console-fra.rpki-client.org