Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File:                     k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier:          jvc2BdK7G0pXWH40Q8mnVn31cTfDHe9II7CfGqhGnvo=
Subject key identifier:   23:A7:27:6C:8B:F4:E5:2D:EC:B5:3A:D1:A8:CF:53:8D:3F:9C:9E:7E
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer:       /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial:       0193553F7789D85D4C93BF681D2A751D1CB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number:          02A7
Signing time:             Fri 22 Nov 2024 19:00:42 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:42 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:42 +0000
Files and hashes:         1: AHvH4dpN8bfsJuLwhklUp5V04V0.roa (hash: evirTnJJQAzWYBz7KPNMadM739Gm5kL8AvQnConCxwM=)
                          2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: 7Bw2poy/UyehubtCtXMPKV0pUWRcUggQ6NC5RT5uBZg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:77:89:d8:5d:4c:93:bf:68:1d:2a:75:1d:1c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
        Validity
            Not Before: Nov 22 19:00:42 2024 GMT
            Not After : Nov 23 19:00:42 2024 GMT
        Subject: CN=23a7276c8bf4e52decb53ad1a8cf538d3f9c9e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:56:77:7a:e8:83:db:b6:1f:72:e4:8f:4a:
                    83:b8:43:f0:1b:3e:15:d2:e4:35:9e:42:60:00:15:
                    0c:e7:5d:a3:f4:90:7a:de:32:c4:a4:96:a6:ce:c0:
                    43:8a:1c:87:78:a6:9f:fe:e4:ee:23:ce:60:f4:18:
                    0b:32:06:c1:d3:7c:4c:2a:e6:e1:56:b2:01:07:c7:
                    0e:b3:91:18:7a:2b:0d:42:17:62:3b:de:61:29:0f:
                    58:3d:aa:57:dd:10:95:da:29:f4:d5:ed:7a:91:ed:
                    a9:03:fc:4c:75:57:df:ff:64:7a:3c:ec:90:61:01:
                    4e:eb:ac:46:30:4b:9f:3a:cb:e9:41:10:45:98:f5:
                    be:41:f8:04:21:43:ea:90:c8:0f:e3:d8:eb:b8:c5:
                    6e:d4:14:b1:2f:08:cc:5d:e3:b3:52:a5:19:97:5f:
                    9d:e7:f3:b3:72:f3:73:13:38:ad:8b:4a:ef:b3:71:
                    ac:1f:46:be:07:8c:4f:80:85:c3:7b:1c:e6:2a:ae:
                    2c:b3:a4:fb:e6:e1:24:61:40:d1:33:0d:c8:48:f8:
                    5a:4f:ff:3e:3d:37:44:71:d7:15:86:56:43:2e:ea:
                    2b:23:4b:0b:09:50:96:cf:c4:e7:b8:2a:cb:62:a1:
                    ba:22:86:a4:ed:5a:77:75:ec:2a:37:d6:78:74:b4:
                    c0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A7:27:6C:8B:F4:E5:2D:EC:B5:3A:D1:A8:CF:53:8D:3F:9C:9E:7E
            X509v3 Authority Key Identifier:
                keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ef:b3:4d:64:ea:2b:38:d0:aa:bd:3c:55:79:0e:81:88:27:
         a5:ab:bd:33:c6:7f:71:58:8a:ab:1c:94:ab:3e:ea:9a:ec:6d:
         3e:9c:5a:ae:66:ef:bc:de:6e:9e:9c:e5:66:8b:a2:7c:32:a6:
         e4:8e:c4:1e:4a:ac:fc:54:db:65:ea:3f:40:fc:29:84:ba:9f:
         1d:c5:8a:f1:3f:24:37:1c:7b:6d:c2:ab:c1:6c:87:51:72:91:
         2a:27:f6:ee:bb:c7:d3:77:f4:e2:5c:54:41:b3:fd:7f:b9:18:
         30:9b:b2:97:8d:2f:96:29:50:0f:3c:e6:ee:9c:a3:2b:e6:df:
         8f:e8:77:d7:ac:0d:e1:d3:46:ff:56:e9:4a:26:6a:85:0c:f6:
         7f:5c:9a:ce:7b:b5:8f:1b:9b:dc:f2:aa:b1:63:ca:3e:bc:af:
         40:0a:95:c9:af:50:ad:b1:bd:8d:df:26:6c:4e:69:02:51:e1:
         cb:b0:df:be:af:49:ff:d9:07:60:e7:9b:96:35:85:27:f1:d8:
         00:9a:86:b0:40:ea:bc:a8:4f:5a:79:61:58:79:8c:ce:d6:fe:
         ba:cf:c6:20:72:a6:be:f3:7b:b5:82:4c:71:ae:b6:1b:a3:75:
         e4:0e:ca:9d:2c:01:a4:94:a9:65:d5:93:30:f6:46:72:58:f2:
         36:f7:7d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:25 2024 by rpki-client on console-fra.rpki-client.org