Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File:                     1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier:          8C3XiRwrStnllqBJYFgpPMlrqH+Me2lG6O5yBIwSDwc=
Subject key identifier:   53:94:3C:C0:8C:2B:EE:74:00:DD:6D:4C:70:32:31:A6:BA:59:C6:4C
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer:       /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial:       0193591C313749EAEB14A4BBB97786AA8411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number:          077F
Signing time:             Sat 23 Nov 2024 13:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 13:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 13:00:39 +0000
Files and hashes:         1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: jc2Gs287II8iN3LIN0BqqJEsfgt2dgyP8gFGpoQO3f8=)
                          2: zLVd2KSZFVzGAzCsp4qkjH2ROUg.roa (hash: c8cdmjACfrWc+i/lpPbA+SgfaQW8+wph1RE8gz+vPtY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:1c:31:37:49:ea:eb:14:a4:bb:b9:77:86:aa:84:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
        Validity
            Not Before: Nov 23 13:00:39 2024 GMT
            Not After : Nov 24 13:00:39 2024 GMT
        Subject: CN=53943cc08c2bee7400dd6d4c703231a6ba59c64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:f4:85:7f:14:63:fb:78:4d:4a:f8:11:6f:
                    1e:e4:76:20:f0:e4:ee:e8:c6:4d:a6:94:fa:4d:eb:
                    19:a5:c5:7d:af:d2:87:10:52:a6:0a:6f:56:c7:d9:
                    59:dd:0b:cd:72:5a:22:1c:a4:54:b8:25:89:78:b0:
                    5c:c9:49:15:67:44:6c:2e:7d:7b:1e:f7:98:dc:96:
                    09:fa:8b:02:44:db:1e:24:96:1e:50:aa:06:ae:57:
                    ff:70:19:20:10:fa:99:63:ec:35:5c:fd:93:7c:b8:
                    96:ff:40:c5:e4:ca:d2:24:bd:bf:06:64:51:3c:06:
                    77:46:fe:7c:5a:df:15:3e:08:f8:f7:49:7e:c0:d0:
                    7f:97:a1:12:54:46:3a:17:15:67:ec:bd:73:82:aa:
                    71:5a:7c:cf:ea:47:7b:2f:59:22:1c:a9:c7:e0:3c:
                    18:9b:19:93:d8:99:65:60:8c:8d:df:4a:99:37:85:
                    17:fd:49:91:25:eb:fe:b9:24:0e:d7:9a:ec:87:96:
                    da:37:c4:75:42:2e:4e:e2:7b:e4:be:be:1c:94:d0:
                    8c:69:90:a6:9f:fc:72:b2:07:93:df:5c:d8:c3:e5:
                    2a:02:ad:5e:1c:a4:8e:f5:fc:16:05:c1:63:6b:75:
                    1d:ff:e5:18:d3:50:f4:3b:57:ca:db:f0:68:4c:8f:
                    32:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:94:3C:C0:8C:2B:EE:74:00:DD:6D:4C:70:32:31:A6:BA:59:C6:4C
            X509v3 Authority Key Identifier:
                keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:b9:b6:5b:3a:af:cc:3a:4d:dd:e3:8e:5d:03:51:b6:e0:9c:
         a8:f6:ce:1d:8a:fb:a3:d8:71:cc:00:38:e8:4e:9a:1a:3b:0a:
         af:b3:5a:3c:7c:ad:b7:d3:1a:ca:95:05:20:ec:71:89:7f:6d:
         24:be:5b:43:b6:7e:53:4f:98:01:c5:04:c2:20:ea:e9:c6:cf:
         8b:40:aa:71:e3:8d:67:40:8b:33:e5:07:31:42:81:b8:a0:63:
         1f:6c:a8:94:2e:1c:7c:75:c2:24:48:e3:ad:92:a2:83:55:42:
         7f:83:f5:c7:0b:ef:c7:0e:cb:02:84:af:fa:18:d9:87:61:cf:
         55:b4:ff:a1:95:84:9b:f8:4b:29:47:8e:c0:75:de:ff:dc:3d:
         86:20:79:7c:97:c8:6c:d6:e2:71:b4:46:6f:5e:3e:29:47:9b:
         23:7b:c7:14:96:3d:9f:59:d5:7d:47:e5:18:25:30:8c:8f:c9:
         29:fa:62:86:15:8e:c6:53:f6:32:79:d3:ab:63:c4:34:ad:e3:
         60:c6:1f:b8:c0:fb:04:a0:d2:01:55:5f:7b:49:e6:41:a3:ab:
         70:96:45:b1:42:ea:c7:ad:48:ec:da:75:a5:27:7f:f3:f3:c5:
         47:10:ef:a9:02:91:c7:25:48:bc:d5:ec:54:b6:92:79:d4:02:
         4f:f1:0d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:51:18 2024 by rpki-client on console-ams.rpki-client.org