Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
File:                     k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json)
Hash identifier:          1T5+n7335rZhQby8UUrKQshcVX/hdA+EGrj91d6FAbU=
Subject key identifier:   1E:23:2E:18:40:6A:E2:3C:56:AE:EF:B9:AA:78:67:AE:9C:67:2D:76
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Certificate issuer:       /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial:       0193568901366642A64FBD16830F8A3D7ABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
Manifest number:          1301
Signing time:             Sat 23 Nov 2024 01:00:39 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:39 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:39 +0000
Files and hashes:         1: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: Yr41pUCu6ONYtDlnAPb/QJYxi5eRLkgwGFwE+gvAqAk=)
                          2: n3XMckmiT5Q8JLpKX5NGulBFLuk.roa (hash: Zv4BkPAZZekI+NlDwqCdGfzYlxolQHiX1d7LzjAndXM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:01:36:66:42:a6:4f:bd:16:83:0f:8a:3d:7a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
        Validity
            Not Before: Nov 23 01:00:39 2024 GMT
            Not After : Nov 24 01:00:39 2024 GMT
        Subject: CN=1e232e18406ae23c56aeefb9aa7867ae9c672d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:38:6f:d2:a6:de:96:2e:4d:a0:35:ca:7b:24:
                    6b:32:65:a4:bd:73:60:f0:ce:0a:53:f2:61:99:96:
                    6e:7b:31:20:76:b8:f3:db:61:b0:74:52:03:f5:1f:
                    07:24:f6:c6:79:fc:ab:c1:02:2b:55:f7:4c:9a:4b:
                    3b:5a:b1:6e:a1:13:be:36:c4:7e:d8:ac:63:22:e9:
                    03:8b:67:d7:80:51:d1:ba:91:35:3c:ef:9b:db:60:
                    25:12:00:8a:d4:0b:d1:e7:b5:db:51:db:cc:0e:04:
                    f2:a1:5e:63:91:1b:70:59:75:be:bf:a2:f5:d6:e8:
                    59:15:31:d2:bf:26:2c:0c:ce:c6:53:5d:95:94:e8:
                    d1:3d:46:cd:6b:21:f3:eb:30:59:68:94:d9:dd:a9:
                    64:35:0f:43:26:78:57:83:ba:04:00:56:bf:c6:cc:
                    53:fa:87:f8:98:74:36:85:8a:80:08:6b:e6:03:db:
                    cb:b3:17:df:4f:35:a7:38:55:00:28:8c:cc:d2:85:
                    eb:8b:94:e3:89:54:09:bc:6d:7b:1c:14:d1:7b:ee:
                    9a:2d:7a:d3:32:90:65:c9:90:2e:e0:27:c9:1d:6c:
                    e7:5a:38:3d:73:c2:51:96:c5:6d:a2:52:c4:46:a1:
                    cd:a8:97:ae:90:f4:36:5c:54:1b:54:80:b4:f4:54:
                    e0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:23:2E:18:40:6A:E2:3C:56:AE:EF:B9:AA:78:67:AE:9C:67:2D:76
            X509v3 Authority Key Identifier:
                keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:c7:3a:9a:11:a4:68:be:07:47:39:d5:f8:65:7f:48:de:9e:
         00:4a:c3:e0:2a:8a:88:1c:87:dd:2b:f6:2b:e1:ee:bb:c1:07:
         11:d1:7c:ac:61:15:9e:ca:f4:60:af:40:5c:7a:01:3b:5f:d5:
         fb:91:76:20:98:11:53:07:59:c9:f5:70:49:25:0b:91:3a:5b:
         a3:72:4e:96:da:16:8d:af:21:11:89:da:7a:ac:11:40:8d:96:
         43:d1:df:31:ea:d5:4f:a9:2a:52:db:40:86:96:41:33:08:14:
         1f:73:c7:74:d6:86:5f:fb:8f:dd:d5:42:4b:33:41:5c:f8:74:
         58:d9:46:49:93:bf:8c:ab:ac:75:05:76:14:e7:16:06:62:c7:
         40:97:9a:ec:73:81:87:13:89:2c:0f:2c:4a:c2:0d:1b:65:4f:
         95:04:b6:db:f1:b5:4d:ff:cd:08:8a:ee:d0:5b:56:55:95:02:
         1f:c1:86:6e:e0:45:8a:94:ed:7b:10:14:f9:19:26:ec:56:fe:
         33:30:0b:14:8f:17:14:45:dd:c1:57:49:d0:5c:30:43:cf:b8:
         0d:40:af:85:13:bd:02:b3:3e:1b:06:d1:34:7f:ff:8a:d0:b7:
         0b:64:b4:25:63:4f:67:dd:16:02:06:07:ff:94:93:be:ba:69:
         c1:fb:a8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:27 2024 by rpki-client on console-ams.rpki-client.org