Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File:                     8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier:          rGvI5U8R29Lwpq/ih5r48SPGS8F6faoH473hNdAiim0=
Subject key identifier:   42:73:87:C6:31:14:D8:40:0F:AF:1B:2B:93:E7:20:E5:C7:79:97:D1
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer:       /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial:       0193549C84C07EAACBB80C6A5DE22EF380D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number:          0D60
Signing time:             Fri 22 Nov 2024 16:02:43 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:43 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:43 +0000
Files and hashes:         1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: V56yZBXSUx+HZ9DCLd16BUIxYiyd880v09OLj0zCXsQ=)
                          2: eFtSwwtnTl7b9alX_8ZYSt2PTTs.roa (hash: 9HYs8rxJ+j9PKqDnMKhBF5+z9Cun5pSGlLuC0TSP20o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:84:c0:7e:aa:cb:b8:0c:6a:5d:e2:2e:f3:80:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
        Validity
            Not Before: Nov 22 16:02:43 2024 GMT
            Not After : Nov 23 16:02:43 2024 GMT
        Subject: CN=427387c63114d8400faf1b2b93e720e5c77997d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:25:78:20:31:49:2e:7b:55:13:ef:ff:1c:5f:
                    15:3f:7b:54:41:a2:71:dd:1b:6f:48:0c:c0:17:0e:
                    b6:46:be:66:46:26:62:9e:d3:a6:c7:9f:1b:e7:ef:
                    18:cb:c3:d9:93:72:be:01:b1:e7:c2:cb:19:5a:3b:
                    73:a6:6f:0e:e3:e5:b4:c4:e8:f6:c1:eb:b2:06:99:
                    84:9f:7f:89:43:42:01:a3:a6:c9:c8:86:1a:03:e6:
                    cd:b2:31:64:72:e0:54:d1:19:fb:ca:fe:7c:66:ff:
                    b9:09:35:c1:c6:ab:70:0a:10:41:66:d5:cf:54:75:
                    39:75:d9:2b:dc:ea:c4:f3:ea:4c:d6:da:9b:0e:64:
                    cc:42:1c:b4:4d:67:a8:dc:81:f1:58:ad:2b:3f:81:
                    7b:7a:5f:cc:34:8f:a1:0a:2c:27:93:dd:4a:61:bc:
                    84:5a:0d:8f:74:6b:09:51:07:cb:59:c4:0d:37:53:
                    77:a2:30:4c:b8:05:bb:78:7d:92:35:f3:65:13:5f:
                    aa:3d:11:4e:b3:84:19:81:50:78:91:9a:23:9d:be:
                    b5:b5:89:41:f0:40:26:b1:37:62:ca:74:9e:6d:a5:
                    d1:79:35:1c:9f:4e:24:ec:6b:e3:54:21:5a:2b:d8:
                    8b:43:e8:1f:fd:38:e6:37:55:e6:47:4e:e3:5b:85:
                    36:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:73:87:C6:31:14:D8:40:0F:AF:1B:2B:93:E7:20:E5:C7:79:97:D1
            X509v3 Authority Key Identifier:
                keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ca:49:02:03:d2:f7:7d:b9:75:da:49:7c:88:eb:d1:a3:c2:
         04:b2:52:ef:48:85:4e:33:b4:c8:91:76:2f:c0:a4:71:c6:1b:
         69:10:ef:c6:19:3d:27:01:37:65:a5:d5:73:b9:72:58:26:b7:
         df:cc:4b:b0:51:9f:d8:6e:87:59:1c:de:e2:40:37:10:26:85:
         cf:2f:74:b1:ea:c0:3b:8e:61:46:0a:fd:46:c4:86:98:c0:1e:
         d4:98:6b:ad:f1:61:60:7c:2a:61:7a:36:73:2d:e2:95:6a:aa:
         fe:29:38:77:88:72:98:38:95:29:77:c0:f3:ea:b7:1b:4a:27:
         c7:57:24:bf:56:ad:29:41:7d:3f:c2:54:4d:4d:3b:87:30:9a:
         06:c2:78:1f:26:a1:f7:3a:09:6d:2e:92:7a:18:af:25:58:d8:
         0b:9d:9b:b2:ff:46:26:17:5b:50:51:8a:4e:b5:86:73:e3:73:
         54:a5:37:96:3a:70:ba:3a:c4:23:1d:92:a1:3d:bf:2e:89:81:
         57:ff:29:ff:53:34:20:f9:b0:d4:1b:cc:e0:79:be:58:c7:81:
         de:1a:03:02:71:64:3e:cb:4b:3d:99:bf:f4:4c:f6:46:0a:c1:
         e9:3d:a0:a1:6d:26:fe:21:0c:3b:7b:0c:81:72:f8:9a:fa:ca:
         21:f9:08:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:51 2024 by rpki-client on console-ams.rpki-client.org