Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File:                     67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier:          LRKX1uGnxs64WW+x3zgARCabOTYtskhl8+Qlifz5cac=
Subject key identifier:   FA:48:98:F2:3F:67:76:57:72:3C:EF:01:5A:D3:93:EC:86:28:BC:3F
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer:       /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial:       0193553F375AF016CA4603BF97849BB65853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 19:00:26 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:26 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:26 +0000
Files and hashes:         1: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: 69VPZusWbTJRpD/nxMLTaLqi/yh4enoFCunJa3l4Sd0=)
                          2: B1hcP62p2j0mPnjZ8-cvNGdbK1U.roa (hash: VXyU1FHUzx8TikcwHaZLOEylhY7UWF10LpOaMzY1GOs=)
                          3: EohRGBwPgq_DW7ozJ4TzdI3fjjw.roa (hash: DU1I4DrrTEK3PgBnRf4iO9cIfiBHHUQwS3Cl/FgGEic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:37:5a:f0:16:ca:46:03:bf:97:84:9b:b6:58:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
        Validity
            Not Before: Nov 22 19:00:26 2024 GMT
            Not After : Nov 23 19:00:26 2024 GMT
        Subject: CN=fa4898f23f677657723cef015ad393ec8628bc3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:d1:78:f3:32:49:92:41:d9:bc:26:e3:1b:
                    56:e4:03:10:05:fe:bd:32:1c:e6:29:98:a6:3f:75:
                    2a:70:50:2d:93:95:43:ad:53:ae:03:9a:b9:39:f3:
                    a8:9b:5f:71:2a:11:c5:7d:39:cc:2a:37:24:9a:bf:
                    25:69:90:f6:fc:11:28:04:b3:ef:01:90:a1:91:b2:
                    bd:1d:78:8e:4e:a2:7b:bf:d2:7e:2c:f2:1d:b0:6c:
                    b8:da:4d:b3:bf:c0:17:27:ec:5a:4b:0c:3e:ed:b5:
                    b9:d5:ab:31:58:1f:e2:83:a0:cb:4f:7a:52:df:26:
                    c0:a1:89:bc:fd:df:c4:0b:34:6f:6d:fe:b6:be:a8:
                    1e:62:99:25:0d:e1:4a:fd:cb:38:e7:a4:53:1f:d2:
                    c2:80:71:cd:70:54:a4:df:2b:9d:bd:2b:7a:70:0e:
                    89:ab:ac:6c:82:05:df:e9:e5:d1:87:79:a5:db:92:
                    ac:ea:a1:8d:87:b5:e5:f2:16:75:99:3a:98:2e:00:
                    f0:d7:59:df:a7:10:5e:26:80:03:15:0a:76:1d:09:
                    5f:d8:88:73:71:75:b8:42:87:d7:2a:fd:4f:d2:b4:
                    8b:68:d5:d7:1d:e4:0a:ab:11:d1:0e:f5:68:74:2b:
                    d4:7c:17:f6:f2:34:b3:ae:dc:ab:8c:2e:2a:2b:6e:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:48:98:F2:3F:67:76:57:72:3C:EF:01:5A:D3:93:EC:86:28:BC:3F
            X509v3 Authority Key Identifier:
                keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d4:5c:d0:3f:56:54:86:22:3b:56:e8:48:6a:c2:14:1c:87:
         19:1f:98:09:df:0c:29:9a:3b:19:a9:8f:13:eb:71:f9:64:0d:
         3d:17:be:83:a6:95:93:b6:39:36:fc:ec:7b:80:10:19:5f:f0:
         0e:e6:67:d3:bb:59:96:c1:f4:ad:89:10:a2:43:f3:3a:5d:4e:
         c5:a8:df:a1:df:0c:41:8b:d3:01:c9:64:a8:3d:b4:2d:51:6b:
         9a:5a:b1:d1:bf:be:c1:58:d7:b4:b4:8e:be:86:1c:eb:35:f4:
         4e:b0:db:f5:e2:44:da:ca:c0:ae:ab:71:34:83:ae:cf:54:5e:
         92:57:ca:7e:2d:79:3d:33:6c:ea:82:7b:78:f1:20:91:78:14:
         d5:b8:ac:cb:f1:34:00:2f:0b:c2:06:9d:86:5b:e5:59:82:6c:
         5a:ae:ad:ed:18:6a:1f:dc:f9:df:02:18:fc:68:14:26:26:75:
         39:93:73:cd:5e:06:1d:29:c9:65:1c:98:37:ad:ba:04:b3:e2:
         b1:bb:79:52:02:b0:44:c6:f4:b3:6d:73:33:72:f3:a9:10:b1:
         5f:26:5b:87:5e:f6:a2:e1:14:75:72:cd:cd:8e:9e:cd:e4:20:
         56:14:47:d7:5d:ea:fa:39:46:86:13:44:f9:3a:db:58:79:58:
         fb:f9:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:00:55 2024 by rpki-client on console-ams.rpki-client.org