Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File:                     60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier:          mtEc2CLbr44x6lV30Ox67uhEZfX97D5VEPlTiRs3vIY=
Subject key identifier:   A5:76:6F:B3:47:6F:9D:4C:FC:54:B2:D4:D0:99:53:84:C3:67:74:53
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer:       /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial:       01936A46678952FB5AC8E04748A1C84D7A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number:          07EF
Signing time:             Tue 26 Nov 2024 21:00:19 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:19 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:19 +0000
Files and hashes:         1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: 69EU35wnxKpY7Xj5u4fusXHvnBUZvjpM1hHxuySHiWM=)
                          2: J3gM3D9XyMg0_YhFEzLWDaMqa2g.roa (hash: MuQ0eRDjSqYqo14SiWXV2gDCb9ZDxMSNiXBacfh7IhA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:67:89:52:fb:5a:c8:e0:47:48:a1:c8:4d:7a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
        Validity
            Not Before: Nov 26 21:00:19 2024 GMT
            Not After : Nov 27 21:00:19 2024 GMT
        Subject: CN=a5766fb3476f9d4cfc54b2d4d0995384c3677453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6a:84:35:c1:4f:db:37:90:98:07:b5:7f:ff:
                    cc:c0:93:8d:ca:8f:ac:76:20:91:7d:d1:bd:16:fd:
                    e5:02:65:f3:5d:25:7c:96:08:82:4a:01:8c:fa:cd:
                    ad:bd:da:a9:e9:1c:68:4f:4b:a9:af:16:84:6d:65:
                    0e:e2:4b:a6:37:25:c4:30:92:6d:da:be:9c:d6:ae:
                    7c:fa:6a:1b:0b:ea:97:e7:20:5c:26:07:21:d9:6c:
                    b1:4d:2b:65:a6:28:97:6a:7a:76:26:8a:bb:d8:bd:
                    17:de:ea:b6:97:e7:bc:0f:19:2f:f3:ee:b9:76:11:
                    5b:89:61:ed:5a:06:06:84:d6:56:bc:1c:0b:98:da:
                    17:24:7f:cf:c1:c9:11:1c:dc:af:8e:e7:68:65:dc:
                    fc:3d:03:54:31:dc:18:3a:ad:eb:1e:7e:83:91:34:
                    d7:d6:02:8b:fb:9f:40:4b:72:25:9b:cd:6a:e1:81:
                    95:e8:23:3f:0e:0e:89:49:06:fe:9f:60:c7:19:89:
                    24:82:35:e9:2e:f0:be:1b:f7:98:20:74:15:cc:c3:
                    e5:d3:a0:39:f2:c7:cf:ff:89:ff:db:35:8c:9d:dc:
                    87:7f:43:b0:da:56:90:b9:6f:93:07:d5:76:8e:6c:
                    95:93:98:20:ff:59:7b:37:45:b8:8f:b4:93:14:fc:
                    59:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:76:6F:B3:47:6F:9D:4C:FC:54:B2:D4:D0:99:53:84:C3:67:74:53
            X509v3 Authority Key Identifier:
                keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:61:1a:08:1d:a8:0a:e8:8d:03:55:48:4a:fc:1c:b1:73:5c:
         c4:3e:a4:b0:a9:ed:53:0d:2c:79:d5:92:0d:e7:0f:3a:86:3d:
         41:b6:ff:1d:96:58:89:5a:e5:7d:c0:01:24:67:b0:12:e6:cd:
         57:8d:fa:ba:aa:f4:11:1e:ed:6f:42:57:39:50:09:c5:cc:1e:
         db:67:fd:ad:37:5a:0d:92:37:db:d9:a3:28:d3:ea:9a:dd:f0:
         2a:5a:74:18:dc:b4:73:91:0c:ee:f9:4b:66:cb:e9:7a:46:d6:
         46:24:5f:36:03:05:a6:1a:00:5a:f5:ce:fc:66:3f:c5:0a:00:
         be:6b:b1:e7:27:79:a1:fd:1c:f1:7f:cd:3c:f5:62:52:5b:99:
         38:3c:e2:0b:72:b3:66:a6:57:24:bd:03:81:c4:47:93:f1:a9:
         9a:12:57:bc:a6:70:3a:e7:37:cd:64:7c:eb:d2:02:79:71:d9:
         d1:71:5c:de:36:07:a1:5d:c5:31:f8:59:70:c2:8d:5b:25:f8:
         b5:39:03:2f:32:31:02:0a:b3:87:99:31:f6:51:92:2b:04:3a:
         55:9f:a6:57:0b:3f:ea:2b:76:2d:9e:07:02:00:66:a6:fa:59:
         4e:8e:ea:f6:96:13:a4:58:ed:f8:b3:24:16:1c:23:0f:63:10:
         ba:4d:17:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:39:21 2024 by rpki-client on console-fra.rpki-client.org