Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File:                     AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier:          qTyf7MaDNgnheZiozH9w+tsHcagHq65rBKDzNKGtJb0=
Subject key identifier:   F4:CD:EA:16:58:E5:44:A8:88:1A:F6:6B:14:F0:08:F0:8B:F9:23:C5
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer:       /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial:       019369D9E6FA15B39A64503E84022E6B20CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number:          1241
Signing time:             Tue 26 Nov 2024 19:01:48 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:48 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:48 +0000
Files and hashes:         1: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: glw+pUdpYZvaGXjOiigcy63VBAJC9NmYIKE6D4Mm2Xs=)
                          2: HeUZphYprJfrsKa7q-nn6-VVcXg.roa (hash: Ahmn/uiYfoljfJieKyus83NK1etVQJGy7pyV8006JBs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:e6:fa:15:b3:9a:64:50:3e:84:02:2e:6b:20:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
        Validity
            Not Before: Nov 26 19:01:48 2024 GMT
            Not After : Nov 27 19:01:48 2024 GMT
        Subject: CN=f4cdea1658e544a8881af66b14f008f08bf923c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:d1:51:14:79:53:50:80:9d:0d:ec:00:50:
                    60:2f:6e:4e:e1:f9:f4:4c:e2:6b:a7:64:69:8f:d0:
                    47:30:16:29:3c:52:b4:db:f2:b4:5d:e3:8e:01:60:
                    fe:ae:1a:80:82:9d:93:1a:9d:f8:dd:3f:39:9c:34:
                    92:8a:e4:f6:34:55:29:c7:60:c6:8c:08:61:8a:ab:
                    33:17:a9:fa:70:82:80:74:1d:eb:20:b3:eb:5a:6f:
                    b6:fb:50:ce:75:01:86:70:34:de:3e:63:d7:db:f2:
                    f5:14:82:3b:c3:cc:88:f1:2f:4f:b1:82:aa:e1:94:
                    de:9d:24:d8:dc:7d:b5:8e:5a:1f:92:c7:9b:d2:d7:
                    7b:e2:f2:fb:54:06:d3:fe:e2:b7:e5:57:1b:62:9c:
                    5a:61:a1:7a:89:ef:9c:8a:32:7f:aa:80:4a:6b:7e:
                    09:e4:1c:69:c2:ab:b7:f3:24:65:98:9f:aa:d7:1a:
                    bb:73:ef:90:57:58:ee:11:6d:4b:ce:a4:6e:ae:4d:
                    31:21:48:ff:0d:32:7a:a2:51:da:01:2f:be:b7:bb:
                    be:88:e5:ab:43:6b:94:90:c6:d7:2a:0a:33:59:ba:
                    ab:b7:ad:1a:2c:eb:ba:dd:79:e5:d6:20:64:af:91:
                    92:a9:ca:69:3e:6f:62:6a:11:a5:58:ed:4f:8a:60:
                    8f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CD:EA:16:58:E5:44:A8:88:1A:F6:6B:14:F0:08:F0:8B:F9:23:C5
            X509v3 Authority Key Identifier:
                keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:b6:2d:62:15:0e:fc:e2:d8:d8:b2:60:bf:50:57:9c:19:
         2e:aa:45:18:07:97:56:d1:57:46:67:92:b1:ce:78:89:cb:06:
         78:f3:d1:81:50:d6:bb:bb:3f:42:eb:45:0e:73:ce:fb:07:53:
         c6:41:cf:db:eb:7c:a1:fe:d7:ab:bd:fd:da:c8:17:1e:a4:6a:
         f5:4c:b9:81:55:bf:34:7f:57:be:91:4a:00:fd:9d:ab:56:e4:
         22:93:3f:4e:f4:ee:eb:f4:de:d1:ed:0c:e5:fe:e6:d2:11:98:
         a1:23:07:e1:78:0d:87:a8:23:b9:79:48:ec:44:2b:7d:16:86:
         cf:c9:09:99:2a:c9:9c:2f:df:97:93:9e:81:bf:ba:1b:03:30:
         90:ea:b2:bb:1f:28:0c:78:98:9b:c5:cc:82:28:31:c9:72:fb:
         03:e2:79:dd:63:06:3b:e9:fb:51:ff:71:f1:55:6e:f8:09:1a:
         d4:be:72:21:bd:51:a4:c2:c7:e9:cc:b5:b7:56:e6:61:41:40:
         be:05:14:68:a3:39:2e:c5:e0:ca:b1:dc:6d:25:71:04:de:a6:
         87:1b:89:7a:08:2a:e6:a4:8c:01:5a:e5:7a:c8:ae:10:31:8b:
         fb:74:2b:8d:b0:51:cd:24:be:6c:09:b5:27:87:e1:15:4d:ce:
         d0:17:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:17:44 2024 by rpki-client on console-ams.rpki-client.org