Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File:                     1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier:          QUwY6vhJ/dTbkn4QiKPwXu1BV67hgjYennf77k4Jynw=
Subject key identifier:   62:62:C2:8A:C3:8B:0D:C8:B9:4A:CB:09:63:1E:B0:1D:3C:6B:8B:A8
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer:       /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial:       019355AD917DB036AC78900A80FF90D8A545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number:          09C2
Signing time:             Fri 22 Nov 2024 21:00:58 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:58 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:58 +0000
Files and hashes:         1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: A2UGluQCq/OAbqcorNf50L4ahinzZ+o+ahpv/fXsZpg=)
                          2: OY_Q1KRxEzna22K9KSwVlp1EBC4.roa (hash: YUD+E5OPRO4EydZ5vX2LWmRK6djez0UxwAzDh5RZ3Wg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:91:7d:b0:36:ac:78:90:0a:80:ff:90:d8:a5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
        Validity
            Not Before: Nov 22 21:00:58 2024 GMT
            Not After : Nov 23 21:00:58 2024 GMT
        Subject: CN=6262c28ac38b0dc8b94acb09631eb01d3c6b8ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8c:c5:f6:76:2d:b1:bb:7a:be:7c:0e:cc:04:
                    f0:9f:4f:4a:90:53:be:55:3b:dc:fb:28:5e:15:4b:
                    31:19:af:f1:a6:73:3b:37:1f:c1:67:3d:60:a4:8c:
                    20:02:17:74:20:ae:d0:60:47:09:3b:f8:df:9a:5a:
                    8e:3e:92:f1:fd:66:02:9a:01:96:45:92:a0:0f:12:
                    8c:08:24:4b:a8:ff:ec:91:20:91:b8:db:1a:7d:dc:
                    96:0d:60:45:cc:e7:fd:31:36:8b:15:16:4c:ec:cd:
                    26:99:11:a3:e1:97:1d:0a:b3:75:8e:de:16:61:5a:
                    5c:2e:e1:95:57:45:68:98:49:c5:f8:e4:25:7e:4a:
                    73:09:a2:d4:11:05:c7:63:40:09:49:9b:5b:cb:03:
                    9b:2c:41:05:05:d5:02:c0:57:c9:28:ec:f1:87:ec:
                    29:6e:d1:80:a2:2f:7f:f8:25:6f:f7:77:cf:d3:e9:
                    d6:7e:15:79:91:3a:8d:83:62:77:59:d5:29:76:d7:
                    d1:32:53:aa:d6:0c:a5:e6:87:d5:fc:40:32:e5:e6:
                    8c:67:b5:87:12:e6:6e:b1:dd:3c:42:e7:5e:2e:5a:
                    c1:f9:a4:33:75:c5:76:f7:69:df:28:eb:b7:13:98:
                    64:ca:44:78:c6:e9:b7:12:36:b0:ff:4b:13:25:17:
                    ca:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:62:C2:8A:C3:8B:0D:C8:B9:4A:CB:09:63:1E:B0:1D:3C:6B:8B:A8
            X509v3 Authority Key Identifier:
                keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:13:35:b3:80:6c:46:46:3f:12:17:5a:3d:2d:21:bb:28:0b:
         0b:f2:23:61:96:40:82:8f:37:d5:8d:9f:b0:17:df:09:54:69:
         f0:b0:31:e4:09:00:0f:96:48:87:42:2a:f4:a3:e6:92:92:b6:
         af:95:29:ec:26:fb:53:b1:53:21:80:90:88:af:42:3c:43:25:
         38:ef:38:c0:39:3f:e3:bc:2b:fe:c8:41:e2:d4:fb:15:7b:18:
         66:a1:1b:65:21:bc:f2:68:1d:7f:05:bb:29:28:34:07:cd:46:
         74:97:d6:d3:66:52:4e:59:7e:e0:75:7c:9b:65:14:9e:25:b2:
         9d:6d:33:c6:db:16:37:a1:f2:38:78:38:3d:3f:c0:e1:12:76:
         c1:68:cf:f6:b0:4a:73:8e:a5:bd:57:c4:f3:34:b7:3e:20:25:
         7f:2e:00:86:cd:48:97:d3:3a:12:3c:0d:1b:20:88:d1:dd:6a:
         2b:2b:51:9d:92:c1:f4:a8:93:b9:4d:92:55:11:2a:a8:72:f6:
         92:41:6a:7a:0f:43:65:bd:1f:0c:0e:ba:7b:db:33:41:18:b6:
         14:c2:9c:4a:8c:a0:e2:47:d6:37:55:d9:e1:4c:29:3d:0c:d7:
         40:d2:01:89:3d:b8:3a:ea:56:2b:f2:45:38:35:6b:ea:af:74:
         56:7c:79:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:04:16 2024 by rpki-client on console-ams.rpki-client.org