Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File:                     aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier:          iC//6WUeE5U6xwHvVl3kUpBnnCh4huPAjbiIzgkYy2g=
Subject key identifier:   E6:7F:A7:1B:43:DE:BA:B1:09:82:9D:25:4D:66:10:BF:B6:71:FD:78
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer:       /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial:       0193531A6B8D42742F7F6321E30EDF876716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number:          03CF
Signing time:             Fri 22 Nov 2024 09:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 09:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 09:01:00 +0000
Files and hashes:         1: UpMjMDt3cuHs4SwtnWZm8R7V9os.roa (hash: qeFM3POHkCk+jL1xlpd3imIz2xGuq5x2C6iLfrRmCM8=)
                          2: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: 0Y95iK/YoAN/Mf9DpM4Mcn1n5gMMUjMkKVL8qnhSXlY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:1a:6b:8d:42:74:2f:7f:63:21:e3:0e:df:87:67:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
        Validity
            Not Before: Nov 22 09:01:00 2024 GMT
            Not After : Nov 23 09:01:00 2024 GMT
        Subject: CN=e67fa71b43debab109829d254d6610bfb671fd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dc:cd:9b:a9:5d:95:1a:79:d7:5b:32:c0:46:
                    d3:76:76:5d:7f:72:e7:ff:34:c5:cd:66:5c:91:eb:
                    c6:a9:52:cc:6a:12:bb:49:4c:94:dd:a6:64:e7:db:
                    f7:fa:14:0d:5b:a8:b9:5f:f1:cf:03:f6:1a:92:bf:
                    5b:c5:43:c2:63:42:f7:5b:b5:2e:46:cc:a1:bc:7d:
                    38:8f:4f:73:fc:e0:b6:96:04:2b:ef:62:3c:eb:f1:
                    ed:07:47:d5:e9:13:37:76:53:6a:c2:d4:89:d1:79:
                    b4:cd:29:e3:34:ec:5e:ef:0a:d0:31:d4:9c:c9:f9:
                    fb:e6:f7:3c:17:2b:ab:da:d8:09:e2:48:90:34:c2:
                    c2:65:26:c7:5f:f1:45:78:d0:11:bd:3d:20:6c:39:
                    6b:82:72:8d:0f:48:3a:4e:55:94:4b:c8:07:4b:b0:
                    fb:86:6b:50:bc:64:37:9e:e7:a4:35:3d:5d:d6:ba:
                    cf:64:30:07:1a:77:49:d4:a5:73:2f:ca:91:66:9c:
                    60:de:de:42:b1:5c:52:7c:cf:30:1a:fb:04:03:21:
                    42:99:b7:55:01:78:34:7e:83:1c:a3:fc:f9:2b:61:
                    90:54:3e:b3:cb:3b:7b:5c:8c:0b:6b:10:c8:c0:c4:
                    95:d4:21:44:02:af:be:25:80:03:30:25:25:d1:d7:
                    82:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7F:A7:1B:43:DE:BA:B1:09:82:9D:25:4D:66:10:BF:B6:71:FD:78
            X509v3 Authority Key Identifier:
                keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:27:e0:28:a6:a2:60:e8:e1:e7:92:6d:b8:00:52:39:8c:
         9f:ba:ad:c8:3b:d0:89:7e:b5:22:fa:68:3c:c8:42:f9:75:4f:
         fc:72:55:e1:93:f4:25:19:f5:9e:db:52:0b:5b:25:e3:ba:b1:
         60:35:b4:22:bf:11:da:49:2c:9b:20:2a:05:93:78:64:62:c1:
         9b:bb:37:78:36:8a:17:16:1e:af:d7:76:6c:b1:92:3d:2a:5a:
         63:29:bc:7d:6f:88:f0:02:2c:88:9c:3c:e1:19:2f:0e:c4:96:
         18:6b:84:93:1f:cf:a9:69:8f:c5:54:50:e8:cb:76:3e:e9:fa:
         a6:93:cb:59:39:8c:12:62:b1:5e:58:13:1a:bd:e5:aa:10:bf:
         1e:38:64:7f:7c:8a:2e:0b:d8:10:81:4d:5d:7e:ad:32:40:13:
         79:75:bf:1f:1b:9e:16:5e:69:bd:43:91:95:e6:11:b1:84:32:
         f6:7c:df:89:94:49:7f:80:44:a5:b5:ba:5f:c5:b8:18:eb:53:
         e2:15:b9:69:3e:f8:dd:54:8e:20:fb:02:a9:a8:b7:a7:1a:48:
         58:40:5f:67:a3:da:47:6e:c6:46:80:0d:21:17:29:38:e9:2d:
         f6:a9:53:5e:5e:9c:12:b1:93:7f:b6:a2:b5:9e:2e:42:fb:e6:
         3d:63:a4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:51 2024 by rpki-client on console-fra.rpki-client.org