Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
File:                     FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft (raw, json)
Hash identifier:          VHf6Kw37/TNXvj/MUJJlTEXk/6o4cvqNfZuSdyQjEYo=
Subject key identifier:   D9:69:4A:05:B4:94:7C:B6:A3:70:DA:7F:C8:12:23:EB:EF:41:E2:EF
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Certificate issuer:       /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial:       01935576693E72997E8A3125593A737BFAEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
Manifest number:          069D
Signing time:             Fri 22 Nov 2024 20:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:43 +0000
Files and hashes:         1: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl (hash: NN7dViujHmC9O3mI5ZQP6ElOHnBkLlR7tAvRVGJKyPY=)
                          2: YBxGAELZSIZLCYgk4kwOKjmGcIY.roa (hash: nPqqgpVKszTLaAEiuiA6VnTGWA3df/Gyz+JMdFDkn60=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:69:3e:72:99:7e:8a:31:25:59:3a:73:7b:fa:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
        Validity
            Not Before: Nov 22 20:00:43 2024 GMT
            Not After : Nov 23 20:00:43 2024 GMT
        Subject: CN=d9694a05b4947cb6a370da7fc81223ebef41e2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d8:75:af:a4:e5:98:07:dd:0e:91:49:66:8b:
                    e1:50:95:de:52:98:8c:6c:6a:5d:68:6d:f0:2d:7a:
                    f7:d8:2a:19:4c:af:6d:60:fc:23:01:f3:c5:31:38:
                    11:ac:57:40:8f:62:8a:b0:d4:4e:a0:e8:30:2f:81:
                    23:ae:46:c4:67:d1:96:20:54:f3:a8:c9:3b:ba:40:
                    86:a0:6b:de:2e:55:64:35:96:44:65:84:35:32:e8:
                    f4:ec:b3:c9:da:f4:cd:28:a8:0f:77:fd:1d:98:38:
                    ed:ac:b1:c6:b0:7b:e2:f7:2e:c8:ba:ee:c4:95:d5:
                    24:1b:17:41:4b:9d:80:27:fc:10:70:05:46:01:03:
                    36:9e:86:cb:93:6b:cb:3d:d0:79:78:e6:43:ef:dd:
                    f9:61:59:a1:29:c5:0c:9a:23:8d:3c:de:38:99:14:
                    0b:f8:8c:8b:76:85:0d:10:3e:ec:bc:cf:cd:50:2a:
                    94:14:71:26:b2:05:75:3b:38:ce:ea:95:8f:dc:7b:
                    da:6c:de:3f:4f:42:1d:19:d6:c8:58:38:81:52:2f:
                    89:ff:ce:a0:23:40:1f:20:c6:c8:fb:17:cb:5a:01:
                    e3:12:55:4f:f5:8d:ee:a1:d7:22:c8:1d:3f:d7:fe:
                    75:7d:7b:5e:02:d9:47:37:d7:a4:65:df:f7:3b:be:
                    a9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:69:4A:05:B4:94:7C:B6:A3:70:DA:7F:C8:12:23:EB:EF:41:E2:EF
            X509v3 Authority Key Identifier:
                keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:df:81:1e:91:7e:0d:d5:41:ce:14:bd:d3:e8:8d:40:23:75:
         48:a2:90:af:3e:da:1b:f4:e8:90:78:83:ee:81:28:d2:4c:eb:
         93:d2:82:b1:da:2b:50:31:c3:2d:2e:8e:0e:c2:cc:73:0c:e4:
         23:22:08:a3:30:e8:e9:d0:27:c8:29:0a:b3:9c:d5:2b:83:66:
         5c:32:a1:c1:38:10:3f:cd:9e:27:2c:2a:d8:72:0a:1d:9b:f7:
         49:8c:01:3f:0f:c9:be:f1:d4:8d:e2:d2:b3:1d:97:dc:e1:17:
         6f:00:e0:7f:01:c1:ad:79:48:0a:9d:f5:2b:db:5e:20:56:b7:
         0d:71:ee:3a:8a:00:35:3b:9b:f9:28:58:e1:e1:06:d6:f8:ec:
         07:7f:fb:59:06:80:0b:2c:9b:28:5f:d3:1b:e9:23:cd:15:a4:
         e6:71:e8:82:0a:46:0e:9f:4c:cc:ae:40:a6:aa:70:6b:f9:75:
         5f:3e:21:85:41:9b:b4:05:29:12:8b:f9:2a:65:b7:68:10:a1:
         7c:74:4c:8f:ae:e2:3e:c0:4e:d6:01:87:21:13:ce:6c:31:f7:
         9c:d2:b3:05:e3:a1:f7:9d:b2:16:f1:a4:04:e5:7b:ab:6d:76:
         97:5c:9c:80:7b:17:21:5a:d0:d1:25:13:35:bd:b5:c2:4c:7d:
         f6:81:41:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:05:02 2024 by rpki-client on console-ams.rpki-client.org