Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File:                     eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier:          6X5Ua+rT9ym3OFmNZHEL5hjSW8wpyJrAC7rIPNn56Eo=
Subject key identifier:   61:A2:73:96:76:2E:4B:20:C0:7D:74:41:7F:FE:EF:FD:40:D1:EB:D2
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer:       /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial:       01935689FB651FEB04073E814BCAC8B93AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 01:01:43 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:43 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:43 +0000
Files and hashes:         1: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: YZEKG6FTjRAmyT0C685FtBeQJz+NajQfmOYqJNEzwOI=)
                          2: tas80hspRYcaRZz6aF742hwnBao.roa (hash: duO/ZvLM1WsWdR+IXRxYGxbp0g2OE0DmHW61SEd38nY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:fb:65:1f:eb:04:07:3e:81:4b:ca:c8:b9:3a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
        Validity
            Not Before: Nov 23 01:01:43 2024 GMT
            Not After : Nov 24 01:01:43 2024 GMT
        Subject: CN=61a27396762e4b20c07d74417ffeeffd40d1ebd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:cf:42:26:39:f5:bb:58:d3:8b:1a:2f:71:
                    ea:95:ea:10:9e:b9:31:b5:44:fe:de:1b:f7:7e:a6:
                    98:50:28:de:be:d8:67:bd:db:ed:58:11:28:7a:ed:
                    a1:0c:a1:2b:76:46:cf:d7:7d:95:3d:cb:13:2f:4a:
                    2b:65:f8:0b:b0:29:fa:80:36:7c:5b:28:7c:e1:11:
                    c9:00:9c:30:e0:a3:42:6f:41:5b:4e:5b:84:52:60:
                    a5:6d:ea:25:f2:d8:c2:1c:60:b0:50:8c:f9:11:3d:
                    42:63:e8:69:93:4b:8a:03:86:35:95:4d:e7:6d:20:
                    64:9d:50:30:24:4a:74:61:46:5d:21:c6:1e:00:01:
                    1b:c1:20:6e:ab:fa:4c:0c:85:a7:65:97:5b:b2:26:
                    12:e4:5c:14:e3:1c:3c:48:f7:c5:c0:2c:c7:06:38:
                    1f:38:9a:93:0c:8e:75:76:2a:d6:d5:b5:13:70:6f:
                    b0:57:9c:6c:87:bf:69:11:24:7b:77:4f:9f:22:cc:
                    bf:dc:a0:45:fd:8b:b7:e5:90:7c:31:37:52:42:44:
                    02:43:dd:92:66:03:21:1d:1f:f0:b0:23:f5:34:8e:
                    63:8c:a3:68:cf:b6:4a:3e:61:94:64:79:fc:79:c1:
                    39:a9:27:2d:72:84:82:41:ea:e5:bb:a5:e0:94:96:
                    56:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A2:73:96:76:2E:4B:20:C0:7D:74:41:7F:FE:EF:FD:40:D1:EB:D2
            X509v3 Authority Key Identifier:
                keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:39:4d:23:ea:b9:2b:b8:47:b0:af:44:6e:86:cf:5f:2b:b0:
         b3:2c:cb:3d:df:a9:f0:e3:63:24:34:31:ad:c9:06:36:cc:34:
         89:e5:6c:96:a7:fe:06:77:6e:66:7a:29:88:9f:ec:c8:bb:2c:
         e0:d0:c9:f2:2b:0c:63:30:4b:35:2a:73:8f:17:ec:47:4f:d3:
         4b:0b:2e:c0:f7:95:82:b1:7c:d0:4d:03:08:cf:fe:5f:bc:2d:
         0d:3f:00:cc:8c:d3:4a:f7:0e:33:0f:c9:c5:e1:56:25:ad:58:
         76:06:c3:c0:47:75:08:57:df:3c:02:00:d8:53:b3:57:e6:1c:
         89:62:86:4f:6e:9f:46:a1:7f:50:df:87:fe:26:84:74:ca:f0:
         51:51:1b:68:b3:4a:c1:61:7e:3b:c2:18:b9:a4:2a:09:da:9b:
         8f:b2:fb:d0:ef:81:8c:03:ee:3f:d2:fd:d0:81:70:00:dd:db:
         3d:90:19:a7:85:07:25:d1:8a:ff:6c:92:e2:7c:50:71:d0:85:
         c7:fb:bb:19:41:bc:3b:b7:77:aa:ce:51:5d:83:9a:c0:84:19:
         42:5c:9d:e1:e7:a3:19:cf:4a:90:0e:c8:59:89:94:5a:20:b7:
         dd:10:97:07:bc:ab:b7:bb:72:49:b4:f1:db:68:84:c5:13:57:
         a2:26:7d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:40:04 2024 by rpki-client on console-ams.rpki-client.org